Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier: DEXudx2ZqcsLZrKiBJPShd2t5S9wgzL25wjY3mR6Se4=
Subject key identifier: 32:46:EF:8E:0A:98:BA:D3:4E:E3:74:53:05:C2:17:59:0D:D5:24:89
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 01A119E26C1A87CD27CA926C4705324AA1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number: 1A9A
Signing time: Thu 08 Oct 2026 05:00:31 +0000
Manifest this update: Thu 08 Oct 2026 05:00:31 +0000
Manifest next update: Fri 09 Oct 2026 05:00:31 +0000
Files and hashes: 1: Dol_Yn1EUI6Y4JETRI7DtbG1wTY.roa (hash: oEleDgSfi1/0GdFoPLAt8sQUnHsmQoFm+KbSbKM7DK8=)
2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: f0DGGzdkTag3MO8Zsh/pTlmTNKkJ8kdZ7hbE8WE82og=)
3: N0-9D9Mqaj9fas9-h3bJI6Ip0sE.asa (hash: KMMXyURtnd2DY6HcFTJMERVv9TEECMM6e6EyJkA5WWY=)
4: XBi0FPt3Tgj9Z2jUXrybiKJEHnU.asa (hash: GAqZiwsCXXJxCZ9EujMbC6ioGg7tK0Ic1Zx8khPbgSE=)
5: fL0H--TKQBb-D8qsXRg-ndg2SW4.asa (hash: MpJx0FBsk8ZEbC887zbST7va3ASLMexA4WQhUuLBBBA=)
6: gK2Rq9Zs-Y9rHAKXi0YVfwz0vlI.roa (hash: soCJxr1Be9fMlxT+zXNdcRqutbnVfTkKZ0DnRO9Wh6M=)
7: kUwG0iZuxyNBHJJd8N9jQGPedHQ.roa (hash: hPe1XR077zP9VhoNA1k11ZvtiSoFyhO3Q2vyCxM6cZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:6c:1a:87:cd:27:ca:92:6c:47:05:32:4a:a1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Oct 8 05:00:31 2026 GMT
Not After : Oct 9 05:00:31 2026 GMT
Subject: CN=3246ef8e0a98bad34ee3745305c217590dd52489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:52:4f:49:80:29:f2:38:64:52:77:ef:1c:
e9:90:f5:16:81:58:6c:b0:a2:40:d9:28:a1:2f:ae:
85:ca:3a:a4:82:3a:ba:92:12:bc:6d:36:c1:85:22:
57:b6:13:0f:49:cc:e9:2c:f2:49:c6:16:bf:d4:53:
7f:78:6d:16:41:a3:4d:6b:6e:a8:ae:e9:41:99:3d:
0c:49:4e:34:b2:31:dd:be:58:fd:e2:4f:a2:78:29:
6b:b6:b0:cf:ec:e4:31:0f:00:82:b9:7b:d0:77:9b:
fa:77:98:3c:ab:fe:59:e4:a3:c1:28:67:aa:3c:b3:
7b:1d:6a:89:5f:78:51:91:99:c0:d3:4a:58:60:4f:
9a:09:9b:6a:a5:d7:74:9a:5a:22:ea:bb:b7:06:fe:
3f:69:f7:3d:d8:a5:6e:e1:cb:c7:1e:a5:87:fa:47:
97:a6:6a:6c:b4:f5:75:05:4d:71:95:9c:8a:5d:cf:
13:5b:68:a9:6e:aa:82:76:a3:1e:73:b7:d0:fe:3f:
05:35:51:56:49:f3:df:1a:e2:6a:7a:42:20:5c:53:
ca:77:2c:26:ec:2a:29:20:d6:7a:ab:d9:74:18:fe:
90:72:1b:f4:83:21:69:0b:db:c0:e5:0b:c4:f9:b9:
6b:19:d0:49:d1:77:c4:1a:02:79:b2:9c:51:74:2b:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:46:EF:8E:0A:98:BA:D3:4E:E3:74:53:05:C2:17:59:0D:D5:24:89
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1c:f4:4c:d8:24:9b:36:ca:a8:79:71:5c:6a:92:1f:12:1a:
9f:bd:a7:5f:e8:74:11:28:72:df:4c:56:7b:d3:40:93:6e:63:
00:8c:aa:ed:d3:21:89:d1:83:c3:5d:34:a2:1b:1b:d0:a7:c8:
de:16:c1:79:36:a3:5b:9a:55:c6:02:34:67:7d:c4:34:fa:bf:
50:62:fb:d1:9c:f0:35:72:1b:d1:d9:13:2f:eb:66:bc:c9:52:
fc:bf:6e:7c:30:2a:3c:2e:9b:d1:65:75:e9:4f:a2:37:8e:55:
94:7c:c6:f6:71:cf:f4:0e:7e:ce:7b:3d:1f:cc:a9:5a:dc:ad:
ad:b7:90:15:6f:e0:47:71:16:b0:48:9d:2d:ba:e3:99:6a:99:
5f:11:7a:db:89:21:23:bf:10:27:0c:ba:8c:5b:ee:c8:70:c2:
51:76:c7:f2:d0:8b:d1:d8:b0:af:9c:ae:bf:6a:ef:e4:7c:62:
48:e7:a7:cc:4e:08:5d:92:d9:c9:65:a8:33:54:e3:de:ec:1b:
37:73:1e:78:e6:62:13:08:08:6f:c7:a5:2d:64:ea:1d:2c:b5:
52:53:77:97:b6:9b:5a:a9:cf:54:14:60:22:0f:f4:af:3c:b4:
fe:7e:70:f6:64:0b:49:fc:d0:cf:90:83:c7:c4:cd:fc:de:16:
1d:b9:69:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:14:06 2026 by rpki-client