Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: 7aV4znSp3x9YFHG9vKRLlDiD3XkPT7dLTPpxnYvd6tY=
Subject key identifier: 0A:45:13:CC:24:64:9D:CC:60:7A:3D:69:B8:0C:12:A1:6D:D8:3E:EC
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 01A0D9F14FE092448CF8C2EBF2D6ABB694A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0FDF
Signing time: Fri 25 Sep 2026 19:01:05 +0000
Manifest this update: Fri 25 Sep 2026 19:01:05 +0000
Manifest next update: Sat 26 Sep 2026 19:01:05 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: J3GgAXSZ+w1IK/xvcoVCbvI8VwnuIAX9/DpuTjXv1IM=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:4f:e0:92:44:8c:f8:c2:eb:f2:d6:ab:b6:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Sep 25 19:01:05 2026 GMT
Not After : Sep 26 19:01:05 2026 GMT
Subject: CN=0a4513cc24649dcc607a3d69b80c12a16dd83eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:6a:f5:0c:36:b6:a5:ec:e5:f6:f1:8e:64:
de:4e:b3:8f:17:67:3c:be:6f:40:5a:48:60:39:17:
29:3a:75:a9:f2:d2:eb:ac:96:9d:03:fd:ec:27:16:
1d:b1:22:de:88:42:73:ad:83:49:66:33:0f:dd:31:
c2:aa:4b:ff:e3:61:8e:0d:38:3d:bd:12:1e:da:14:
ac:b5:e0:9f:dd:67:6e:03:8b:dd:41:9d:ac:42:c7:
fd:60:a3:92:b6:08:5b:f0:bc:c9:a2:af:f5:e8:59:
ff:d9:91:0b:ae:21:1e:64:95:80:7b:80:f6:b8:b0:
d7:c0:6b:3c:c7:09:f8:0d:47:8c:3e:dc:b5:cb:f6:
0f:b5:0e:1c:e4:5c:28:2e:79:95:6d:f1:7d:bd:82:
37:9c:0c:7a:45:21:7e:0d:be:12:72:f1:10:85:26:
16:6a:9a:4f:fb:c8:14:a1:57:2c:b7:e5:92:c7:21:
78:44:90:9a:bd:5d:7f:86:9f:00:ce:6a:23:b0:6c:
1b:72:b8:4a:ee:76:b9:9a:2a:4d:60:a3:01:5c:d7:
7f:d0:0b:59:5d:23:a3:de:a8:0f:33:6b:df:0f:70:
0d:c6:cc:04:01:4a:c7:54:3a:6a:43:77:87:f8:3d:
41:f1:9c:dd:52:3c:0f:4d:46:08:0d:08:6b:47:06:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:45:13:CC:24:64:9D:CC:60:7A:3D:69:B8:0C:12:A1:6D:D8:3E:EC
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:9c:70:68:b7:6d:c8:42:51:aa:97:37:63:44:ba:5e:f6:
8d:22:e2:79:29:3f:75:dc:42:50:92:25:c0:dd:4d:ae:b5:54:
15:72:23:57:9c:85:fd:fe:f9:22:ea:45:fb:55:c0:20:33:df:
df:6b:85:ba:62:6f:1b:93:a7:1d:b4:33:c0:4c:0c:01:2f:0c:
53:58:89:66:dd:e5:96:d7:0d:d8:b2:b2:36:2b:6a:cd:c4:d1:
76:93:a7:43:52:6f:a4:f5:2f:00:70:58:59:4e:a5:d9:82:4e:
40:d1:65:df:1b:33:11:96:63:3b:37:d6:c4:19:67:39:cc:01:
3f:58:35:53:41:65:fc:d4:97:2a:8a:73:4d:ee:b5:4a:81:0c:
2f:7f:15:77:31:e8:1f:01:4d:25:49:e4:76:42:68:63:12:79:
69:48:8c:48:05:e1:a3:8b:17:a8:51:5f:c3:b7:7a:6c:23:d2:
74:a8:e3:bb:c9:5d:64:b2:a7:9b:e0:77:0e:e5:ef:55:fa:c0:
41:f9:6e:c9:a5:36:ca:8f:b4:ef:a2:49:dc:fa:04:dd:8a:44:
1f:34:4c:69:3f:fd:2b:be:57:65:5f:f7:70:b4:fb:ca:da:c1:
b0:93:9a:76:8f:24:7f:90:74:5c:2c:88:0d:df:9a:23:ea:46:
a9:ee:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:55:13 2026 by rpki-client