Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: ZIFDGPI1irQMLf4C8UjxiHGLQO74Lr9bsAjzqYGj19A=
Subject key identifier: C2:90:1F:10:08:78:3B:CC:BF:8E:A0:20:AA:BF:4D:61:F4:03:B0:8A
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 019D265F7FCB98F2B29DE824E627CE9120D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: DWxK7O4df_W8HA4KXmkc0bNeZRc.roa (hash: BoTdjcLNvInLjrHcqKbP+Q4OyLKz1VsHHG2lylnjHaU=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: dNfRX8gVqS371dng6XcaMLt4OitaoOMl03GYpFysVWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7f:cb:98:f2:b2:9d:e8:24:e6:27:ce:91:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=c2901f1008783bccbf8ea020aabf4d61f403b08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:f6:98:aa:67:e1:d4:63:bb:30:bc:b9:30:
6e:c4:6f:e2:0d:a1:9f:1e:69:cf:b2:b6:9a:41:1e:
6c:3f:70:bf:40:4d:cd:8a:bb:39:39:98:2a:2b:d5:
3a:33:38:a2:09:3d:db:ee:47:eb:80:42:a6:d1:ce:
8d:87:d0:3c:33:44:cc:70:b4:5d:1e:d9:37:76:19:
46:b8:b9:40:25:e1:ca:20:6f:d3:57:48:8c:f2:8f:
07:35:b1:d2:7f:9b:b5:59:c4:50:27:48:44:61:38:
42:70:b8:02:fe:15:99:2c:4b:92:6a:49:13:ec:10:
52:67:3e:10:95:1b:30:a7:37:b9:6b:c3:c3:1e:97:
58:a7:16:c2:dd:fa:97:0f:2b:88:6c:d1:47:74:b7:
f4:d1:9f:9b:9e:77:d3:6b:06:3f:30:03:2b:fc:e1:
65:d3:53:b5:a8:3d:6a:dd:54:53:bc:19:d6:68:9c:
f9:76:e0:0a:c6:68:f1:4e:ef:ed:b1:cb:bd:ed:29:
00:ba:f7:7a:2b:17:6e:22:06:31:96:25:c6:c9:f9:
a4:57:ee:1f:28:e2:7d:2a:8c:f1:18:06:63:20:cb:
83:09:ab:82:2c:54:db:4d:7c:b7:ac:77:5a:65:74:
fb:d9:13:ef:8d:20:58:6d:a1:a2:ee:57:d5:f1:39:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:90:1F:10:08:78:3B:CC:BF:8E:A0:20:AA:BF:4D:61:F4:03:B0:8A
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:af:5f:60:38:3c:e8:1a:93:3b:38:87:c9:86:c3:4d:83:be:
d3:3e:99:6b:7a:90:34:bf:e5:97:3c:99:ce:24:0b:2f:9e:cd:
97:93:21:5b:28:be:0c:19:38:ef:84:af:07:87:c8:8d:2f:85:
9a:2c:c5:1f:e7:63:80:98:66:90:f7:d2:7c:17:5c:c9:16:06:
d9:8d:1e:31:e6:64:60:13:b5:2b:e1:c4:4a:c1:e0:06:d1:01:
1e:19:74:8d:ce:2d:2c:6e:1c:33:72:10:0f:41:b6:7b:5f:e6:
55:b6:dd:73:14:8a:e6:20:43:b0:74:8b:de:07:d6:02:f9:4d:
b5:a3:16:19:95:84:51:1d:c5:a0:f5:61:f2:25:4e:67:55:e1:
8f:6b:1c:08:9d:82:90:76:6b:8a:28:dc:46:30:57:1a:79:4b:
c5:b7:38:fa:cb:7a:ff:91:05:d7:68:6d:a3:d4:ec:a2:48:a9:
ae:1f:14:85:f7:eb:f4:20:bd:fb:a4:eb:ab:af:8c:7f:76:96:
d4:cd:0e:c0:6d:e2:2b:57:1b:d6:c3:c8:f1:53:23:1a:d9:72:
12:51:4e:95:7c:83:08:24:fa:ca:d8:59:c9:9a:ca:16:b7:20:
00:8c:7e:5e:3e:f7:90:a3:39:cf:56:d5:83:ec:62:e0:8f:72:
e1:5f:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:13 2026 by rpki-client