Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: ggNUQn2ZKvy1RCu9zroS7ThuXtVrEI7FStuVPJcFPEc=
Subject key identifier: 3B:06:F6:C7:12:F7:10:5A:E2:B0:59:F1:3F:45:94:A9:B9:D7:4A:6F
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 019D27A8E6D80AC9DF8D4EB9C64BA9769ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0DF5
Signing time: Thu 26 Mar 2026 01:01:13 +0000
Manifest this update: Thu 26 Mar 2026 01:01:13 +0000
Manifest next update: Fri 27 Mar 2026 01:01:13 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: RxFuehlgyhCimyEaWQ+EZck7bUbRpvYROXMWhO9V214=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e6:d8:0a:c9:df:8d:4e:b9:c6:4b:a9:76:9e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Mar 26 01:01:13 2026 GMT
Not After : Mar 27 01:01:13 2026 GMT
Subject: CN=3b06f6c712f7105ae2b059f13f4594a9b9d74a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:a8:11:fe:8a:f3:d7:21:56:f6:91:11:b6:
03:f9:0b:5c:e9:26:58:05:f0:62:dd:f6:f3:31:b6:
f9:2b:37:d1:12:7c:e3:4b:55:7c:b6:76:af:44:ae:
13:6a:a3:6a:95:85:b5:76:9c:ba:8a:74:2d:f3:95:
4f:e0:00:40:69:a7:06:6f:26:32:b0:07:8c:a1:f2:
ab:0d:6b:10:fd:fb:17:09:aa:62:90:57:d5:7b:a5:
7e:d3:82:d5:eb:e5:f9:c6:bc:fe:08:c4:96:9d:71:
a4:97:a3:f3:43:11:ad:03:92:f2:b0:85:41:7c:c0:
1f:b0:bc:95:e6:31:9d:26:69:c0:77:fb:eb:45:94:
a7:28:36:66:18:9f:e4:f9:ec:0e:5a:1a:ab:4e:cb:
41:9b:13:cd:88:60:d0:24:d6:d1:79:8e:5c:60:c7:
2a:b2:6b:00:03:2b:26:69:9b:62:a7:c8:27:19:44:
38:37:d7:f3:5b:c4:94:9a:ea:8c:fc:60:48:ab:b2:
ab:20:60:51:f1:af:82:28:17:18:15:fa:93:96:9b:
23:cd:8f:0d:58:8f:08:74:b2:d8:65:48:6e:11:a0:
7c:e6:4b:52:cc:a4:6f:49:0a:a3:3d:3b:ee:92:6e:
9d:a9:62:bf:9a:f3:4e:f8:38:09:e0:27:71:8e:70:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:06:F6:C7:12:F7:10:5A:E2:B0:59:F1:3F:45:94:A9:B9:D7:4A:6F
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bb:72:f3:1a:91:ed:9f:4c:79:ea:2c:ca:41:d7:1e:9b:bf:
0b:f2:37:20:e3:38:b4:6e:e6:75:a7:5b:77:54:34:65:0f:56:
73:4d:16:06:06:ce:4d:45:72:f6:79:df:25:d3:3d:2e:f1:5c:
91:6a:d9:a1:f3:12:33:ff:a3:78:09:68:dd:f5:06:f1:d0:5d:
11:f0:7a:f9:18:73:94:d0:6b:da:f8:67:a9:8f:ee:91:a9:92:
5b:b4:4a:26:ea:96:9d:97:4b:32:e8:03:32:d4:59:c7:09:da:
23:a7:d1:ca:f3:95:37:8f:40:2a:21:d8:2c:70:25:45:48:72:
54:f6:59:8d:13:3a:ec:7e:86:98:63:4d:4e:0e:01:61:21:3b:
5c:81:8a:4c:05:6e:09:6a:ad:1a:32:2f:73:4f:60:26:34:6a:
2d:50:e8:92:75:5b:51:dd:29:87:56:4d:0b:e3:df:ee:59:30:
91:52:e9:ab:f6:8d:4e:99:3d:19:c6:41:e7:75:8d:75:2c:39:
da:42:ba:69:77:0f:06:13:d2:4c:e4:fa:eb:bd:0b:75:71:d4:
61:58:8c:ce:c5:c4:6b:c9:1a:67:05:26:f2:59:af:df:53:6b:
d3:c2:da:53:3b:a1:f1:ac:78:e8:08:57:89:24:ae:f6:1e:90:
d4:9d:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:48 2026 by rpki-client