Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: xJ0qv3C01AIFfBtQRbvy/eXJWGRO2+kqWhrCNdgDBn8=
Subject key identifier: 33:33:A5:5C:18:CE:F4:19:29:13:7D:9E:B3:93:7F:2D:54:CC:8C:D0
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 01A17C2908C52A588159327D9F131C0A59E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 1033
Signing time: Tue 27 Oct 2026 07:00:26 +0000
Manifest this update: Tue 27 Oct 2026 07:00:26 +0000
Manifest next update: Wed 28 Oct 2026 07:00:26 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: Ymi6asyB5tyUFshSvt4GVVjowkvKYhxOc0ureFRieOA=)
2: jY0MoOJ3PtdveQuCsZ0fuBIhTjY.roa (hash: vqPVQAGkx6I5WnNS9zEmXw+PjdH2vmfPnggrjPunD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:08:c5:2a:58:81:59:32:7d:9f:13:1c:0a:59:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Oct 27 07:00:26 2026 GMT
Not After : Oct 28 07:00:26 2026 GMT
Subject: CN=3333a55c18cef41929137d9eb3937f2d54cc8cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:23:a5:f2:e8:cf:1c:50:a8:c8:2a:5c:3d:
40:c8:a5:ae:79:34:e4:ec:ea:73:9a:e1:ef:6b:d4:
e0:c9:8a:35:d8:7f:88:a0:cc:ef:89:a8:69:35:a8:
d6:47:5a:7f:cf:8a:67:49:6c:73:0a:7c:fb:2f:08:
86:18:d0:dc:8d:7f:e6:1d:41:5c:8a:8b:08:3b:06:
20:a6:2b:0c:62:f8:59:47:f4:98:c4:ad:80:3b:c3:
47:1e:d3:c7:8a:58:8f:5b:25:00:af:37:95:77:07:
7b:fa:02:dd:7c:82:05:dc:f1:35:ad:1e:6e:ff:62:
36:9d:f0:f2:91:e2:77:e4:bf:07:a0:56:33:fa:00:
8c:6e:4c:fa:aa:1e:67:9c:45:2b:dd:27:7d:d9:fa:
91:1d:1d:cc:9c:95:e5:48:43:69:c4:88:54:4c:29:
95:66:c9:9b:6d:7c:0f:7a:d7:e9:9b:47:a6:4b:66:
28:d2:67:d1:90:7f:9c:e3:7a:8f:9d:91:66:96:28:
b3:69:6c:4f:6d:38:73:69:dd:82:76:9a:7f:55:74:
26:29:fd:12:55:1c:80:ee:f8:30:a5:76:f3:45:e9:
96:78:96:b3:7f:b8:4f:54:37:a1:bd:78:e9:cc:f3:
50:f0:1c:57:79:a5:8b:d2:23:43:fa:1a:e3:fa:96:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:33:A5:5C:18:CE:F4:19:29:13:7D:9E:B3:93:7F:2D:54:CC:8C:D0
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5d:a5:82:d5:36:e8:9c:e0:43:5d:51:06:2b:25:ad:24:41:
23:49:cb:5c:24:07:44:d0:04:23:79:21:c4:e9:71:ef:21:d8:
77:17:f6:53:3a:47:25:6e:f1:aa:42:80:39:a6:41:78:ae:6f:
6b:4c:6f:08:30:f2:c2:60:f2:64:4d:e6:d5:1e:b5:0a:61:6d:
4a:41:05:a0:06:5e:55:b5:df:16:b3:bb:44:53:e7:58:fe:3a:
6c:64:2c:b5:84:53:a7:3e:10:85:d2:3e:17:0e:e5:6a:66:ca:
c3:2d:6b:81:ed:73:d7:e9:c7:c9:c2:23:14:b2:2c:ac:6d:92:
00:47:a5:d0:8a:da:51:57:f9:26:e7:56:a4:45:0d:bf:0d:4d:
a2:a4:13:20:27:76:a7:8c:c1:ca:82:9c:ae:31:2d:71:3e:9b:
d3:da:ff:fb:c1:0b:9b:0b:7d:7c:12:ac:e6:11:79:98:53:fc:
f2:2b:8f:8b:93:61:ab:b5:cd:3a:5e:39:57:e0:31:fa:a5:ca:
93:c6:ef:b0:42:95:a0:74:67:4a:69:8c:ec:32:24:49:d7:06:
d4:3b:7b:73:5b:b5:dc:e6:4b:ed:f0:05:07:12:5e:5c:29:ba:
e0:4b:c0:7a:c4:64:60:6b:38:c9:d2:2f:7b:75:ba:ac:8d:0b:
7e:2d:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:28:32 2026 by rpki-client