Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
File: kgGio1zO6PsPuXFJ3JEi7_odV1M.mft (raw, json)
Hash identifier: QpiZrcARhwHbqGfekeSnu3/xCQRpstRUZN8z0wc0cEk=
Subject key identifier: 32:EA:06:BB:01:2D:5E:0A:D3:CD:42:57:AE:87:D0:91:0C:35:8A:4C
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Certificate issuer: /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial: 019F36A9DB0B844C63BC003B2DB954AB1AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:02:09 +0000
Manifest this update: Mon 06 Jul 2026 09:02:09 +0000
Manifest next update: Tue 07 Jul 2026 09:02:09 +0000
Files and hashes: 1: 29oQ-_YhALXcaCnBoms6zHFWIUg.roa (hash: YFqwumFUQeEWBhccMhC9hd/OtihPR9k55c5uhqWfTXo=)
2: kgGio1zO6PsPuXFJ3JEi7_odV1M.crl (hash: ydcuiAblVfaC/zIcejuC09YmpgkLsdhzVvMgc4egHCc=)
3: pHG0Dgz01aKv0bEBf6QDC18dcjc.roa (hash: cW2NoY7QV6boSwo2uyAkmvFSGtyInVd1Rb4XruZtXJY=)
4: pxq446UNxMX48IpTz2HO1tgd-0s.roa (hash: DkFJ/lcWoJ1EwOJ8iauCFG324UnqbAJK8P24azgmuwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:db:0b:84:4c:63:bc:00:3b:2d:b9:54:ab:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Validity
Not Before: Jul 6 09:02:09 2026 GMT
Not After : Jul 7 09:02:09 2026 GMT
Subject: CN=32ea06bb012d5e0ad3cd4257ae87d0910c358a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:31:0e:17:7c:dd:4a:bf:3b:8f:53:f9:ac:
bc:d7:05:74:fd:a5:fe:69:4a:94:b8:c4:0c:04:a7:
c8:de:34:61:ce:ec:3c:81:f6:f9:d3:8a:30:bf:3c:
a0:b8:43:42:9a:6c:a5:eb:5f:3a:3e:27:ae:6f:bc:
73:be:89:03:d5:4d:da:c0:c6:e7:be:63:57:94:9d:
26:d2:50:46:e3:c0:9a:38:3c:5b:21:19:80:d7:42:
cb:54:a2:d4:91:97:5d:f3:6b:6f:cd:99:32:e9:81:
62:69:ac:2b:93:e1:9d:79:5e:cd:eb:c7:df:fc:c4:
a1:56:62:c1:85:54:3b:66:00:8a:17:2a:61:12:30:
bf:14:2d:aa:14:fc:5c:a7:13:2f:e4:b6:a9:85:cc:
6e:13:8b:9a:97:f5:56:8b:1d:2e:f1:4c:9a:bb:94:
b8:0c:6d:64:14:bd:5c:34:d8:83:9f:2f:b3:94:2f:
35:fe:9a:43:82:1a:98:80:ca:96:07:eb:c0:61:59:
d9:47:de:62:52:df:7a:92:bd:7b:ea:ab:9f:d2:80:
fe:a5:51:0c:67:6d:3e:7a:f1:8a:18:29:70:cb:a2:
e7:e1:d1:f4:44:e0:34:d2:cd:64:1f:e6:63:0c:57:
4b:61:b5:b6:f6:e3:3a:4d:7b:2b:c9:2a:3d:db:9f:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:06:BB:01:2D:5E:0A:D3:CD:42:57:AE:87:D0:91:0C:35:8A:4C
X509v3 Authority Key Identifier:
keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e3:f1:71:b4:4e:a0:b7:e2:92:a5:4b:31:2d:8f:2d:1d:e1:
e2:f8:f4:b0:ac:f4:dd:93:a5:ce:17:04:c9:81:aa:6c:46:f9:
8f:85:a4:44:55:be:40:6d:b5:83:a0:29:cf:4b:34:a4:8d:aa:
7f:af:a9:c7:67:17:ef:e4:04:ac:54:bd:70:57:16:11:8b:aa:
65:11:8d:cc:53:30:02:d9:cf:d3:5b:f7:52:08:14:cc:1a:a4:
e6:a2:05:95:72:0b:65:e9:5c:c0:64:f1:f6:ef:a3:94:69:1d:
c1:54:28:eb:47:d9:bd:35:63:70:9f:3d:06:73:66:01:ec:9b:
d9:da:2b:ac:bb:7b:70:e4:20:7c:c6:a2:77:22:df:5b:3b:2e:
6b:34:a7:4e:69:62:e2:4e:61:f1:f5:0f:84:bc:f2:96:0e:ee:
c3:ea:27:4d:93:8b:ff:f2:58:53:10:aa:fb:9c:23:9d:11:cb:
84:0f:7b:05:20:21:b9:67:a2:41:b6:67:e6:28:99:c3:af:03:
9d:f4:7d:82:14:71:07:17:75:c2:c2:ff:7e:6b:5a:70:0d:53:
ff:d0:84:cc:9c:5d:7f:42:ef:2a:a1:48:70:d9:ca:23:ed:50:
b1:79:75:b6:4e:fb:9c:02:bb:0a:e8:7a:22:17:fd:d7:cf:de:
94:d0:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:04:25 2026 by rpki-client