Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: nN0/vhCDL6eixRi0mAo+rgHvoeU/lMV4cwodppLYSdU=
Subject key identifier: D1:39:6A:4A:0E:B6:D0:AD:7F:5A:04:5A:5E:AF:F2:E8:5C:7E:4A:08
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 01A1C1AF220A5E5E8DD30238CADF328CB0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 1057
Signing time: Mon 09 Nov 2026 19:00:42 +0000
Manifest this update: Mon 09 Nov 2026 19:00:42 +0000
Manifest next update: Tue 10 Nov 2026 19:00:42 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: 6hnCeZFIC73LyiwKZ2cip58P8C13JJBX/smwHIs3+Xs=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:af:22:0a:5e:5e:8d:d3:02:38:ca:df:32:8c:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Nov 9 19:00:42 2026 GMT
Not After : Nov 10 19:00:42 2026 GMT
Subject: CN=d1396a4a0eb6d0ad7f5a045a5eaff2e85c7e4a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:69:49:91:30:2d:b8:c4:62:be:62:91:c3:
71:6c:70:51:c0:84:80:a4:08:a0:38:cc:e2:5e:60:
ea:fa:c3:0a:0f:85:48:5a:4d:59:5f:ef:58:71:32:
71:c8:dc:d0:2d:5f:83:1c:dd:da:df:03:b1:2d:a6:
c5:1b:1b:b9:7e:2f:04:f4:ba:36:d4:49:4d:87:99:
b6:0e:90:28:b1:81:22:75:18:d0:6b:0c:34:bb:70:
ec:d7:e4:e0:97:cd:f1:1f:fc:eb:ec:42:a9:a3:9f:
27:ce:67:16:aa:30:c8:c6:17:0a:2c:c6:c4:49:69:
1b:20:b9:fe:dd:22:58:3f:bd:df:30:0b:a8:cc:30:
1f:5d:ca:0a:b4:79:c1:f0:56:6e:ed:62:de:b5:01:
eb:1a:79:27:75:79:36:c7:85:b7:19:4a:97:2e:ea:
39:52:70:f3:69:ed:14:0d:cd:b1:35:56:5c:05:78:
59:2f:e4:39:80:b6:f3:53:c3:e0:d8:0b:d3:e7:4e:
45:9f:e7:50:2e:44:70:59:88:fd:7f:83:d2:a4:82:
2d:37:05:9e:32:dd:b8:02:df:b7:98:b2:67:12:4f:
38:9a:56:92:d9:bc:c5:bd:36:22:9c:bb:38:62:c4:
ba:24:b4:26:2e:30:f8:9c:80:82:b8:3b:1e:c8:9b:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:6A:4A:0E:B6:D0:AD:7F:5A:04:5A:5E:AF:F2:E8:5C:7E:4A:08
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:61:72:d6:a3:35:bd:6e:5b:19:91:f8:17:23:23:be:ba:72:
2d:54:da:11:52:a7:08:f2:d8:41:23:ca:01:9a:14:28:03:6c:
53:c8:80:c5:54:7f:12:36:b8:e7:00:64:d9:af:e6:5d:9b:5d:
0b:33:82:d6:92:f6:bf:ed:eb:17:25:3b:e0:57:fa:c5:7e:9e:
6d:04:e4:8e:8c:72:11:a5:21:93:77:10:96:11:b8:57:23:fd:
b0:77:93:eb:9d:f7:f4:0e:72:47:57:b4:ed:8b:7f:c1:02:84:
4c:06:b1:19:2f:44:8c:9b:12:d8:15:1f:9b:03:2e:1d:9c:e3:
92:b7:0e:2b:59:2f:d0:1e:b9:ff:5b:96:9f:e7:19:36:ee:41:
3b:e3:dc:4f:3b:b3:4f:a1:e6:9f:50:e5:1d:0b:1e:79:53:42:
c1:e8:51:5e:a8:54:97:ac:26:da:cd:19:fb:bd:23:9a:3e:95:
e8:75:39:f8:e9:d7:0b:ca:3e:4f:6b:b5:b2:7f:74:95:17:8b:
e5:40:52:93:7a:6f:f5:63:4e:f4:69:60:05:04:f0:a2:77:93:
0f:89:2f:c4:39:f2:b1:e3:e5:c3:07:da:ed:40:b5:00:42:36:
63:82:57:fc:0e:01:a7:86:06:1f:bc:b0:cc:c7:7b:f0:b0:cd:
fc:d2:67:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHBryIKXl6N0wI4yt8yjLC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDE5Y2FkYTE2M2UzNjhjYzMzNjI3NjNmMjA2YjNkZWFj
NGQzMjAwHhcNMjYxMTA5MTkwMDQyWhcNMjYxMTEwMTkwMDQyWjAzMTEwLwYDVQQD
EyhkMTM5NmE0YTBlYjZkMGFkN2Y1YTA0NWE1ZWFmZjJlODVjN2U0YTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0xpSZEwLbjEYr5ikcNxbHBRwISA
pAigOMziXmDq+sMKD4VIWk1ZX+9YcTJxyNzQLV+DHN3a3wOxLabFGxu5fi8E9Lo2
1ElNh5m2DpAosYEidRjQaww0u3Ds1+Tgl83xH/zr7EKpo58nzmcWqjDIxhcKLMbE
SWkbILn+3SJYP73fMAuozDAfXcoKtHnB8FZu7WLetQHrGnkndXk2x4W3GUqXLuo5
UnDzae0UDc2xNVZcBXhZL+Q5gLbzU8Pg2AvT505Fn+dQLkRwWYj9f4PSpIItNwWe
Mt24At+3mLJnEk84mlaS2bzFvTYinLs4YsS6JLQmLjD4nICCuDseyJtnUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE5akoOttCtf1oEWl6v8uhcfkoIMB8GA1UdIwQY
MBaAFCoBnK2hY+NozDNidj8gaz3qxNMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDkt
MTQ5ZjYzNjVmZmRhLzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDktMTQ5ZjYzNjVmZmRh
LzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2Fy1qM1
vW5bGZH4FyMjvrpyLVTaEVKnCPLYQSPKAZoUKANsU8iAxVR/Eja45wBk2a/mXZtd
CzOC1pL2v+3rFyU74Ff6xX6ebQTkjoxyEaUhk3cQlhG4VyP9sHeT65339A5yR1e0
7Yt/wQKETAaxGS9EjJsS2BUfmwMuHZzjkrcOK1kv0B65/1uWn+cZNu5BO+PcTzuz
T6Hmn1DlHQseeVNCwehRXqhUl6wm2s0Z+70jmj6V6HU5+OnXC8o+T2u1sn90lReL
5UBSk3pv9WNO9GlgBQTwoneTD4kvxDnysePlwwfa7UC1AEI2Y4JX/A4Bp4YGH7yw
zMd78LDN/NJn6Q==
-----END CERTIFICATE-----
Generated at Mon Nov 9 22:27:13 2026 by rpki-client