Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
File: kgGio1zO6PsPuXFJ3JEi7_odV1M.mft (raw, json)
Hash identifier: 4q1TCfDyg4R9n1OP7wH0BMrbU9OndK3MVHkitLCRyGc=
Subject key identifier: 3E:4E:A3:C0:6F:D2:EF:08:A5:00:1F:D5:43:BD:72:5B:C4:5A:55:71
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Certificate issuer: /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial: 01A020562352454487A0811B328439F8598F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:50 +0000
Manifest this update: Thu 20 Aug 2026 18:01:50 +0000
Manifest next update: Fri 21 Aug 2026 18:01:50 +0000
Files and hashes: 1: 29oQ-_YhALXcaCnBoms6zHFWIUg.roa (hash: YFqwumFUQeEWBhccMhC9hd/OtihPR9k55c5uhqWfTXo=)
2: kgGio1zO6PsPuXFJ3JEi7_odV1M.crl (hash: kh4Od65Iqx8dgCdWgJWhUyDn8jMNkSLc8vjLD1Dyr2s=)
3: pHG0Dgz01aKv0bEBf6QDC18dcjc.roa (hash: cW2NoY7QV6boSwo2uyAkmvFSGtyInVd1Rb4XruZtXJY=)
4: pxq446UNxMX48IpTz2HO1tgd-0s.roa (hash: DkFJ/lcWoJ1EwOJ8iauCFG324UnqbAJK8P24azgmuwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:23:52:45:44:87:a0:81:1b:32:84:39:f8:59:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Validity
Not Before: Aug 20 18:01:50 2026 GMT
Not After : Aug 21 18:01:50 2026 GMT
Subject: CN=3e4ea3c06fd2ef08a5001fd543bd725bc45a5571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:16:13:8c:8d:5d:5b:6a:ac:d0:51:a6:ab:
5e:5b:0e:68:65:1c:c3:3d:13:fa:dd:60:28:39:29:
fd:10:dc:5e:f1:06:1f:ee:ed:98:c1:fb:f7:49:31:
8f:08:92:78:c3:6c:a8:b7:05:a2:b1:b7:57:f3:97:
a6:9c:e2:0f:d9:13:2b:06:ee:c1:b9:91:70:d7:7f:
14:ba:5d:16:40:f3:0d:f6:e2:fe:5c:57:19:29:6e:
6c:a6:30:28:b4:e0:71:70:af:b0:67:91:8c:fd:2d:
c2:d4:0e:41:e5:7a:ef:8c:35:21:63:22:68:62:dc:
47:81:c9:6f:b4:4c:a1:ac:05:f7:34:d6:b5:f9:97:
13:a4:33:73:17:4f:cf:de:c5:d4:32:28:2b:cf:3a:
46:8f:04:67:c9:7e:35:1e:8e:bf:b4:cf:f9:18:9e:
84:dd:00:d2:87:2d:ff:4d:60:2f:41:d6:8a:97:0a:
11:e9:2e:e0:64:72:ce:c8:ac:54:d2:2b:04:fc:04:
55:3f:b0:e6:e5:d1:c2:70:27:6b:e0:e5:e1:0a:b6:
c7:2d:fe:1f:52:c6:d8:c4:0f:45:92:f8:19:64:8d:
65:f7:3a:bf:2d:cb:35:98:56:af:f0:b5:e8:9e:94:
61:13:d7:a7:48:33:b7:ca:7d:ac:44:14:62:b5:be:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:A3:C0:6F:D2:EF:08:A5:00:1F:D5:43:BD:72:5B:C4:5A:55:71
X509v3 Authority Key Identifier:
keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:c7:09:fa:34:2b:63:5b:37:d2:b5:8b:75:81:7a:84:e4:
76:be:95:f2:69:4f:a4:c7:93:33:2a:93:ed:ca:c0:e1:44:28:
76:65:5a:9c:79:9f:75:4c:1c:bc:b2:d8:c3:fa:56:ca:b2:94:
87:e1:c0:2c:f3:b8:a8:ee:75:cf:a9:9d:e6:0f:f6:59:b4:70:
f4:57:dd:78:34:f4:3d:2b:ea:2f:9f:df:a8:90:7b:97:bb:c1:
6c:23:b5:db:98:23:a8:19:b7:cd:19:85:6b:66:51:61:35:be:
18:da:b1:39:61:78:d0:47:16:c3:6e:83:14:49:86:7a:7e:1a:
2b:e5:1a:47:c7:19:b8:98:57:54:83:ec:88:d3:d2:fc:a4:08:
7e:e6:78:47:79:79:b0:c2:c5:54:9e:44:9d:e0:bf:3c:76:93:
81:8d:3c:98:34:e0:49:9c:13:54:f7:61:36:f7:36:f9:98:71:
d5:5d:ec:6e:5c:66:51:e7:71:63:1b:34:bc:4d:9b:77:f0:46:
c6:24:dc:ef:81:2e:05:ca:0b:1c:27:1d:cc:90:b1:37:63:d3:
4c:36:c6:9d:be:da:a2:be:02:d6:c3:4f:58:71:d7:33:e0:9a:
52:51:6f:35:e3:bb:16:bd:3a:1e:06:53:71:ce:ae:2e:bb:65:
68:d4:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:45 2026 by rpki-client