Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
File: kyZYOBNEfHvd61oBwydNjkHDAaI.mft (raw, json)
Hash identifier: Rhbto6USLQAYyIgacvQnj1lYAp+52HhbwNLu+RyNdFs=
Subject key identifier: 50:26:D7:8A:42:BD:22:D1:48:5A:70:1A:DD:63:02:75:22:45:8D:52
Authority key identifier: 93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
Certificate issuer: /CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Certificate serial: 019D2772E592DE5C1D2A36B0CA33F3BA63F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
Manifest number: 134D
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: kyZYOBNEfHvd61oBwydNjkHDAaI.crl (hash: H+/nDlutA+WRYO7G9QMwCmDuZlM/rnLyP9n19vZ+SH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e5:92:de:5c:1d:2a:36:b0:ca:33:f3:ba:63:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=5026d78a42bd22d1485a701add63027522458d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:f7:14:50:01:5c:fa:3c:57:d3:33:01:5d:
f3:44:94:70:b5:ea:bc:a0:b4:d0:b0:64:79:b7:af:
84:59:a7:f0:55:8c:ec:b8:70:60:18:89:8d:83:43:
b4:a1:6c:12:c3:4f:39:f2:d8:84:b6:e0:14:eb:2c:
6b:fc:b7:ee:c4:54:03:9c:38:cc:5a:04:d3:36:2f:
75:a7:05:f8:cb:e0:a4:a1:00:3a:e9:a9:89:30:23:
9b:e0:ce:9c:9b:4f:23:c8:72:08:36:d0:58:7b:e7:
22:e2:23:29:f2:5a:83:11:ae:98:ea:1c:25:42:aa:
8c:05:01:49:91:3f:94:cd:43:50:a0:a2:e6:9b:23:
8b:9a:99:15:3c:d9:6b:53:6c:53:4a:cf:69:fd:f4:
ed:e9:66:2c:38:06:15:93:aa:ac:3b:53:ea:df:1c:
54:93:b0:29:fb:66:a9:b2:da:05:01:b1:6b:d2:82:
24:51:d5:cd:ec:ca:df:ed:ab:66:11:55:b3:aa:35:
4c:76:d4:46:aa:f2:ab:79:28:6a:fc:26:01:a5:83:
23:07:35:d4:16:35:7e:c2:55:da:10:df:71:30:99:
e7:8f:96:84:c0:27:2a:31:75:19:62:bc:6e:fd:e0:
78:b0:4c:05:93:8f:85:f1:2a:a1:ce:b3:84:3c:fd:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:26:D7:8A:42:BD:22:D1:48:5A:70:1A:DD:63:02:75:22:45:8D:52
X509v3 Authority Key Identifier:
keyid:93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:db:05:8c:62:3f:7a:1f:50:fe:e7:9f:a8:ff:b9:e1:ac:0a:
4f:59:76:0b:9d:9b:b5:7a:da:2b:4f:a9:c0:78:e7:3b:8d:fa:
9a:86:46:9e:18:a4:4c:67:3b:d1:db:d8:ff:4e:30:3f:aa:51:
eb:7f:f3:25:04:d8:9b:58:2f:85:a4:d0:d3:50:04:61:ce:60:
44:40:5e:56:a2:fe:51:69:68:98:d0:87:f5:0c:14:b6:77:09:
03:c9:c3:33:a0:b0:61:21:71:00:3b:3c:4d:bb:28:48:2c:71:
e3:75:21:a2:08:f3:62:01:ae:95:e4:82:bd:5b:2b:63:b0:f6:
34:79:9e:6d:79:6b:91:a5:d7:04:65:53:36:a4:b7:14:f5:61:
51:bd:92:f9:4b:57:34:12:48:da:50:06:81:19:8f:82:37:65:
c8:27:a1:44:62:d6:fe:0a:43:56:cb:eb:68:1b:ed:b1:9c:9a:
58:01:9b:d7:80:81:f7:fa:11:57:23:e3:48:2a:01:06:df:ac:
26:17:f2:6b:84:aa:a6:10:96:11:1c:9e:ed:dd:70:d0:08:af:
ed:88:b3:f1:ab:c1:f8:9b:28:b1:d1:69:e2:28:ae:c4:13:c5:
65:42:c6:1a:67:6e:44:a4:09:a1:17:3c:83:85:63:9a:d0:9c:
a0:c2:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:19 2026 by rpki-client