Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier: IKdFEfyagmU+FEcUOGvBCtrsMRoF5/TEeLwMNfPWsMc=
Subject key identifier: 0F:50:9B:9B:0F:85:DC:F2:01:BE:26:32:5C:2F:ED:16:F2:A7:39:01
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01A0F6E8E737C3FFB0BA5A330E7D877C0266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number: 127B
Signing time: Thu 01 Oct 2026 10:00:53 +0000
Manifest this update: Thu 01 Oct 2026 10:00:53 +0000
Manifest next update: Fri 02 Oct 2026 10:00:53 +0000
Files and hashes: 1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
5: JZY_foOujAs2S8oyUiHgzJmfQdc.roa (hash: DgfisKHYgXWyrC09kLGXsPVkL/aoRfMRq+KSAiwmCN4=)
6: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: 2zKHvQx8bB63cHFV3FQHljD1DonPl0Hkc2My6sNUFrk=)
7: fEVKCWfXS81UhHXs6FzXRgVVlS0.roa (hash: DYXjiwoD9ieXBJq5p3EJXuBIjNeNxc0egoZ1sUSDsuY=)
8: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e8:e7:37:c3:ff:b0:ba:5a:33:0e:7d:87:7c:02:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Oct 1 10:00:53 2026 GMT
Not After : Oct 2 10:00:53 2026 GMT
Subject: CN=0f509b9b0f85dcf201be26325c2fed16f2a73901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:6c:d2:02:40:6a:d0:f8:e1:f0:c3:40:c2:
02:8f:7c:82:55:1a:b4:45:96:11:b2:d4:49:70:c5:
7a:d9:f9:44:80:bc:72:0a:27:35:db:97:31:29:9c:
2e:00:c8:ff:03:ee:91:7a:64:04:00:9c:95:7a:5f:
16:8a:46:dd:2c:c1:a0:79:e1:e2:b5:0a:aa:39:c4:
cf:ce:6d:fc:a6:5f:4c:c0:75:63:cc:66:75:8c:3d:
7d:23:14:4e:2e:89:70:82:6a:48:3f:e6:c1:a1:bf:
e9:f1:6b:b7:15:4a:86:4d:7f:02:d8:48:91:19:30:
0d:17:22:be:26:ed:43:d3:c4:e7:5c:ac:34:9e:6d:
42:a7:f0:ce:36:8a:3f:1f:df:72:68:9f:2a:90:0e:
33:90:51:d2:d5:7b:d4:51:f2:dc:5f:47:99:7e:1f:
ec:4c:b9:82:c3:3c:b8:f5:14:a6:b8:15:49:04:2d:
6c:69:b1:e3:62:3c:7b:db:c0:c7:7a:ef:db:ba:34:
34:58:d5:20:8a:22:2f:e9:60:ac:ca:6d:7a:2b:9f:
52:07:e9:23:6e:00:b5:6a:b4:ae:d9:75:da:07:97:
93:6c:91:35:19:09:d2:bd:09:03:17:7d:42:15:59:
06:a3:2e:7f:49:08:8c:55:d4:26:27:af:c2:67:80:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:50:9B:9B:0F:85:DC:F2:01:BE:26:32:5C:2F:ED:16:F2:A7:39:01
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:19:e7:a1:d2:45:96:fe:32:a0:b6:2b:03:9e:0c:cf:49:96:
5f:17:30:82:3d:64:9b:78:5e:4b:12:5e:9b:8e:e5:4e:72:26:
74:36:b5:7e:92:e1:32:73:f8:9e:c4:41:36:77:16:35:95:22:
7b:8f:04:91:53:5f:67:77:4d:1d:d4:82:0b:cc:84:d9:43:11:
7b:cc:c6:d7:83:9a:30:a7:ec:d3:04:b5:46:c0:85:05:a0:d3:
a7:c3:58:08:8d:bc:36:d3:f0:c8:bd:b8:f5:27:d6:83:60:0e:
a2:2e:53:f9:7f:10:6f:4d:25:db:d1:17:7d:fc:f5:aa:63:bd:
7c:c5:72:81:d1:14:9d:81:94:fb:5f:bb:58:e7:77:68:7e:33:
ba:0a:d4:ac:6d:61:be:cd:10:25:15:8e:60:5e:c7:4d:a0:7c:
f6:8b:76:83:af:f3:2e:ce:bf:b5:df:cb:19:00:71:0b:bd:07:
e1:a4:4b:e1:a6:99:d5:ee:52:83:53:60:60:1c:03:0e:c1:bd:
df:ff:bb:77:3a:3f:a2:9c:3f:6e:a4:28:90:12:f1:eb:28:33:
e6:e8:ca:55:2e:90:96:07:9a:c8:fb:e9:1a:ee:3b:fa:8d:e9:
b9:f1:37:0c:4e:71:9b:7b:db:98:5b:c0:98:85:4a:e1:d2:51:
a3:83:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:21:08 2026 by rpki-client