Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
File: kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft (raw, json)
Hash identifier: bLFYZ3Lpc4H7HtNRCMsCn+m1ReN3BlWds82CKROlPXk=
Subject key identifier: 8B:9F:AE:D4:E8:C4:18:4C:9C:01:F2:19:EC:F3:1C:76:EB:1B:ED:6D
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Certificate issuer: /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial: 019D28F2381D781F1B281E9E1026B5BFD269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
Manifest number: 1124
Signing time: Thu 26 Mar 2026 07:00:55 +0000
Manifest this update: Thu 26 Mar 2026 07:00:55 +0000
Manifest next update: Fri 27 Mar 2026 07:00:55 +0000
Files and hashes: 1: T9aoETtBOnAVOsZczCvbKoC8bLo.roa (hash: VbBc2wBHX0IMIYgXxrNNTjAei7gPUDMqr5TSGjCiTRo=)
2: kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl (hash: ifiq9xnfQL2Mg087UftwchNJxAi8FBFuCC5ptn1BcNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:38:1d:78:1f:1b:28:1e:9e:10:26:b5:bf:d2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
Validity
Not Before: Mar 26 07:00:55 2026 GMT
Not After : Mar 27 07:00:55 2026 GMT
Subject: CN=8b9faed4e8c4184c9c01f219ecf31c76eb1bed6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:67:d2:55:ec:82:07:e9:31:3f:90:f6:8d:
be:3f:57:1d:2c:17:71:45:f5:40:0e:87:1a:80:76:
10:aa:53:28:9a:17:6c:ec:7c:fc:1d:0f:2f:70:b7:
ea:1f:f0:e6:52:d5:be:82:81:95:03:2a:c9:90:e8:
d6:79:80:3c:7b:a3:dc:83:84:21:9d:e1:53:96:a5:
05:67:15:ad:10:d0:fa:48:ca:f3:f8:b5:31:a1:56:
4e:00:b3:27:ef:5e:63:85:18:cd:25:97:c2:ee:ed:
1d:13:9c:74:62:2d:bb:6f:e1:c5:76:60:ea:56:9a:
9e:18:ca:ae:c0:4f:8e:9b:70:be:9b:13:71:ab:d8:
36:b2:d2:0d:12:26:de:88:7a:3a:41:e6:db:4f:fe:
55:69:9b:0f:5b:c3:b9:2e:87:e3:5d:21:a7:48:a2:
6b:de:2c:12:3f:56:09:0e:0c:8c:09:7a:01:f5:99:
55:54:1a:d1:19:14:db:c7:a5:9f:17:c5:9a:1a:0c:
a1:18:e4:ba:73:91:3c:46:a4:fa:17:d1:19:7d:9d:
13:f4:4f:e6:05:a6:7f:3a:9d:b2:89:f8:73:69:f9:
44:18:8c:1a:e6:c9:ef:66:32:9c:e8:0d:d9:21:48:
91:4e:12:d1:63:8b:cc:56:39:10:ac:f8:ce:97:bd:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:AE:D4:E8:C4:18:4C:9C:01:F2:19:EC:F3:1C:76:EB:1B:ED:6D
X509v3 Authority Key Identifier:
keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8b:44:3a:0e:fe:d4:4e:06:d9:06:80:4d:e9:fa:ad:ae:8e:
d6:0f:36:38:dd:14:60:dd:9c:fd:99:57:78:75:69:7f:61:9a:
0e:b9:86:46:2e:a3:a8:87:4d:4c:84:cc:19:a9:ea:e0:53:b1:
11:75:54:41:6f:07:ee:d2:78:c6:b7:86:cb:e4:81:1e:03:b1:
4f:7f:81:63:08:52:fb:ce:a9:52:a4:52:5d:df:cf:ab:64:c2:
ce:37:c1:37:11:09:06:22:56:6e:12:4c:9f:f8:92:5c:8d:5d:
cf:6f:38:02:c4:ad:3e:2f:97:16:fb:0c:85:59:28:63:9c:11:
05:0f:01:e9:b7:58:7f:2d:27:5f:18:c0:8c:45:dd:1a:ad:6a:
90:19:c0:b1:f7:4e:09:63:1c:03:4d:ec:fd:1a:f3:31:3b:00:
f6:f2:f7:94:45:43:9d:a2:dc:b9:ff:0b:bc:5a:2b:b4:c9:33:
e7:13:a2:2e:1d:14:43:7c:12:cc:93:3c:c2:88:bd:98:80:fb:
0c:f2:2a:e8:e8:82:b9:ef:15:d4:e6:4c:e2:9c:80:b7:45:a7:
f6:66:0c:ac:07:ac:4a:eb:75:94:1b:2a:3a:78:ee:a5:67:28:
35:c3:96:a3:17:59:d6:e9:ae:16:7c:32:50:98:10:f3:95:31:
3e:b5:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:22 2026 by rpki-client