Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier: v8/LZGrz2pdiaS1Ft48EoKq5y/Rr0qBZyfinSykRM5o=
Subject key identifier: 9A:4F:E7:44:34:C4:7D:0D:F8:04:25:C7:E3:C0:14:78:EF:50:B0:4A
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial: 019D27E009D917C6C24FB6F30EC9AD893A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number: 138A
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: +nydLsHGyr/FrlX2nPoQ2zE/ULMrUXq/UE23dNM964I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:09:d9:17:c6:c2:4f:b6:f3:0e:c9:ad:89:3a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=9a4fe74434c47d0df80425c7e3c01478ef50b04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:7c:1f:ef:d3:11:f9:d2:71:a6:5b:76:51:
eb:58:d2:8e:26:c1:d9:76:df:10:a8:6d:e6:95:8d:
94:73:31:8e:0a:e6:0d:ee:44:d3:75:2c:da:af:5c:
90:55:eb:0f:44:40:53:0e:9a:a1:8a:51:8f:20:5d:
1e:41:56:8c:47:a6:51:33:3a:5a:1d:a1:c7:f6:7c:
18:01:07:40:ef:e3:80:77:bb:86:3e:3a:27:1c:34:
f3:86:b8:c5:58:c2:55:4a:b9:48:3e:97:56:a0:f1:
a3:2e:4b:e3:e1:53:d7:1f:82:bf:c6:c8:17:87:9c:
80:42:5d:e2:64:66:b6:f9:26:c7:65:d9:08:b8:c8:
9e:7c:2f:af:e7:af:52:f6:18:27:5a:b0:5e:18:3e:
ef:00:7a:c7:2c:fd:a1:f2:ed:32:b1:08:a4:28:63:
e8:15:94:74:06:86:8b:63:28:8a:4d:6f:a2:ad:92:
1b:c2:9e:11:71:58:bf:34:3d:b3:ca:9f:57:14:03:
2a:62:ed:de:d2:51:4d:81:29:4c:5c:04:0b:f0:14:
0c:8d:c2:9a:ed:94:8d:b8:25:58:86:ba:43:2e:f9:
de:20:b2:0b:b0:29:4e:4f:9f:78:fd:76:df:57:45:
24:1b:0b:41:89:bb:16:55:fb:f9:ca:19:b4:0e:61:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:E7:44:34:C4:7D:0D:F8:04:25:C7:E3:C0:14:78:EF:50:B0:4A
X509v3 Authority Key Identifier:
keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6c:30:63:01:c6:35:fb:86:61:47:ac:4b:ef:3c:30:bb:f7:
64:97:15:4d:f5:0d:35:b1:f7:e2:6f:93:a9:39:c1:f1:84:2d:
85:35:b0:4f:d2:c5:ae:45:4d:8a:87:cb:a7:3c:f1:b6:00:63:
c9:fd:a6:2f:dd:91:1f:6a:c0:56:d4:83:e5:03:58:23:c4:22:
33:5e:4e:6c:af:a9:ae:b7:f2:a3:04:fb:6d:1b:9f:00:02:30:
db:e3:ca:8d:6d:a8:85:6a:f3:0c:d2:67:2d:fc:c7:90:ab:57:
dc:8c:cb:64:10:f3:67:30:a5:5a:0e:1b:ec:13:90:75:ca:75:
f6:0a:04:44:b8:fe:07:06:6d:7b:71:d4:0e:32:e9:3d:59:94:
e7:6e:93:9e:77:ff:dc:3c:9b:0c:f5:b7:b2:d9:47:3e:b2:c3:
e2:fc:96:41:a7:31:78:19:f1:3d:69:5e:a1:6c:95:b2:3b:96:
2d:b0:ce:4d:cc:7d:98:0c:37:d4:31:96:ec:e4:89:5a:7a:0b:
e1:49:24:54:4b:60:78:af:d3:a7:dc:ba:a9:23:ff:79:68:68:
7f:dd:28:ff:ba:da:05:64:e0:ab:fa:23:d7:a9:33:7a:d1:56:
27:0b:26:71:3b:0f:58:cc:8a:85:ee:8f:e6:9e:42:64:ea:82:
f6:45:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:54 2026 by rpki-client