Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: ydEFeLsSmWhRspFBaMP+/jh4R5194E5ZORkGYklTyQg=
Subject key identifier: E6:01:ED:45:C5:C0:7B:49:5E:F9:74:10:18:4C:D3:86:55:AE:F3:81
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 019FA07184AF3515607543785F34C2153514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 22:00:21 +0000
Manifest this update: Sun 26 Jul 2026 22:00:21 +0000
Manifest next update: Mon 27 Jul 2026 22:00:21 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: UOySZan9cwPZkgJQlD0Fvqyf7+Lb6CJjH4xTiDRPmnU=)
2: Lt1d_zlwhux2IVzKQWnKfN58kb4.roa (hash: ir0joYXK6Nxy/SHex21LkKB897GX0TnoKlLbL29fcKU=)
3: XtaithTRmiOvWOEKSiRCjVsSSJk.roa (hash: IQ/PuMeeWoBaHEJ1ygdil0Mb3v2vh5Ek1c14zbUB6a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:84:af:35:15:60:75:43:78:5f:34:c2:15:35:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Jul 26 22:00:21 2026 GMT
Not After : Jul 27 22:00:21 2026 GMT
Subject: CN=e601ed45c5c07b495ef97410184cd38655aef381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:c8:11:ff:77:38:aa:e9:14:15:ee:66:ff:
89:2f:3f:25:79:be:e8:39:c9:cd:d7:30:21:1d:a2:
df:ec:d7:91:59:12:8f:b4:f6:9c:d2:fd:0b:5a:1e:
ef:d9:3a:71:1b:40:3d:f3:06:96:3a:d2:80:40:71:
0b:8f:f8:8b:88:44:b5:48:92:a4:2a:fe:91:e9:97:
8c:35:35:55:32:51:ef:99:e8:3b:64:07:9c:ea:04:
bf:26:64:ab:9e:1f:3c:92:e7:91:84:e9:ce:e1:bd:
07:1d:4c:ac:34:25:d2:14:ca:1b:e4:d7:1c:26:35:
7b:f1:00:df:09:b9:19:dd:68:74:d7:c8:a8:05:37:
d2:0f:8e:ad:38:c3:93:c7:8b:cb:f8:63:e5:02:e0:
6d:20:88:66:6d:03:c2:e2:8d:fc:71:03:fc:35:24:
2e:61:a1:8f:a0:b9:41:36:06:7a:ee:64:59:5f:1a:
2e:bd:b1:7e:e1:ef:a7:0f:7e:e5:75:85:c0:7c:d1:
de:93:63:e5:37:e7:d8:10:59:13:b4:80:fc:ed:68:
24:b6:06:4f:4a:03:3a:d6:04:c8:44:fe:d7:7d:fb:
f1:33:4a:1a:e4:2b:2f:14:57:45:e6:92:cc:ce:dd:
a2:54:d7:3c:91:ad:4a:04:84:d1:60:42:5f:13:38:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:01:ED:45:C5:C0:7B:49:5E:F9:74:10:18:4C:D3:86:55:AE:F3:81
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:a3:13:4e:9d:52:31:e3:7b:7f:07:32:77:56:e3:cb:49:
af:e0:b0:d9:9b:01:77:8f:f7:45:02:d6:be:d0:e7:7e:e6:21:
1d:39:53:d1:83:f7:a9:3f:f0:35:28:96:b6:1f:60:bc:03:65:
f1:6e:49:bf:8b:a4:99:74:0b:d4:c9:b7:57:cd:0a:88:bd:99:
7b:6e:a7:8a:93:2c:20:ac:da:bc:44:46:69:bd:d1:00:25:f0:
96:83:4e:9e:88:29:cc:70:dc:15:63:1b:50:ab:32:02:4f:33:
ea:6f:3d:ae:be:34:fe:25:63:e1:81:72:2b:50:18:0a:fd:b9:
87:be:82:e8:fe:e0:ee:80:5c:cb:ba:09:66:71:eb:24:b7:dd:
e9:a8:0e:31:86:f7:05:01:fb:0d:f9:c6:ed:17:75:ff:e0:d1:
40:2d:5b:5b:c7:c7:5a:02:43:7e:ac:49:4c:99:6c:de:7c:33:
9f:38:6a:0d:ad:b5:24:1b:9f:30:ea:84:c6:09:92:23:66:96:
a9:dd:4a:a3:f7:47:2f:48:f4:3b:d5:3c:19:52:98:90:05:7e:
4f:e8:5f:f3:48:10:5f:3a:db:b2:1e:3d:c1:47:15:f3:e4:80:
c7:2c:74:94:ad:14:15:e2:b1:bb:6e:51:01:36:e2:0d:aa:28:
b7:cc:a2:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcYSvNRVgdUN4XzTCFTUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjY4N2ZiNjRhNzdmMDEwMGJhZjIzZDRmMzQxZWNlNzc1
OTUwZTUwHhcNMjYwNzI2MjIwMDIxWhcNMjYwNzI3MjIwMDIxWjAzMTEwLwYDVQQD
EyhlNjAxZWQ0NWM1YzA3YjQ5NWVmOTc0MTAxODRjZDM4NjU1YWVmMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4LIEf93OKrpFBXuZv+JLz8leb7o
OcnN1zAhHaLf7NeRWRKPtPac0v0LWh7v2TpxG0A98waWOtKAQHELj/iLiES1SJKk
Kv6R6ZeMNTVVMlHvmeg7ZAec6gS/JmSrnh88kueRhOnO4b0HHUysNCXSFMob5Ncc
JjV78QDfCbkZ3Wh018ioBTfSD46tOMOTx4vL+GPlAuBtIIhmbQPC4o38cQP8NSQu
YaGPoLlBNgZ67mRZXxouvbF+4e+nD37ldYXAfNHek2PlN+fYEFkTtID87WgktgZP
SgM61gTIRP7XffvxM0oa5CsvFFdF5pLMzt2iVNc8ka1KBITRYEJfEzhVJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYB7UXFwHtJXvl0EBhM04ZVrvOBMB8GA1UdIwQY
MBaAFChmh/tkp38BALryPU80Hs53WVDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMDUyYWQtM2Q0MS00NWRhLTg0NzQt
NjMzOWY2YjM2YmNiLzEvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMDUyYWQtM2Q0MS00NWRhLTg0NzQtNjMzOWY2YjM2YmNi
LzEvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUyjE06d
UjHje38HMndW48tJr+Cw2ZsBd4/3RQLWvtDnfuYhHTlT0YP3qT/wNSiWth9gvANl
8W5Jv4ukmXQL1Mm3V80KiL2Ze26nipMsIKzavERGab3RACXwloNOnogpzHDcFWMb
UKsyAk8z6m89rr40/iVj4YFyK1AYCv25h76C6P7g7oBcy7oJZnHrJLfd6agOMYb3
BQH7DfnG7Rd1/+DRQC1bW8fHWgJDfqxJTJls3nwznzhqDa21JBufMOqExgmSI2aW
qd1Ko/dHL0j0O9U8GVKYkAV+T+hf80gQXzrbsh49wUcV8+SAxyx0lK0UFeKxu25R
ATbiDaoot8yi2g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:37:51 2026 by rpki-client