Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: Ln2J4vI6a/bdcbVL/rDTO9UVsM1u4fiESFLpeD079Eg=
Subject key identifier: 22:F5:07:64:76:E8:75:F2:56:32:10:84:51:1A:A3:5C:24:18:34:8B
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 01A0D42623D369A3C3933EB693D64C0461BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0FDC
Signing time: Thu 24 Sep 2026 16:01:04 +0000
Manifest this update: Thu 24 Sep 2026 16:01:04 +0000
Manifest next update: Fri 25 Sep 2026 16:01:04 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: BjycTl0tVMhO78BZsgDoo3Eh3+ohcGbhe3OeuwGO9+o=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:23:d3:69:a3:c3:93:3e:b6:93:d6:4c:04:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Sep 24 16:01:04 2026 GMT
Not After : Sep 25 16:01:04 2026 GMT
Subject: CN=22f5076476e875f256321084511aa35c2418348b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:d5:86:e6:70:d8:57:05:71:b1:fe:f8:79:
41:34:38:21:62:b7:5a:21:28:6e:ba:c7:15:7c:5d:
27:05:ea:92:8f:b1:4a:59:a4:3c:8b:96:38:b6:d1:
93:3f:8e:22:bf:26:38:dc:5f:88:17:e5:49:0d:19:
be:17:2e:ee:d6:0c:9e:22:c0:98:12:45:10:56:20:
b9:39:4a:e8:01:a5:8d:d7:99:cc:df:9b:a2:1b:cd:
e5:b7:3f:67:f3:5c:59:ce:94:28:86:b3:72:2e:fc:
ce:28:27:ff:45:13:88:33:c7:5c:de:f7:c0:73:1d:
17:ae:7d:39:1d:66:75:76:02:9f:b0:c3:4c:54:5b:
c0:6a:e7:1d:94:5f:18:9b:ae:8c:0f:f6:22:31:1d:
dd:b7:3a:af:07:ee:cf:cc:1f:80:38:93:09:23:31:
47:13:db:85:1e:11:c4:f0:0e:87:68:9c:d7:6a:c5:
5a:c3:89:b7:e9:cc:8a:be:21:48:0e:8f:13:43:8c:
a2:04:fe:a1:39:24:86:83:00:d9:91:93:37:4b:4a:
33:de:d3:6f:e6:b8:53:cf:3e:83:4d:d1:69:b5:1f:
3c:64:f9:85:e7:b4:19:a7:0f:79:a8:d5:6e:d5:a5:
e0:35:bb:6a:5e:82:aa:ba:ab:39:a0:2c:be:ff:c2:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:07:64:76:E8:75:F2:56:32:10:84:51:1A:A3:5C:24:18:34:8B
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ac:98:4d:b8:94:7b:9f:15:65:86:31:33:d3:72:3f:93:66:
00:1a:15:a1:22:a2:3c:e0:8d:f2:fd:b7:d5:88:d0:8d:d8:11:
07:1c:42:a1:df:de:fd:91:99:c4:72:16:48:6c:7f:85:ed:e7:
c6:d3:8e:99:1d:89:16:09:58:ea:47:2c:32:90:7e:47:fb:f1:
a5:99:3f:e5:3c:a5:b7:ce:23:2d:d3:40:bc:f6:1d:2a:ed:3b:
5e:4d:aa:2a:fa:7d:d6:09:d1:05:37:bd:8d:56:30:ab:52:e4:
63:90:33:ee:16:b0:51:19:1c:87:af:a5:de:25:25:2e:5a:20:
56:79:05:e2:30:ba:e8:b2:7b:c5:ed:71:40:b6:0a:e5:fb:a9:
25:04:8e:42:24:3f:d6:c6:5a:d9:8a:d2:34:1e:3e:9e:48:71:
75:83:31:36:9a:65:78:cc:d9:3d:b0:ca:6b:86:83:68:3e:c7:
35:e5:a0:54:97:02:f3:f3:c9:0e:64:ed:6b:72:fa:35:4f:df:
11:70:24:20:c6:ad:80:b7:b2:28:7e:1c:00:4f:47:44:40:34:
f7:4e:19:70:75:48:91:5e:ce:fd:ca:8f:c8:7f:c9:3b:5e:55:
66:c1:31:81:3c:bc:19:2d:ce:21:c4:b0:ab:01:4f:5f:20:7b:
12:5a:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:44:52 2026 by rpki-client