Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: EBGdpVv9m/1DS/tcHAwCpWA9+3yS35ez7OLgWjCN5aY=
Subject key identifier: C9:CF:7D:AE:6C:C7:E2:12:80:7C:BF:63:14:3B:35:79:D1:60:93:9A
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 019D273B01F389D0E9AD0E6513E0946A7806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 11C8
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: xnSxCxjUXxqmHq4jNFTKBcNq77AAIdotPWD52TSn50o=)
2: WnrfeKHjp01grMlG1UefiIjVQJ0.roa (hash: 7Bp0dsKH9K4YXSeiewZoI6Eeafpuzu2XCcfRYrCLnF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:01:f3:89:d0:e9:ad:0e:65:13:e0:94:6a:78:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=c9cf7dae6cc7e212807cbf63143b3579d160939a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:22:1a:b9:94:b9:82:8b:84:e2:b8:9d:ef:
bb:71:b2:dd:a2:7b:55:6f:72:00:59:29:2b:dc:d4:
63:ce:c9:71:a5:17:83:3a:a3:b7:4c:22:43:d0:68:
42:ee:58:09:53:4d:94:f1:a4:f5:2c:82:47:bc:15:
bc:e2:28:64:39:f8:7d:ab:9e:5f:e9:7e:fa:6e:f0:
48:10:55:a3:ac:c1:69:8d:fc:3d:fc:aa:2e:0c:5f:
3a:09:37:f4:33:f2:16:48:c8:54:f5:38:a1:5e:96:
00:13:08:bd:78:e4:b5:8b:4d:fd:a5:4c:30:d9:20:
45:05:49:00:ff:46:27:83:6a:2a:c8:2e:b6:42:80:
f3:aa:41:50:63:58:ad:7d:68:ca:73:e3:ba:f8:30:
3f:18:e6:69:23:9a:d7:a6:e6:dd:60:71:4e:c9:71:
f7:84:b2:22:26:89:e3:68:ce:ed:49:f1:f5:53:04:
e8:93:21:aa:26:33:bc:35:6f:21:78:d0:68:75:75:
0e:1e:dd:2e:9a:51:08:9b:a9:23:a1:dc:2c:a4:36:
2d:5e:7e:74:71:9c:1b:fc:de:96:4c:39:e9:dc:b8:
10:0a:66:07:33:23:25:28:12:42:07:08:7c:e0:af:
ca:12:e5:98:be:89:e4:08:5f:ec:b6:71:cf:bc:1b:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:7D:AE:6C:C7:E2:12:80:7C:BF:63:14:3B:35:79:D1:60:93:9A
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c7:87:55:6e:00:af:37:c9:01:58:dd:ea:11:7c:f0:86:92:
39:25:65:cd:a9:6c:3c:45:55:c5:4d:11:7d:d9:06:69:3c:08:
09:f0:7e:29:6d:18:09:3e:33:de:c6:d5:3a:a8:84:dc:34:8b:
d0:3a:e4:bb:34:25:49:40:75:f6:c9:c1:71:89:76:7e:ce:8e:
1a:fb:15:aa:e0:4b:c5:40:76:5e:df:8b:ba:71:b3:a5:c5:4f:
7a:82:93:0a:a7:c1:8d:e6:c9:d9:24:08:86:a4:08:bc:34:cf:
28:1d:f9:e6:7f:77:6a:7c:9f:b9:69:cc:be:ea:b1:d8:45:2f:
2c:a0:bb:0e:88:ba:57:0f:d2:9e:6b:2a:03:2a:27:ca:10:04:
4d:24:3c:89:52:fa:ee:c1:9c:b6:40:35:2b:ed:9f:5e:e0:de:
9f:b1:e5:6d:c5:3d:45:56:d3:4a:f6:d0:12:74:f2:c1:af:d9:
79:aa:26:f0:b7:0b:53:c7:77:7c:d7:1f:0c:cf:d8:27:64:2f:
7f:da:c0:7d:d6:c4:12:30:72:dd:40:ee:ec:99:cf:27:ce:14:
18:20:9d:13:b3:45:b3:bd:86:6f:77:fd:ab:30:23:38:e5:92:
10:e1:76:d1:a0:8b:8e:0b:79:bd:62:1a:63:93:66:ad:fa:b3:
9c:27:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:11:28 2026 by rpki-client