Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: M5+3mvg5FqcYgXSMmMW0HX8kUBVqfhcM/sCcQR2guqw=
Subject key identifier: FE:91:BD:F3:7B:70:A2:BA:F3:99:2E:3D:C3:4C:A2:35:85:E1:7B:4E
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 01A0C0D5F8C82C250736BEEEA9037DF8C15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0FD2
Signing time: Sun 20 Sep 2026 22:00:43 +0000
Manifest this update: Sun 20 Sep 2026 22:00:43 +0000
Manifest next update: Mon 21 Sep 2026 22:00:43 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: YF5ReIsooAylqIg/40tRRBs4DIqZBhRfsygBVmSqyuU=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:f8:c8:2c:25:07:36:be:ee:a9:03:7d:f8:c1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Sep 20 22:00:43 2026 GMT
Not After : Sep 21 22:00:43 2026 GMT
Subject: CN=fe91bdf37b70a2baf3992e3dc34ca23585e17b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:9c:c0:16:f1:35:c1:f4:da:ef:79:27:2f:
31:48:b1:28:59:05:9d:74:6e:fe:31:48:a0:ed:13:
32:cc:36:2d:d0:3e:c8:02:c1:b9:30:91:6a:a3:d6:
eb:cd:77:ec:13:39:ce:6b:2b:32:63:c2:8d:14:1a:
0b:6d:07:7c:c3:69:6d:bd:3e:49:70:b7:d5:5c:e7:
68:b4:65:66:03:d8:cb:e1:22:52:6e:d6:60:4a:0e:
9b:a7:dd:77:a0:fc:ee:31:4d:de:3c:83:f5:84:e5:
24:90:a0:82:fb:46:c6:51:93:e1:97:2b:ff:57:18:
03:b0:4b:c2:a9:22:92:cf:73:55:61:4e:9e:d5:59:
99:5f:ec:7f:70:4a:68:ad:9d:44:69:15:c3:83:0d:
00:9f:2c:57:ab:a8:16:8d:5d:fe:66:bf:8c:f3:23:
62:61:3d:8a:3b:7f:d0:f1:03:c7:0e:cc:f9:84:99:
6c:64:16:1d:33:bb:59:43:84:d5:10:92:48:c4:fd:
09:e5:83:25:89:cf:bc:26:a7:92:ac:48:af:82:57:
b1:ad:8d:44:3e:e6:15:88:1e:9e:68:26:cc:c5:7b:
83:0b:c6:54:49:21:a6:97:78:8a:ee:31:6d:5e:43:
16:77:ee:6b:69:7b:78:a3:ad:34:37:db:6c:48:3b:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:BD:F3:7B:70:A2:BA:F3:99:2E:3D:C3:4C:A2:35:85:E1:7B:4E
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d0:e9:dc:c3:89:6b:bf:2a:3e:37:95:6e:8e:1e:17:d1:86:
14:ad:85:c9:da:f7:92:4b:26:a2:d7:62:88:d5:14:f3:18:27:
7b:a2:30:13:73:ff:8d:ab:4d:0b:dd:ff:c5:38:0e:a7:fe:f7:
a3:c3:68:0d:e7:bd:a1:a3:5c:a3:ed:c8:82:3d:87:81:81:1a:
bc:ef:94:3e:35:89:10:d5:ad:14:b7:6c:6d:b3:87:49:f7:0e:
2b:da:2e:e4:7f:28:0a:fc:87:f8:91:df:70:e0:8a:a9:b5:50:
8e:09:99:b0:1c:fb:c3:45:c0:2f:ef:ec:b9:50:5d:e0:3f:3f:
20:bd:16:c0:9c:d7:40:6c:44:d4:ec:5f:bf:d4:9d:bd:ef:e6:
3b:48:82:37:22:02:dd:77:7f:92:37:e7:f0:47:3b:f1:80:ab:
c8:21:63:d4:80:4d:db:d2:c2:01:6a:32:da:87:ca:7b:e8:7f:
b6:b5:1a:31:3f:5c:ab:9b:eb:1d:02:84:b9:7d:6e:ea:b1:74:
fb:96:6a:56:90:7a:23:2e:9c:13:d9:eb:ab:2d:42:4d:59:e5:
7b:f0:e5:e1:6e:4a:5a:d5:d2:a6:d5:b3:56:32:6b:1a:1a:33:
78:72:0a:67:e1:52:0c:a9:57:21:bd:01:c1:c9:48:1b:7e:eb:
e9:ca:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:15:38 2026 by rpki-client