Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: J9THa0GEO3eN86KKqzPNpl2tXbdb7UfFhXTLLKdZ/mE=
Subject key identifier: 5C:95:44:BD:AA:7E:B8:A2:8E:5B:1D:08:65:E4:16:49:8F:8A:49:D8
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 019F91A421C25CB929FCC0448A81DD08F171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0F35
Signing time: Fri 24 Jul 2026 01:01:20 +0000
Manifest this update: Fri 24 Jul 2026 01:01:20 +0000
Manifest next update: Sat 25 Jul 2026 01:01:20 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: 5pQN4bn8WESQ7u4SuF2qipSKl/HU83RJA73KLZdZTko=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:21:c2:5c:b9:29:fc:c0:44:8a:81:dd:08:f1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Jul 24 01:01:20 2026 GMT
Not After : Jul 25 01:01:20 2026 GMT
Subject: CN=5c9544bdaa7eb8a28e5b1d0865e416498f8a49d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:b5:65:e7:11:d4:5e:4c:97:ce:71:a3:fe:
cb:fe:07:88:1e:11:7b:3b:da:43:e1:75:82:9e:a1:
57:e4:68:16:cb:0f:51:ec:94:d0:a3:ea:c5:8a:4d:
52:e4:85:e1:da:98:99:fd:90:e4:7d:dd:95:e5:dc:
5d:c4:0a:28:84:40:84:4f:61:e5:9b:29:39:fc:f7:
85:9b:2f:32:18:5d:64:b4:f0:c4:c1:c7:6e:5b:34:
df:ac:db:e5:b2:a1:c7:bb:80:f8:9a:5d:bb:f9:53:
54:4a:3f:68:9e:d3:c6:19:c0:76:a5:06:6d:8c:87:
0a:14:a0:04:96:4e:f2:9e:48:3f:b8:2a:c6:69:10:
04:43:8d:ce:65:22:62:7f:d4:fa:c9:69:2f:87:19:
33:2e:39:58:7d:b8:e8:a6:35:14:7d:94:9a:96:76:
84:57:e0:92:01:30:7d:9a:eb:fa:d2:b2:47:0f:dd:
9e:8a:7a:00:62:99:7a:ee:a2:21:05:c9:fb:6b:19:
9c:06:28:18:18:1c:c1:ec:67:bc:ae:03:b7:b3:14:
ec:7c:54:96:af:37:89:a9:3e:ad:e2:08:de:8f:81:
ca:03:b8:14:d6:3c:ca:35:08:33:a2:28:d4:40:3f:
78:e6:32:10:f4:e7:25:87:9f:dd:90:46:3e:ee:1e:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:44:BD:AA:7E:B8:A2:8E:5B:1D:08:65:E4:16:49:8F:8A:49:D8
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:86:53:a9:5a:e2:50:7f:fa:73:29:b7:0e:a9:61:fc:95:59:
47:0a:d0:8d:d7:37:26:60:0d:80:31:37:5d:26:7c:33:6d:ca:
a4:92:21:22:67:5a:86:a9:06:06:3c:cc:f0:8c:56:17:9f:16:
34:52:25:5b:ba:ba:cf:33:15:e3:bb:d0:2f:74:65:45:2e:5b:
14:5c:79:3d:e4:86:4b:64:0f:b1:f5:12:f8:61:08:66:cf:ea:
ac:5d:b4:37:e9:89:01:bb:f6:d6:7a:03:d8:2e:92:08:e3:94:
8d:18:ae:3e:0c:a7:b0:e8:3d:5b:4a:02:30:7b:0f:74:42:94:
1a:3e:a8:0c:6a:46:22:29:93:ae:cb:b4:ba:75:9f:c1:d2:b0:
18:b9:85:e9:ca:f7:97:f5:9a:26:cc:6b:de:56:6f:2f:eb:f3:
34:ce:c4:59:ad:07:b0:8f:4c:9e:22:8a:77:9c:59:65:8a:e7:
34:99:e3:34:ee:44:3a:8b:57:62:61:b6:3f:46:ce:e7:bb:5f:
3b:33:2c:d8:ac:90:d0:63:38:9f:66:bf:ce:93:21:a4:e3:98:
a2:40:94:11:eb:9e:eb:c4:2e:0d:af:5c:e9:40:07:c8:df:3a:
05:ed:d2:93:82:f3:c1:d5:eb:fa:ff:11:6a:97:1b:0f:98:78:
a4:59:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:20 2026 by rpki-client