Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft
File: KgE0Z2uONx1E752Fh_3NKzuYfKE.mft (raw, json)
Hash identifier: HlVsctFQzfXiqKc/9Ypsk7bJsLj4Tb5dZ1VURODvN5Q=
Subject key identifier: AE:7A:A9:AA:AC:14:CA:B9:FD:12:BD:32:D8:F9:5C:76:32:22:60:C8
Authority key identifier: 2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1
Certificate issuer: /CN=2a0134676b8e371d44ef9d8587fdcd2b3b987ca1
Certificate serial: 019D37F784A1CE98D97B8AA75DC44E2B8671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft
Manifest number: 0177
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: 59eYrLYTpubQ7ziIIdqHTcUgjtA.roa (hash: PzWY9bzVIX+7Zn/yBvHJ738H8uZ2zoJS+QYerblWszM=)
2: KgE0Z2uONx1E752Fh_3NKzuYfKE.crl (hash: clVUUf4zlIgndteLlPYHqusihRPbUaNJyYxEY01OVsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:84:a1:ce:98:d9:7b:8a:a7:5d:c4:4e:2b:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0134676b8e371d44ef9d8587fdcd2b3b987ca1
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=ae7aa9aaac14cab9fd12bd32d8f95c76322260c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:f6:4a:fc:2c:be:f5:be:23:58:3c:42:8e:
b5:7d:b5:d1:bd:95:4b:33:67:2c:c9:86:1b:85:61:
d9:84:1a:d8:bb:26:a8:c1:2e:f2:9c:e7:49:a1:be:
24:f0:3f:7e:b3:f0:8d:24:3c:f8:14:0e:2f:fd:2c:
7b:0e:14:bb:e8:59:7b:96:e8:9b:c7:58:c6:ff:73:
49:27:44:f1:c2:1c:b6:35:d7:16:9f:60:81:96:63:
8c:09:16:bb:49:13:e4:48:63:75:e9:47:17:3e:5e:
c7:f5:bd:9d:5b:a6:22:83:da:7f:24:45:38:db:37:
4c:2c:42:98:96:ba:2d:ed:e6:eb:dd:7b:f9:cf:15:
5f:0c:49:19:fa:c9:87:d5:04:e6:24:4c:34:b4:eb:
14:c2:4b:e3:eb:02:1a:f8:17:5a:d8:c1:4f:34:eb:
53:53:0d:f2:be:7e:51:bf:9b:57:2f:b8:51:bd:22:
3c:a5:28:29:3c:8e:2d:eb:cb:12:97:47:d6:9f:60:
73:44:45:64:5e:f9:77:f8:fa:7b:ee:2f:88:db:b9:
c6:17:d3:8e:04:6a:c0:6c:3b:1b:f6:b1:63:22:71:
ce:0f:ea:de:3a:21:5e:79:7e:ba:85:01:13:19:8e:
7a:14:6d:11:fd:e8:11:db:01:32:ca:57:ba:0f:b1:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7A:A9:AA:AC:14:CA:B9:FD:12:BD:32:D8:F9:5C:76:32:22:60:C8
X509v3 Authority Key Identifier:
keyid:2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:65:cc:ed:0a:3b:66:b1:e1:89:3f:72:dc:60:dc:93:ec:32:
75:34:5a:8e:e4:70:9e:de:c6:77:6b:6d:3d:06:62:82:13:26:
8c:8e:c9:67:91:5b:d4:c3:73:e2:d5:48:d5:96:24:d5:ec:ff:
38:ec:9a:81:03:05:80:52:ae:37:b9:99:f9:2a:81:6f:9a:bd:
c4:80:64:ad:9f:14:d3:2e:c3:c2:5d:d7:29:8b:aa:e8:ee:2a:
c7:a6:c6:53:38:1e:bb:51:8a:67:4e:f2:50:5e:a0:c7:6c:85:
b6:d0:8f:3c:b7:61:36:6b:13:ed:ba:78:c0:9a:1b:46:b4:f3:
93:12:43:fc:58:aa:fa:25:77:6f:ef:fb:c8:c2:b1:f9:1a:29:
4a:cc:81:75:77:5a:f2:a7:89:e1:ad:fb:54:3e:11:93:a6:10:
1b:0b:8b:05:21:a7:81:88:c2:92:86:e8:15:f5:63:d0:b0:d6:
c6:aa:e7:65:26:d0:c4:68:3a:4a:67:e8:8e:0a:2d:39:65:a5:
14:82:a1:ec:57:81:65:d5:3e:8e:d0:60:22:0d:04:43:8e:38:
d2:bd:a4:8a:f7:37:31:85:d3:e1:c0:08:94:b8:da:6d:02:7b:
fa:a3:2a:7d:cc:1c:2d:9d:9b:48:d4:b3:4a:f3:38:a9:85:fb:
f9:2a:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:19 2026 by rpki-client