Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier: 5BY6X5qKi1zV5qXSTdQcVU16kNJDcPNptiiCv0slvDw=
Subject key identifier: C2:D9:39:0C:4D:F5:95:78:4B:0E:F6:55:EA:F1:3C:C4:1D:6C:C6:4D
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 019F9391D860FB47A1BCA87D8E0A048DB6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number: 11C3
Signing time: Fri 24 Jul 2026 10:00:36 +0000
Manifest this update: Fri 24 Jul 2026 10:00:36 +0000
Manifest next update: Sat 25 Jul 2026 10:00:36 +0000
Files and hashes: 1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
5: JZY_foOujAs2S8oyUiHgzJmfQdc.roa (hash: DgfisKHYgXWyrC09kLGXsPVkL/aoRfMRq+KSAiwmCN4=)
6: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: c0AxGhaa7WmPsg5HWV6GE10aCy/deTFWu9HLah3z/tE=)
7: fEVKCWfXS81UhHXs6FzXRgVVlS0.roa (hash: DYXjiwoD9ieXBJq5p3EJXuBIjNeNxc0egoZ1sUSDsuY=)
8: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:d8:60:fb:47:a1:bc:a8:7d:8e:0a:04:8d:b6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jul 24 10:00:36 2026 GMT
Not After : Jul 25 10:00:36 2026 GMT
Subject: CN=c2d9390c4df595784b0ef655eaf13cc41d6cc64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:35:e9:57:b3:06:40:15:64:50:12:c8:56:
06:6e:10:0b:c4:2d:79:19:b8:33:2a:68:3b:6c:2c:
7a:e5:2a:60:5a:7e:0a:6f:a8:06:66:7f:eb:3a:65:
2f:9c:af:67:3b:aa:65:d3:14:51:89:9f:71:a3:31:
d7:46:70:68:69:6d:de:9d:7a:de:05:20:f8:16:c1:
68:a7:a7:72:09:bd:6c:90:4b:b0:d0:6e:56:46:a3:
ef:e9:a7:c4:16:8d:02:9e:36:7b:f7:5b:f1:16:37:
c3:11:42:3b:1c:c0:67:5b:fe:bc:c1:2d:a1:8e:66:
4a:14:19:9d:46:30:90:ac:b5:45:30:c1:a1:68:dc:
a2:cd:cb:b0:6d:44:53:06:73:c3:e9:70:c4:70:13:
dd:9b:13:e7:26:d1:77:db:7d:80:11:9c:8f:ce:39:
70:36:b4:e1:40:94:bd:72:eb:09:e0:e0:4f:1f:01:
0d:ce:9c:6a:55:db:31:6a:c7:ea:31:a7:22:d8:18:
8c:9b:8e:f0:cf:68:ab:40:88:43:a2:7f:99:d2:c3:
bb:25:3e:00:05:a6:03:86:ca:8a:a8:99:a7:64:59:
27:12:7e:43:90:9b:92:d7:1c:bf:41:37:d8:c4:9a:
c1:19:06:81:e8:08:a8:dc:7a:99:d8:7d:b9:2e:46:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:39:0C:4D:F5:95:78:4B:0E:F6:55:EA:F1:3C:C4:1D:6C:C6:4D
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:01:a6:84:e6:5d:52:76:94:cd:2f:8a:a3:74:94:85:2d:
c1:88:5a:91:8b:fd:f2:6a:5e:80:f2:55:7a:5d:4a:57:98:55:
0c:15:cd:0e:22:a0:3c:9f:dd:71:7a:fc:59:0a:d6:2e:d7:35:
5d:51:4d:2d:1a:8d:45:1b:af:15:af:3f:d6:ab:8c:bb:94:45:
fe:1c:7b:e2:a0:ae:f4:fd:bd:3a:0d:6d:ae:94:f4:29:06:8b:
5e:8c:46:2b:75:fa:6d:56:fa:61:84:31:27:e5:3b:d2:a6:e3:
40:d3:fd:41:8c:16:d7:70:32:ec:ed:49:c1:d0:27:6c:8b:f9:
8e:9d:c7:6f:f3:43:c5:0b:c3:a2:7b:b1:4e:a0:d0:a3:60:9a:
36:d9:74:62:28:19:31:f3:69:4c:e3:eb:7d:a2:6a:35:67:ff:
02:53:ef:be:7b:61:83:59:73:ad:03:b2:cf:e7:95:62:c6:e2:
70:bd:a5:fc:7f:99:f8:86:f4:83:5f:78:d7:aa:61:fd:07:41:
c8:c8:2f:47:a2:60:40:dc:e4:ad:f1:c9:30:bc:ae:40:a4:85:
dd:6e:8f:fe:b4:cf:2a:69:39:ec:cc:2f:31:46:f6:a9:b3:f6:
2e:82:09:fb:bb:38:62:1f:61:bb:2e:a7:96:39:74:0f:97:1a:
c4:d1:af:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:44 2026 by rpki-client