Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
File: kgGio1zO6PsPuXFJ3JEi7_odV1M.mft (raw, json)
Hash identifier: dWFAfx4wCn00MWcwa9g2r5oIYZutt7Q8yb9kgmRryKQ=
Subject key identifier: CD:D1:6A:4A:82:3E:74:D3:87:DA:47:03:5A:58:2C:38:F1:5C:FE:3F
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Certificate issuer: /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial: 019FA898EB318F29F58696175998D3CF7B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:21 +0000
Manifest this update: Tue 28 Jul 2026 12:00:21 +0000
Manifest next update: Wed 29 Jul 2026 12:00:21 +0000
Files and hashes: 1: 29oQ-_YhALXcaCnBoms6zHFWIUg.roa (hash: YFqwumFUQeEWBhccMhC9hd/OtihPR9k55c5uhqWfTXo=)
2: kgGio1zO6PsPuXFJ3JEi7_odV1M.crl (hash: 3eIW6AYyNmjVLNGHuuwCXdMBNJJUf+IXpB+hSgR//pQ=)
3: pHG0Dgz01aKv0bEBf6QDC18dcjc.roa (hash: cW2NoY7QV6boSwo2uyAkmvFSGtyInVd1Rb4XruZtXJY=)
4: pxq446UNxMX48IpTz2HO1tgd-0s.roa (hash: DkFJ/lcWoJ1EwOJ8iauCFG324UnqbAJK8P24azgmuwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:eb:31:8f:29:f5:86:96:17:59:98:d3:cf:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Validity
Not Before: Jul 28 12:00:21 2026 GMT
Not After : Jul 29 12:00:21 2026 GMT
Subject: CN=cdd16a4a823e74d387da47035a582c38f15cfe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:21:c7:dd:a5:8c:bf:89:e0:19:97:b5:7d:
71:f5:88:06:0c:83:bd:2a:5f:b5:00:d5:be:20:7e:
bb:3a:89:e2:fd:b9:b0:a3:2e:fc:d6:33:f9:f4:20:
98:80:d3:66:e6:f7:ea:e6:e1:37:a6:bf:c7:ef:15:
3f:30:3f:96:d8:e6:9e:0f:55:a4:7e:6e:bf:49:d3:
32:21:26:96:9a:08:f7:e5:28:fc:39:4e:aa:d1:1f:
2b:b0:27:95:b8:cb:8b:68:6a:08:61:7b:5d:21:88:
a5:ec:da:66:d8:47:bc:c6:4e:5c:b0:a1:ee:03:6c:
16:d2:cd:52:80:e0:eb:ef:aa:5e:06:ac:c1:0a:fa:
e1:2a:12:88:17:dd:21:9b:91:24:64:42:5a:14:44:
40:34:ed:09:ba:9d:3b:0a:dc:f1:1c:36:41:70:37:
8c:3b:f1:a9:99:83:f4:31:62:b5:be:68:c1:0b:08:
fc:7d:10:24:28:9d:a4:28:6b:c8:7e:92:40:12:f0:
fb:3c:e7:d3:43:42:ce:2a:fc:98:93:29:21:ef:7d:
de:ac:b2:41:86:cb:4d:e6:97:9c:b1:87:6a:ae:4d:
0a:27:68:c1:4b:a4:15:be:54:9c:d1:f9:57:51:2f:
2b:17:02:e7:cb:58:55:98:61:55:d3:25:48:37:f1:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:6A:4A:82:3E:74:D3:87:DA:47:03:5A:58:2C:38:F1:5C:FE:3F
X509v3 Authority Key Identifier:
keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:71:ce:11:10:18:ef:a5:58:b8:6f:b1:20:5f:c1:46:f7:e0:
2f:be:a4:fa:4e:c9:87:4e:92:58:33:a1:eb:9f:bd:bb:f3:08:
92:7a:59:13:ec:97:0c:ac:26:53:77:d2:7c:9b:de:8f:83:f0:
61:08:7c:d8:0d:0f:29:e0:5a:21:27:91:d9:17:12:7b:3c:b6:
53:47:29:84:6b:af:44:10:63:44:ef:9c:1c:0b:2d:7c:67:46:
de:f8:2c:53:30:c1:95:a1:47:b2:82:01:55:24:9b:e0:15:8f:
e5:a8:6a:d0:fb:5d:a7:c2:c1:c7:b7:8e:11:40:9d:42:c1:96:
49:14:a5:ef:4b:2a:c2:b2:47:4a:86:09:5d:aa:fb:09:83:cc:
f7:b3:2c:a9:6e:a4:5f:9c:59:5b:fe:4f:85:d6:07:69:6e:cb:
0c:c2:86:60:8e:b6:e0:19:a5:0f:65:26:ee:07:72:e9:2b:59:
29:f0:f7:f6:00:0d:55:c9:a9:c3:cb:4a:70:e5:8b:94:9b:e9:
41:76:09:37:ca:16:81:e2:b9:2f:db:5a:8a:26:a1:2b:bf:9c:
6e:e7:14:f5:d4:5c:9e:2c:2a:d4:93:83:94:9c:22:62:18:ee:
8a:39:d5:da:06:9f:53:8b:56:e0:23:df:ce:be:12:d6:86:ff:
7b:9e:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:52 2026 by rpki-client