Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
File: kgtMGcL-ljv9eZwqGV-GaC3nflU.mft (raw, json)
Hash identifier: 70gdfPKUATD2ftO8/XwaX98QjJg2g1p70/6GvbmDKAk=
Subject key identifier: 19:F1:47:53:E1:5D:87:6C:03:FF:54:8B:0A:3C:62:7D:AE:72:89:75
Authority key identifier: 92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
Certificate issuer: /CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Certificate serial: 01A08C0CFFF6ED22DC67F08280C3CCE85743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
Manifest number: 85
Signing time: Thu 10 Sep 2026 16:00:57 +0000
Manifest this update: Thu 10 Sep 2026 16:00:57 +0000
Manifest next update: Fri 11 Sep 2026 16:00:57 +0000
Files and hashes: 1: WEwBpxaMC4nIG4w4vl_e2xC8V98.roa (hash: z9bbJLmUEVXg0O+C6bGdQnkEYUAIO6F1iJAXdJlUcMU=)
2: kgtMGcL-ljv9eZwqGV-GaC3nflU.crl (hash: jyBqnRTX3+Fnpv9f//R0qUAwEHXOhy/bltu0fmvGJmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:ff:f6:ed:22:dc:67:f0:82:80:c3:cc:e8:57:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Validity
Not Before: Sep 10 16:00:57 2026 GMT
Not After : Sep 11 16:00:57 2026 GMT
Subject: CN=19f14753e15d876c03ff548b0a3c627dae728975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:d7:bf:a8:72:7d:16:db:59:7c:ff:46:e0:
be:74:5c:06:a3:02:8b:90:2c:af:b3:c3:fb:56:12:
ed:bd:a4:02:6b:25:3b:11:26:d9:e3:3f:b3:e8:b7:
3e:dc:2f:a1:56:e9:1a:b4:36:f8:b0:e4:3f:3d:8e:
f8:e7:54:4e:b5:55:4c:07:6c:98:4f:b7:f4:1a:19:
4f:6c:81:2b:d9:9b:d0:cd:0c:98:db:44:a0:80:fa:
52:16:04:b9:82:af:ce:37:b6:a1:fb:8a:04:f5:c1:
f5:bc:0d:c9:d9:7c:78:d5:53:71:41:37:d7:9d:ce:
f2:c5:5f:17:04:c0:7b:83:25:8c:e5:05:8c:63:ce:
5f:89:7a:44:e0:96:d5:79:e4:75:12:f8:17:42:06:
92:be:51:27:b3:4a:7d:33:44:91:7d:ee:8a:22:f0:
9b:3c:24:4a:74:50:ac:47:6a:95:56:22:5b:79:ad:
72:5c:1e:a2:3d:e8:08:e6:d8:83:69:a9:26:69:af:
e8:87:94:ee:99:d9:59:37:29:cc:49:28:21:2f:e7:
28:5d:9f:93:b6:23:92:dc:0a:0a:8a:3c:1d:ec:fe:
60:c5:00:9a:b4:ca:f1:4c:b9:5f:56:ed:22:e5:62:
8f:10:a3:d3:47:61:54:f7:c5:76:12:2e:f5:15:5a:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:47:53:E1:5D:87:6C:03:FF:54:8B:0A:3C:62:7D:AE:72:89:75
X509v3 Authority Key Identifier:
keyid:92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f2:b2:a3:4e:15:2e:8c:e0:7a:56:35:18:ea:eb:7b:17:f5:
8f:e9:7c:34:6d:3d:66:f6:99:c8:32:85:50:a5:c0:f4:4b:f6:
a4:ee:a8:da:aa:7e:d6:b3:c7:1b:f9:06:d8:ac:33:4b:36:db:
64:fe:59:80:45:e7:88:ed:ee:7c:25:10:fa:ff:20:de:45:c4:
cb:59:80:e7:68:9c:8b:bb:80:37:b8:33:77:64:09:7c:ea:b6:
83:6e:f4:40:9d:df:5d:35:38:bd:d0:a8:9b:86:9e:ea:03:e9:
7d:a0:2b:d2:dc:a4:32:ae:6b:ce:00:de:9e:7a:43:10:5b:f5:
34:b0:2f:f1:20:29:90:f4:e4:3d:4a:f8:a4:8d:ed:cd:30:79:
9a:d7:35:95:0c:b9:ec:4a:e5:7b:e0:7e:b2:82:2e:89:2b:e3:
b7:48:93:24:b9:1b:a7:63:b0:8f:fe:2f:e3:98:3b:85:e8:06:
6c:db:ca:98:9a:c1:07:7a:07:7f:78:49:c2:72:3e:fa:9e:5a:
57:74:12:93:86:1d:f2:cd:e0:7b:78:69:11:16:21:16:5a:99:
40:4e:a3:64:62:78:1f:90:d8:81:c7:91:e1:cd:f5:83:a9:88:
3f:b7:17:37:38:76:b5:fc:a0:95:37:9b:bc:11:a4:cd:cc:12:
36:68:a5:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDP/27SLcZ/CCgMPM6FdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMGI0YzE5YzJmZTk2M2JmZDc5OWMyYTE5NWY4NjY4MmRl
NzdlNTUwHhcNMjYwOTEwMTYwMDU3WhcNMjYwOTExMTYwMDU3WjAzMTEwLwYDVQQD
EygxOWYxNDc1M2UxNWQ4NzZjMDNmZjU0OGIwYTNjNjI3ZGFlNzI4OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzvXv6hyfRbbWXz/RuC+dFwGowKL
kCyvs8P7VhLtvaQCayU7ESbZ4z+z6Lc+3C+hVukatDb4sOQ/PY7451ROtVVMB2yY
T7f0GhlPbIEr2ZvQzQyY20SggPpSFgS5gq/ON7ah+4oE9cH1vA3J2Xx41VNxQTfX
nc7yxV8XBMB7gyWM5QWMY85fiXpE4JbVeeR1EvgXQgaSvlEns0p9M0SRfe6KIvCb
PCRKdFCsR2qVViJbea1yXB6iPegI5tiDaakmaa/oh5TumdlZNynMSSghL+coXZ+T
tiOS3AoKijwd7P5gxQCatMrxTLlfVu0i5WKPEKPTR2FU98V2Ei71FVp/BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnxR1PhXYdsA/9Uiwo8Yn2ucol1MB8GA1UdIwQY
MBaAFJILTBnC/pY7/XmcKhlfhmgt535VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2d0TUdjTC1sanY5ZVp3cUdWLUdhQzNuZmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNDU3MDEtZjY1Zi00ZTMzLWE3YTkt
OGE5NjE5MWZlOTk5LzEva2d0TUdjTC1sanY5ZVp3cUdWLUdhQzNuZmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xNDU3MDEtZjY1Zi00ZTMzLWE3YTktOGE5NjE5MWZlOTk5
LzEva2d0TUdjTC1sanY5ZVp3cUdWLUdhQzNuZmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPKyo04V
LozgelY1GOrrexf1j+l8NG09ZvaZyDKFUKXA9Ev2pO6o2qp+1rPHG/kG2KwzSzbb
ZP5ZgEXniO3ufCUQ+v8g3kXEy1mA52ici7uAN7gzd2QJfOq2g270QJ3fXTU4vdCo
m4ae6gPpfaAr0tykMq5rzgDennpDEFv1NLAv8SApkPTkPUr4pI3tzTB5mtc1lQy5
7Erle+B+soIuiSvjt0iTJLkbp2Owj/4v45g7hegGbNvKmJrBB3oHf3hJwnI++p5a
V3QSk4Yd8s3ge3hpERYhFlqZQE6jZGJ4H5DYgceR4c31g6mIP7cXNzh2tfyglTeb
vBGkzcwSNmilbw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:38 2026 by rpki-client