Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: CBMU0gmZLuOhMmw/yFlvHgPAm2l0Xith5rZNnwbeBeo=
Subject key identifier: AD:BF:7D:C1:65:D9:8A:21:C2:F8:1C:5C:7B:10:15:53:30:68:C0:CA
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 019FA6E2442058B9AE7E533777CB1200AE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0F40
Signing time: Tue 28 Jul 2026 04:01:14 +0000
Manifest this update: Tue 28 Jul 2026 04:01:14 +0000
Manifest next update: Wed 29 Jul 2026 04:01:14 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: YJCVwGAT2YBMQ96/9hyDxx+PaHgfBKZ2oF6BbbQrVe8=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:e2:44:20:58:b9:ae:7e:53:37:77:cb:12:00:ae:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Jul 28 04:01:14 2026 GMT
Not After : Jul 29 04:01:14 2026 GMT
Subject: CN=adbf7dc165d98a21c2f81c5c7b1015533068c0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:64:b0:56:90:98:9b:3a:6e:ce:a2:a2:3a:
d6:f3:e8:f2:e2:73:ba:88:ba:dd:31:af:5c:93:8a:
6a:5c:b3:2b:2b:3c:2f:10:d6:4a:c7:ed:22:36:f8:
96:09:07:5d:83:3a:e6:fa:36:41:ac:3c:2e:78:c8:
7b:82:b3:7e:33:48:56:78:bd:a0:a5:4a:a5:1a:00:
33:08:fd:29:76:c4:5b:83:47:67:8a:0e:9a:09:81:
7f:be:85:16:09:bc:b8:e2:43:fc:b9:a5:69:88:ba:
50:d2:82:9f:ab:51:6f:d4:8b:1e:ab:77:2e:12:b4:
90:09:0f:9d:64:01:91:ea:6a:60:11:7b:5f:f3:9b:
65:f0:aa:d3:d5:ef:56:5e:16:92:67:0a:94:df:04:
c5:19:50:b0:be:c2:9b:6c:27:e6:b7:cc:c3:a0:d7:
c2:32:7b:15:00:2d:08:60:5d:54:67:51:40:05:54:
5c:4e:a3:02:e7:e3:01:a9:b4:7e:46:c2:22:b9:45:
41:59:2c:7a:32:a0:7e:21:e7:94:56:b4:80:75:41:
bd:c3:a8:c1:90:4f:12:de:f2:0e:82:87:e4:09:6c:
2f:c9:b3:8d:2a:03:2c:24:2b:93:aa:0f:73:f8:87:
79:e2:de:ff:14:3f:77:b3:a4:18:78:34:90:a4:4e:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:7D:C1:65:D9:8A:21:C2:F8:1C:5C:7B:10:15:53:30:68:C0:CA
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3e:9f:9d:07:91:20:23:cc:d5:d5:4c:61:8a:cb:f7:68:17:
ff:1a:82:75:1e:62:83:1a:2b:21:e8:97:30:d7:03:19:f7:a2:
4f:ef:d8:6b:32:74:23:fb:fa:12:2c:8b:50:e4:7d:c4:e0:4b:
75:46:aa:85:d0:6d:d7:a6:13:88:09:54:1c:03:1b:81:e0:05:
6f:14:15:4b:15:cc:d3:27:7d:08:3d:8a:7d:94:a0:f6:4e:99:
63:17:ff:37:91:b5:b0:eb:83:2d:2b:f0:14:27:51:03:f3:93:
db:a7:77:23:90:f2:46:ce:4f:c6:66:00:ba:3b:78:37:9b:8e:
19:9a:de:cd:96:b4:ee:f2:3c:8a:2d:7e:d8:b8:ba:e8:c8:d1:
4a:2d:6a:07:23:2f:a6:ec:ae:a9:b9:6b:02:a6:f2:eb:99:ef:
66:cc:59:4e:ad:10:e0:79:f0:85:49:0c:01:38:73:ac:0e:49:
d6:76:ed:c9:10:d8:5e:32:48:a8:5a:8d:30:86:ea:1b:13:33:
33:73:bc:76:4d:24:18:42:2a:29:ef:ba:c4:77:ee:69:8b:ca:
3c:c0:6a:c8:ea:67:4d:a0:05:1b:d0:31:cc:a0:da:90:be:86:
f0:7d:7c:85:13:86:f3:1d:1a:4d:9d:c3:d9:b0:15:f9:14:87:
0d:06:62:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+m4kQgWLmuflM3d8sSAK6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDE5Y2FkYTE2M2UzNjhjYzMzNjI3NjNmMjA2YjNkZWFj
NGQzMjAwHhcNMjYwNzI4MDQwMTE0WhcNMjYwNzI5MDQwMTE0WjAzMTEwLwYDVQQD
EyhhZGJmN2RjMTY1ZDk4YTIxYzJmODFjNWM3YjEwMTU1MzMwNjhjMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7xksFaQmJs6bs6iojrW8+jy4nO6
iLrdMa9ck4pqXLMrKzwvENZKx+0iNviWCQddgzrm+jZBrDwueMh7grN+M0hWeL2g
pUqlGgAzCP0pdsRbg0dnig6aCYF/voUWCby44kP8uaVpiLpQ0oKfq1Fv1Iseq3cu
ErSQCQ+dZAGR6mpgEXtf85tl8KrT1e9WXhaSZwqU3wTFGVCwvsKbbCfmt8zDoNfC
MnsVAC0IYF1UZ1FABVRcTqMC5+MBqbR+RsIiuUVBWSx6MqB+IeeUVrSAdUG9w6jB
kE8S3vIOgofkCWwvybONKgMsJCuTqg9z+Id54t7/FD93s6QYeDSQpE48yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2/fcFl2YohwvgcXHsQFVMwaMDKMB8GA1UdIwQY
MBaAFCoBnK2hY+NozDNidj8gaz3qxNMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDkt
MTQ5ZjYzNjVmZmRhLzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80M2E2NzItZDE1MS00YzRlLTk4MDktMTQ5ZjYzNjVmZmRh
LzEvS2dHY3JhRmo0MmpNTTJKMlB5QnJQZXJFMHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD6fnQeR
ICPM1dVMYYrL92gX/xqCdR5igxorIeiXMNcDGfeiT+/YazJ0I/v6EiyLUOR9xOBL
dUaqhdBt16YTiAlUHAMbgeAFbxQVSxXM0yd9CD2KfZSg9k6ZYxf/N5G1sOuDLSvw
FCdRA/OT26d3I5DyRs5PxmYAujt4N5uOGZrezZa07vI8ii1+2Li66MjRSi1qByMv
puyuqblrAqby65nvZsxZTq0Q4HnwhUkMAThzrA5J1nbtyRDYXjJIqFqNMIbqGxMz
M3O8dk0kGEIqKe+6xHfuaYvKPMBqyOpnTaAFG9AxzKDakL6G8H18hROG8x0aTZ3D
2bAV+RSHDQZiUQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 10:32:03 2026 by rpki-client