Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: AbsdbtCM24kbxp706dQllOKzbR98hZA6xyQ5fSATAKc=
Subject key identifier: E2:CB:81:C1:D8:CA:5C:3D:11:D8:C5:9F:C6:DD:67:0C:8E:46:1D:BE
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 019D9AAB7EC1837A965328208F393840A30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 12BA
Signing time: Fri 17 Apr 2026 09:00:23 +0000
Manifest this update: Fri 17 Apr 2026 09:00:23 +0000
Manifest next update: Sat 18 Apr 2026 09:00:23 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: qm7LkmO3/pTbRttpqZP6TmuvOvBe0Vmat+KOBb//tuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7e:c1:83:7a:96:53:28:20:8f:39:38:40:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Apr 17 09:00:23 2026 GMT
Not After : Apr 18 09:00:23 2026 GMT
Subject: CN=e2cb81c1d8ca5c3d11d8c59fc6dd670c8e461dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:80:ad:45:04:5a:bf:6a:aa:b2:52:49:82:
6e:a3:d8:05:23:32:73:77:c8:93:a9:7e:e0:58:3d:
26:d1:31:43:63:a9:1b:32:37:85:82:93:c4:56:9c:
b9:d2:96:0e:cb:ef:eb:80:42:f0:c5:3a:6c:4a:5f:
36:85:dd:40:70:31:a5:76:71:c8:d7:db:3d:65:7c:
ca:fc:60:ff:0d:55:42:b8:22:ab:2b:c0:43:5d:1a:
7f:a6:4a:8a:a8:dd:a1:4f:c6:f8:92:da:28:86:39:
81:f3:5a:eb:5c:41:e0:ea:b1:fb:10:be:bd:14:70:
2b:18:12:a7:6d:e5:87:a4:3b:6f:7f:d6:b6:1d:90:
44:f0:0c:fe:aa:24:52:d4:f5:d0:f9:ad:a2:6b:3d:
5e:be:e4:1a:51:73:11:01:b7:15:9a:4d:58:24:67:
3e:e0:b2:7c:cb:6e:55:99:18:70:c7:aa:84:2c:aa:
c2:c0:fd:61:8c:ae:f7:8b:af:d4:f9:44:4e:5a:7b:
99:0d:62:c7:25:bc:a8:f2:11:75:52:3a:2e:db:97:
29:38:3b:df:98:2d:68:32:71:78:06:bb:00:3b:fc:
89:46:9b:1b:58:4f:1e:b0:b2:07:12:24:67:8b:b9:
29:c9:b9:9b:87:c7:23:d8:0c:a1:ca:d7:2f:1c:18:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:81:C1:D8:CA:5C:3D:11:D8:C5:9F:C6:DD:67:0C:8E:46:1D:BE
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:56:13:24:00:96:24:c9:16:f8:ac:25:20:c5:0f:84:d8:
34:ad:7b:98:55:b7:13:89:0e:84:0d:da:6f:97:a9:c1:8f:ff:
45:db:9c:d9:5e:3f:25:46:5b:21:05:4a:a5:d9:44:84:e7:d4:
1e:60:a1:fb:66:c3:a8:dd:4c:e3:b6:37:92:cb:b6:8f:97:72:
68:1f:17:81:b3:f0:db:34:ba:8b:f3:b2:68:64:12:13:87:ef:
4e:27:6e:8a:04:ff:86:64:5a:ef:b7:7c:0a:cc:d7:62:05:c8:
e7:f5:32:8f:2b:aa:a9:d2:ce:d4:fc:c7:29:ab:ca:78:e1:5e:
37:f2:8e:62:44:da:ff:f2:58:c2:e0:96:6a:f4:da:72:e2:d1:
24:86:38:d9:13:21:84:e2:c3:25:ea:ad:e8:07:0d:8b:17:70:
aa:f5:a8:81:a2:c8:15:d7:c7:89:05:b1:c6:22:07:b7:37:75:
de:ca:d9:7b:23:69:5a:8a:56:76:0e:fa:1a:88:a8:1b:8b:22:
1c:74:aa:a6:e8:31:92:ac:ef:dd:a4:cb:86:04:48:3d:2c:2b:
d0:97:37:ec:c4:d3:41:08:99:22:28:ed:36:96:54:22:17:7d:
72:07:3b:a2:34:3b:c8:dc:c0:a4:fe:1d:9f:39:29:6b:5d:3a:
25:3f:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:31:51 2026 by rpki-client