Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
File: kgtMGcL-ljv9eZwqGV-GaC3nflU.mft (raw, json)
Hash identifier: lxu9fyOe3X7kod9MIiwRDS/jVXrd7TAKtWtvvyYElcM=
Subject key identifier: 2A:61:3D:C3:95:03:ED:FD:89:D1:F3:F4:50:C8:39:A7:5D:9F:15:01
Authority key identifier: 92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
Certificate issuer: /CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Certificate serial: 019FAC087F9D8905D2A83589A99EE7A8D374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
Manifest number: 11
Signing time: Wed 29 Jul 2026 04:01:05 +0000
Manifest this update: Wed 29 Jul 2026 04:01:05 +0000
Manifest next update: Thu 30 Jul 2026 04:01:05 +0000
Files and hashes: 1: WEwBpxaMC4nIG4w4vl_e2xC8V98.roa (hash: z9bbJLmUEVXg0O+C6bGdQnkEYUAIO6F1iJAXdJlUcMU=)
2: kgtMGcL-ljv9eZwqGV-GaC3nflU.crl (hash: t90GOMYU+v912jmzZnQJtfF2mmEjiT5Yfzg7y9fnl6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:7f:9d:89:05:d2:a8:35:89:a9:9e:e7:a8:d3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Validity
Not Before: Jul 29 04:01:05 2026 GMT
Not After : Jul 30 04:01:05 2026 GMT
Subject: CN=2a613dc39503edfd89d1f3f450c839a75d9f1501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:63:cf:ee:02:24:28:d0:f1:e6:ca:46:4d:
0b:7d:48:38:b7:5f:b3:9c:f3:26:57:60:16:63:14:
89:0c:e4:8a:b5:74:8f:04:53:50:fc:68:85:df:0a:
c3:e7:5b:9b:72:07:4f:f0:b0:b1:4c:cc:37:c7:fd:
06:a4:b7:d1:46:a0:02:c6:bd:f3:84:9e:27:0e:b1:
21:99:90:39:e1:e2:4c:3a:fb:cc:d8:aa:6b:e5:29:
13:fa:b5:e9:41:40:e0:b2:be:f3:61:20:6a:17:b9:
3c:06:22:42:46:34:35:c2:0f:d6:7f:ff:34:f4:18:
3a:ee:50:81:95:ab:c8:7b:59:d5:28:71:77:7c:87:
71:52:74:20:d3:0f:88:61:91:ca:03:20:45:c5:f5:
ab:40:7d:2f:81:7b:07:1c:96:1c:40:1c:ee:48:f8:
9f:49:f0:76:82:74:31:ee:0a:df:9d:18:aa:02:92:
d6:ed:fa:9d:8f:f4:7e:b2:87:12:e5:e1:b0:84:90:
94:0a:0c:e1:7b:94:35:3e:d0:f9:1b:42:e4:72:8c:
ad:cb:46:42:37:5b:dd:bd:8c:c7:41:3a:47:94:77:
15:e9:22:b9:8d:6c:f9:92:6a:55:08:34:f8:9c:2d:
dc:ad:2c:a3:2c:2b:5e:32:61:c4:cb:d1:a8:e7:44:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:3D:C3:95:03:ED:FD:89:D1:F3:F4:50:C8:39:A7:5D:9F:15:01
X509v3 Authority Key Identifier:
keyid:92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:ac:a2:44:91:aa:c9:e5:ce:bc:df:7f:3e:dd:7e:84:d3:
be:34:2d:5d:fb:bb:06:38:c1:68:f7:c2:3d:fa:86:d9:5e:62:
c5:60:33:34:da:b3:3d:30:c5:29:e8:05:89:b3:1a:92:df:b7:
0d:73:3d:1e:c1:71:9d:bc:34:05:10:64:55:47:15:30:25:b9:
23:da:e7:91:3f:f0:98:a4:f8:1a:49:42:8e:8a:20:3c:94:6f:
47:d2:3f:c8:bf:a1:e7:ef:39:d0:92:dc:fa:56:77:85:48:17:
1a:f5:f8:ae:a7:e6:36:df:b7:26:75:0d:13:d5:f9:ea:ec:16:
2c:81:01:35:be:51:60:8f:1a:b1:9f:55:7a:bc:d6:ed:00:38:
0f:44:db:53:d6:5c:f2:3d:86:29:48:45:33:09:9a:17:09:45:
7f:fc:79:0a:ce:ab:d4:35:7f:c5:8e:03:59:fe:e0:df:8d:ed:
14:b5:35:8b:66:a9:82:37:24:89:cf:a2:b8:b3:6c:53:d7:34:
84:45:f8:da:ff:fc:07:89:5f:a3:51:f3:33:a8:a4:dc:ff:87:
25:a3:05:be:c3:1f:cc:0b:51:b7:2d:84:44:c7:3f:08:13:f8:
d0:6f:43:9e:a7:5e:4f:ca:23:17:3f:2a:ec:eb:37:7d:af:2a:
5c:d5:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:05 2026 by rpki-client