Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
File: kgtMGcL-ljv9eZwqGV-GaC3nflU.mft (raw, json)
Hash identifier: UX+AxGFaLGY3UtZkZwJtvYa+Vs3aVjigTm4lz3CGBT8=
Subject key identifier: 12:2C:F6:1D:22:9D:C6:41:19:FF:C7:30:D4:CF:0E:06:78:DE:E9:63
Authority key identifier: 92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
Certificate issuer: /CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Certificate serial: 01A18150410DD5DAC30886387477D88F9C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
Manifest number: 0104
Signing time: Wed 28 Oct 2026 07:01:22 +0000
Manifest this update: Wed 28 Oct 2026 07:01:22 +0000
Manifest next update: Thu 29 Oct 2026 07:01:22 +0000
Files and hashes: 1: WEwBpxaMC4nIG4w4vl_e2xC8V98.roa (hash: z9bbJLmUEVXg0O+C6bGdQnkEYUAIO6F1iJAXdJlUcMU=)
2: kgtMGcL-ljv9eZwqGV-GaC3nflU.crl (hash: xQgZ39Dem5B6lvF3XDVrgmZu0S8+rV4DoBFCLjenkm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:41:0d:d5:da:c3:08:86:38:74:77:d8:8f:9c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Validity
Not Before: Oct 28 07:01:22 2026 GMT
Not After : Oct 29 07:01:22 2026 GMT
Subject: CN=122cf61d229dc64119ffc730d4cf0e0678dee963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:a6:f9:09:9c:8e:0c:b2:f6:0c:f5:30:36:
c1:d3:c4:a9:69:de:11:22:f4:84:55:dd:56:84:f6:
a3:ed:d5:70:8c:d4:37:8f:a3:c9:cb:cb:3f:31:2b:
75:5b:82:23:01:18:e1:48:b2:88:a6:8e:b0:95:73:
2d:d3:fe:38:5f:15:67:08:61:42:23:0b:91:bf:d6:
81:d9:d1:43:ce:94:1b:2e:fb:73:44:0e:9b:cb:c0:
e7:f3:df:2c:a7:54:60:ec:61:ef:85:4b:86:72:4a:
22:e6:9e:d5:29:22:46:55:ab:4c:1c:89:8c:b0:79:
20:6f:7c:af:28:71:42:89:90:72:fa:71:31:51:79:
da:44:16:62:7c:85:5e:e0:d3:e9:94:37:11:b1:f4:
dc:af:c5:fe:8d:40:00:c1:63:61:1f:e5:d1:94:ba:
7c:65:5b:f0:04:c2:8b:fa:4a:2b:ec:3f:06:db:8d:
70:8d:4b:4a:13:ba:93:b6:f9:ac:f4:03:97:27:60:
af:10:b6:f9:c0:f1:bf:c8:1d:af:34:ef:95:82:7f:
59:62:34:b6:08:eb:92:aa:5f:c2:98:a6:c5:db:87:
2c:64:21:d7:de:b2:de:77:de:0e:17:0f:55:28:27:
c7:a5:c8:36:b0:6a:1a:45:63:ab:0d:3a:43:16:99:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2C:F6:1D:22:9D:C6:41:19:FF:C7:30:D4:CF:0E:06:78:DE:E9:63
X509v3 Authority Key Identifier:
keyid:92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:95:c1:28:11:00:ce:61:49:54:d8:26:19:5b:ee:c5:3b:89:
ef:53:92:f5:a1:b4:04:39:2a:2a:1e:02:17:b4:b4:c3:9c:9f:
1e:82:3b:f3:e6:31:36:17:96:7e:f8:35:6a:df:ad:cb:5b:77:
bd:86:33:57:bd:7e:fb:8b:c1:ed:76:67:c7:50:30:ac:a7:fd:
3d:87:8c:ef:c0:91:dc:56:dc:94:ea:86:1a:70:77:72:54:02:
4c:54:14:e4:06:fd:3a:13:c0:f8:4a:8e:bf:b8:65:02:87:16:
26:7b:1d:c2:ae:89:bb:6e:3f:19:b1:da:59:c5:49:75:b9:de:
54:93:f7:73:7c:0d:36:46:6d:a0:71:2c:86:10:7b:dc:9a:43:
02:a0:e4:a4:3b:cf:7f:55:fe:33:0d:e1:ab:91:97:cc:cf:6a:
43:a8:13:04:08:66:c8:0a:c6:c0:14:19:59:ec:8e:ca:67:39:
31:65:41:9c:9f:99:d1:9f:fa:55:9a:a3:1f:cb:66:21:ea:19:
f2:c9:b3:9f:95:e3:78:3d:15:1a:82:eb:a5:d8:be:7d:0d:73:
66:22:87:ec:15:a8:60:81:e5:8c:17:b6:cf:9e:8f:ef:df:79:
4c:04:26:1a:1a:88:cf:5d:23:cd:8e:0d:f9:73:8b:e5:6d:c4:
29:d5:ad:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBUEEN1drDCIY4dHfYj5yUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMGI0YzE5YzJmZTk2M2JmZDc5OWMyYTE5NWY4NjY4MmRl
NzdlNTUwHhcNMjYxMDI4MDcwMTIyWhcNMjYxMDI5MDcwMTIyWjAzMTEwLwYDVQQD
EygxMjJjZjYxZDIyOWRjNjQxMTlmZmM3MzBkNGNmMGUwNjc4ZGVlOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLWm+Qmcjgyy9gz1MDbB08Spad4R
IvSEVd1WhPaj7dVwjNQ3j6PJy8s/MSt1W4IjARjhSLKIpo6wlXMt0/44XxVnCGFC
IwuRv9aB2dFDzpQbLvtzRA6by8Dn898sp1Rg7GHvhUuGckoi5p7VKSJGVatMHImM
sHkgb3yvKHFCiZBy+nExUXnaRBZifIVe4NPplDcRsfTcr8X+jUAAwWNhH+XRlLp8
ZVvwBMKL+kor7D8G241wjUtKE7qTtvms9AOXJ2CvELb5wPG/yB2vNO+Vgn9ZYjS2
COuSql/CmKbF24csZCHX3rLed94OFw9VKCfHpcg2sGoaRWOrDTpDFplzDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIs9h0incZBGf/HMNTPDgZ43uljMB8GA1UdIwQY
MBaAFJILTBnC/pY7/XmcKhlfhmgt535VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2d0TUdjTC1sanY5ZVp3cUdWLUdhQzNuZmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNDU3MDEtZjY1Zi00ZTMzLWE3YTkt
OGE5NjE5MWZlOTk5LzEva2d0TUdjTC1sanY5ZVp3cUdWLUdhQzNuZmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xNDU3MDEtZjY1Zi00ZTMzLWE3YTktOGE5NjE5MWZlOTk5
LzEva2d0TUdjTC1sanY5ZVp3cUdWLUdhQzNuZmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5XBKBEA
zmFJVNgmGVvuxTuJ71OS9aG0BDkqKh4CF7S0w5yfHoI78+YxNheWfvg1at+ty1t3
vYYzV71++4vB7XZnx1AwrKf9PYeM78CR3FbclOqGGnB3clQCTFQU5Ab9OhPA+EqO
v7hlAocWJnsdwq6Ju24/GbHaWcVJdbneVJP3c3wNNkZtoHEshhB73JpDAqDkpDvP
f1X+Mw3hq5GXzM9qQ6gTBAhmyArGwBQZWeyOymc5MWVBnJ+Z0Z/6VZqjH8tmIeoZ
8smzn5XjeD0VGoLrpdi+fQ1zZiKH7BWoYIHljBe2z56P7995TAQmGhqIz10jzY4N
+XOL5W3EKdWtaA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:31:11 2026 by rpki-client