Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
File: kgGio1zO6PsPuXFJ3JEi7_odV1M.mft (raw, json)
Hash identifier: 6YCJvN54cw1KwKoq/FolkZEHrjqkZywcsVpc/vZTVbQ=
Subject key identifier: 98:0C:94:D6:26:A3:0F:4C:BA:F6:D5:01:15:DA:58:26:FA:5B:A7:AA
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Certificate issuer: /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial: 01A0E73F906969C14D1914CD5EA94CA6B5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:37 +0000
Manifest this update: Mon 28 Sep 2026 09:01:37 +0000
Manifest next update: Tue 29 Sep 2026 09:01:37 +0000
Files and hashes: 1: 29oQ-_YhALXcaCnBoms6zHFWIUg.roa (hash: YFqwumFUQeEWBhccMhC9hd/OtihPR9k55c5uhqWfTXo=)
2: kgGio1zO6PsPuXFJ3JEi7_odV1M.crl (hash: MvLqD7d118icaIbfPlLZxuiyYuuWw5QfWHcDmSQPTFM=)
3: pHG0Dgz01aKv0bEBf6QDC18dcjc.roa (hash: cW2NoY7QV6boSwo2uyAkmvFSGtyInVd1Rb4XruZtXJY=)
4: pxq446UNxMX48IpTz2HO1tgd-0s.roa (hash: DkFJ/lcWoJ1EwOJ8iauCFG324UnqbAJK8P24azgmuwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:90:69:69:c1:4d:19:14:cd:5e:a9:4c:a6:b5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Validity
Not Before: Sep 28 09:01:37 2026 GMT
Not After : Sep 29 09:01:37 2026 GMT
Subject: CN=980c94d626a30f4cbaf6d50115da5826fa5ba7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:0f:2c:8a:b9:67:90:f1:e3:f8:81:d7:c6:
c8:a2:97:20:34:b2:5f:1a:51:4c:fb:3b:81:12:a4:
c9:82:fa:a8:12:c5:ff:72:d3:3c:93:b3:17:54:7b:
1d:ca:7a:e8:ba:e3:68:b9:dd:c0:bf:96:09:82:b0:
0b:1e:a1:3f:bf:14:f5:26:e6:a1:5c:9b:de:97:cc:
1c:40:63:f9:56:49:f6:f8:71:67:57:a1:b7:8a:66:
30:08:40:8b:50:6b:23:24:da:08:9e:95:78:5f:83:
50:fa:4e:7c:df:78:a1:9f:83:d3:79:a0:39:8b:ba:
0a:0a:7e:c1:a6:3e:40:7d:39:c6:b5:6c:e8:f8:d6:
d6:23:a7:d8:0f:26:67:cc:9a:75:61:da:44:29:e5:
bf:60:0c:f4:51:f5:48:2e:03:3f:0a:ca:0f:7b:50:
08:84:1d:70:8f:d2:d8:c8:c8:0b:40:e7:c5:1a:92:
74:d7:95:3a:c0:70:de:87:9e:5f:28:fb:1c:88:a5:
fd:ac:55:07:20:a9:bb:a3:f2:0f:3b:7b:bd:0a:7f:
9e:27:37:66:f2:4d:15:ab:4d:f8:dd:b2:9c:77:89:
81:cf:ce:b9:55:ea:0c:ec:ff:78:54:69:3c:30:c6:
d0:37:94:f9:96:af:6a:79:d6:43:cd:24:63:69:5d:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:94:D6:26:A3:0F:4C:BA:F6:D5:01:15:DA:58:26:FA:5B:A7:AA
X509v3 Authority Key Identifier:
keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:76:4f:b8:6b:c0:cb:58:5f:c8:2d:31:8d:8a:9f:1e:d9:4e:
4c:8a:78:d4:e2:38:71:dc:e2:68:4d:01:bf:05:2f:9e:23:e2:
2b:4c:fb:98:b2:ee:07:46:34:de:9e:ce:c6:09:73:c2:86:9b:
99:cf:c1:18:cb:80:6e:cd:cc:76:75:87:37:c0:25:21:62:98:
e0:6b:2d:9c:03:83:91:2a:b1:b5:54:ca:46:03:9e:51:16:b8:
42:83:c5:11:88:8a:b2:67:70:9b:42:18:46:5b:07:1d:80:dd:
71:8d:20:17:c4:3b:f5:77:58:40:d4:c7:2c:cd:4c:d4:9d:03:
85:ac:b0:ed:cc:54:d4:5d:05:3e:e3:64:44:43:03:c1:4c:8c:
ca:25:56:16:8b:69:f1:cb:ce:52:e5:85:df:10:7b:ee:0f:15:
57:2e:fd:92:44:c9:c7:68:ff:c7:d4:22:c0:3e:7f:9e:84:9a:
4b:9f:51:50:29:90:39:54:12:03:9b:51:a8:7a:7f:9a:9c:7b:
db:df:94:77:95:aa:fb:99:ad:13:38:6b:77:59:5a:04:d5:cb:
6e:53:65:94:2a:60:a8:d8:7d:9f:83:b5:55:de:71:7d:36:77:
d6:26:99:30:36:ea:8d:98:c9:55:e9:6c:f0:40:9c:93:ef:2e:
ec:fc:19:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:14:23 2026 by rpki-client