Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: Rtb/O01TsExjFxE8yRurtEPOaKvnbAZdALxzXwiFiYc=
Subject key identifier: F5:72:77:69:45:EC:FC:6D:DA:D3:A4:29:77:6D:8C:E6:95:4E:E9:5B
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 019FA8D0366186621F97F55EA315526313E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0F41
Signing time: Tue 28 Jul 2026 13:00:45 +0000
Manifest this update: Tue 28 Jul 2026 13:00:45 +0000
Manifest next update: Wed 29 Jul 2026 13:00:45 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: tb+iBaGt6EKUb3dSFv6XAlUe2jF7M2vdtyCMJe7WABU=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:36:61:86:62:1f:97:f5:5e:a3:15:52:63:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Jul 28 13:00:45 2026 GMT
Not After : Jul 29 13:00:45 2026 GMT
Subject: CN=f572776945ecfc6ddad3a429776d8ce6954ee95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:64:39:c6:2c:14:33:92:ee:f3:79:71:3d:
e9:ba:61:4b:67:87:81:f3:ed:ba:2b:c2:86:09:79:
54:8e:e7:66:b5:96:45:16:b3:80:5b:96:56:3c:86:
2f:b3:4c:d4:33:c9:46:4f:c5:7d:a9:22:14:be:ac:
08:19:7f:99:5a:3e:79:d0:1a:49:43:ef:b8:f1:9f:
a9:26:ae:0e:53:5b:94:1c:0c:0e:cd:a2:65:3d:6f:
62:cb:01:1c:08:79:e0:44:79:0b:0c:59:ce:7a:3c:
de:2e:27:62:04:a8:7d:35:12:23:24:cb:f5:c2:b4:
4e:8b:0b:cc:90:c6:f2:0e:35:0b:e6:66:88:62:32:
3f:8d:dc:d4:10:b7:07:d1:27:28:7d:d7:e2:ad:63:
6e:e9:13:e3:ee:34:b0:d3:7e:b7:6d:a5:a9:dc:9f:
dc:c4:8f:ac:e9:f7:c0:c6:0c:e3:1a:11:da:68:4e:
27:03:e3:12:d4:97:9e:0d:c5:ff:85:fa:4e:c3:f5:
7c:44:f2:47:c5:d8:a2:2a:e3:a9:20:84:95:7b:ba:
8c:1a:03:e7:7e:dd:a6:0f:bd:68:6e:3c:c7:e4:ec:
e8:ca:e5:81:4a:96:41:39:96:38:f3:f7:83:58:d6:
26:50:db:0b:f2:8f:f0:36:08:e1:da:4c:d0:ef:85:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:77:69:45:EC:FC:6D:DA:D3:A4:29:77:6D:8C:E6:95:4E:E9:5B
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9c:99:5e:68:5f:ea:8d:2c:59:eb:53:d5:1f:dc:ea:e9:f0:
a1:9e:10:ed:6d:8f:9f:29:b8:75:a7:9e:f6:21:36:22:7b:a7:
e3:f1:4e:35:66:c0:d0:61:3b:cf:63:90:62:40:6f:e1:8b:1f:
22:2e:2c:35:2f:4f:3c:a9:df:5a:a0:1a:75:78:f3:3a:8d:a7:
53:e9:35:d6:82:a5:5e:45:f0:5b:3e:03:5f:f5:cd:fb:5d:1e:
c2:7c:e5:6f:36:55:6a:17:9b:d2:ee:f0:ee:df:c4:7b:21:28:
44:4c:1f:5b:6e:f2:99:d3:3b:ff:d5:f1:07:4d:41:12:2e:e4:
26:59:ce:20:8e:db:c2:62:a9:cd:10:0c:a4:f3:93:22:c8:fb:
db:ad:82:dd:de:63:22:2a:db:6b:3e:94:d5:5f:47:bd:fd:c7:
de:67:98:cb:53:aa:30:54:88:cf:3b:0d:11:86:f1:f7:9c:76:
48:f2:5d:ca:20:39:54:d7:dc:f7:35:2c:00:77:4d:9c:d2:18:
b4:36:25:81:7e:23:20:ef:59:b9:70:bb:1b:f3:de:17:05:7b:
43:6c:66:98:a7:74:bd:5d:76:7d:ab:8d:ae:87:58:0c:e1:e9:
5b:f0:cb:82:74:81:5b:2f:ad:ea:5b:83:aa:1c:32:2b:c8:da:
8a:f4:35:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:44:09 2026 by rpki-client