Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
File: kgtMGcL-ljv9eZwqGV-GaC3nflU.mft (raw, json)
Hash identifier: 9Ks+8u++xiAid5pGi2AmV7emmkOAtk4K9TOM6ScYzso=
Subject key identifier: 4E:C2:79:7E:95:CD:C9:EC:57:6B:22:00:42:58:F9:57:BD:67:79:95
Authority key identifier: 92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
Certificate issuer: /CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Certificate serial: 019FA26059A9C4FEEC9777849C0613CD1C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
Manifest number: 0C
Signing time: Mon 27 Jul 2026 07:00:51 +0000
Manifest this update: Mon 27 Jul 2026 07:00:51 +0000
Manifest next update: Tue 28 Jul 2026 07:00:51 +0000
Files and hashes: 1: WEwBpxaMC4nIG4w4vl_e2xC8V98.roa (hash: z9bbJLmUEVXg0O+C6bGdQnkEYUAIO6F1iJAXdJlUcMU=)
2: kgtMGcL-ljv9eZwqGV-GaC3nflU.crl (hash: l12bV6/VvKPuZBwmP4ftJhhLtqpnGfn0nyEnYrepmfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:59:a9:c4:fe:ec:97:77:84:9c:06:13:cd:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Validity
Not Before: Jul 27 07:00:51 2026 GMT
Not After : Jul 28 07:00:51 2026 GMT
Subject: CN=4ec2797e95cdc9ec576b22004258f957bd677995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:11:e7:04:d1:a4:d0:98:68:4d:b5:0b:1d:
5c:69:86:bd:f6:ef:df:96:ee:ca:9d:00:70:d1:a1:
66:d0:ff:19:4d:61:d8:df:15:99:27:a2:1b:d0:82:
cd:35:18:43:0a:12:cb:1f:cb:96:31:7b:bf:77:a8:
ca:b5:5d:71:40:50:9a:1c:f2:22:3e:d7:b3:a9:cb:
0e:c0:7d:81:cf:84:92:2f:9e:de:20:70:4d:71:3e:
60:e5:34:2c:57:4a:7e:fa:fa:de:52:45:5f:7a:ca:
24:15:1e:4f:3e:d4:ee:33:c1:98:5b:ae:f0:4b:db:
4d:3a:3f:e6:36:e8:fc:7e:be:1f:ec:22:16:f9:84:
fa:a1:c2:0a:55:c5:d2:76:5c:a5:19:3f:f7:81:d4:
df:99:ba:c6:6f:86:11:3c:35:e0:d7:ec:54:f5:54:
6f:e0:4a:b1:53:c2:c0:55:ad:62:83:15:03:c5:d0:
cb:4f:d8:2a:9b:03:78:d3:0e:a8:9b:69:99:9c:d7:
89:e9:fb:e9:df:56:58:2f:3a:02:f0:01:d6:f5:10:
22:72:17:ce:45:3d:81:1e:1c:ed:c2:c8:21:17:21:
d8:a5:82:21:05:b7:31:79:cc:98:2c:4d:6c:07:99:
fe:db:c7:a5:38:6a:23:f4:61:8d:b2:4b:6e:7b:91:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C2:79:7E:95:CD:C9:EC:57:6B:22:00:42:58:F9:57:BD:67:79:95
X509v3 Authority Key Identifier:
keyid:92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:50:27:14:28:42:84:65:53:ff:7f:ef:84:eb:6e:97:34:9c:
7f:e9:da:8e:e8:d8:98:b1:52:26:a9:a2:40:df:82:e0:63:5b:
b3:08:e0:28:54:0c:21:bc:bc:54:66:07:ba:7e:fe:83:03:46:
e5:79:e8:56:76:3b:fd:63:9e:c4:34:f7:91:ef:0c:a1:ec:0c:
fd:d2:df:03:b1:c8:4a:e0:a9:15:29:b3:eb:8a:cc:a8:e4:55:
b1:29:a1:53:9c:ab:2b:30:4e:f3:45:5b:51:ac:ee:22:d0:86:
06:d5:fa:07:65:f4:08:c7:e1:10:81:93:3d:b7:dc:2f:25:c3:
2e:1b:0e:ef:ef:2c:fe:fe:f2:3d:db:4a:1c:dd:ff:ca:83:e1:
92:27:7a:91:4a:1f:6e:69:89:29:ef:5b:ee:16:2e:2d:5d:52:
0a:ff:df:b2:d5:37:ee:17:5b:d2:4e:72:d3:f1:b2:52:21:b3:
a7:2a:fd:d9:47:a3:aa:87:01:0c:00:5a:16:1c:11:cb:89:d9:
ae:78:30:e7:83:4b:d0:dc:b2:f7:d1:3e:47:d7:d1:80:a6:3f:
6c:48:b6:13:a5:39:c8:a6:f5:48:aa:07:72:b7:97:8c:87:07:
ef:a9:7b:e9:20:95:01:bc:cc:a0:10:1e:66:e3:1b:64:5d:ea:
99:01:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:00:45 2026 by rpki-client