Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
File: kYaHyFQkQhcMxR71MW05Y2CXCNw.mft (raw, json)
Hash identifier: ZxYuVyMo4GpPAXKRMp6WV53g3zc8Vck8fNfsl920tUA=
Subject key identifier: BA:6F:C6:06:F4:DE:A9:A8:DF:5F:A5:75:53:DB:17:C8:69:1E:3F:AD
Authority key identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
Certificate issuer: /CN=918687c8542442170cc51ef5316d3963609708dc
Certificate serial: 019D28F26D5253D252964A95A1AA4C5CB39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
Manifest number: 1493
Signing time: Thu 26 Mar 2026 07:01:09 +0000
Manifest this update: Thu 26 Mar 2026 07:01:09 +0000
Manifest next update: Fri 27 Mar 2026 07:01:09 +0000
Files and hashes: 1: kYaHyFQkQhcMxR71MW05Y2CXCNw.crl (hash: 0ph2EUrhvX4fELda1/vC+Pn4+Tp1toV8oqd/xH5ehfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:6d:52:53:d2:52:96:4a:95:a1:aa:4c:5c:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918687c8542442170cc51ef5316d3963609708dc
Validity
Not Before: Mar 26 07:01:09 2026 GMT
Not After : Mar 27 07:01:09 2026 GMT
Subject: CN=ba6fc606f4dea9a8df5fa57553db17c8691e3fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:a2:59:28:49:70:ce:53:4d:95:50:03:cd:
0e:4a:de:d8:61:18:97:e5:2e:f2:bc:37:fc:25:67:
a4:b7:98:70:b2:95:47:14:4a:98:f0:ee:17:cb:76:
a5:42:1a:e9:a7:51:f2:b9:1d:e2:4a:6d:0a:1f:dc:
e0:27:71:7b:c4:1c:3b:60:d9:72:3d:ed:c5:1a:ef:
2a:8b:f4:a8:4a:cd:1c:c7:00:1b:73:14:3d:3d:38:
a0:56:ad:ae:99:6f:15:53:94:3f:72:f2:98:b4:13:
ef:82:fb:3a:bd:1a:60:15:50:36:c1:b1:e4:a0:c7:
b2:78:ca:69:58:64:f6:26:1c:9d:ad:a1:57:46:76:
6e:92:09:01:c2:da:c8:b6:7c:78:e1:dd:0d:3b:01:
55:d8:b6:1b:b1:b3:c7:6a:1b:b6:af:6a:61:68:60:
79:95:e8:25:52:b4:c4:a8:4b:80:e5:4c:cb:d3:db:
1a:da:20:f9:42:a9:1a:dc:66:df:69:63:ff:7b:8a:
00:de:04:b4:a2:fd:ee:fa:26:7e:ea:5a:5e:e3:0a:
cb:d8:a4:ec:d1:14:87:9f:80:6f:73:0c:4d:ef:08:
64:11:b0:de:9a:92:1a:9f:32:6e:44:4d:33:8e:6e:
38:a1:f3:86:dd:17:86:d4:8f:62:7f:d8:61:38:a5:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:C6:06:F4:DE:A9:A8:DF:5F:A5:75:53:DB:17:C8:69:1E:3F:AD
X509v3 Authority Key Identifier:
keyid:91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:84:21:99:28:ec:2b:ea:06:8f:6c:34:56:f3:0b:02:52:f7:
fe:04:07:48:31:c1:0a:2e:69:28:1a:84:dd:eb:33:c9:1e:30:
8e:1e:05:8d:b4:60:9e:db:64:cd:ec:5a:28:62:e1:fa:74:ba:
64:48:f2:0d:d4:6e:3b:54:ed:f7:f7:04:4e:d4:33:16:8a:97:
ee:61:97:58:18:a3:4d:a1:0e:47:f4:a5:1e:e7:19:0b:2d:cc:
ea:63:4a:20:be:e0:94:6a:04:99:2e:f8:c1:da:1d:7e:2a:8b:
ee:7b:2a:81:41:ab:61:db:07:43:dc:ab:4c:49:17:b0:9c:b4:
af:fd:b5:29:21:4a:2e:58:07:75:b9:56:e1:c7:e0:19:a2:c0:
b4:df:09:26:b7:af:ae:7e:74:fe:87:bb:7a:cc:ee:45:97:e5:
c0:e7:eb:09:95:6b:f0:c1:32:a4:fb:1a:bb:a1:95:49:55:62:
72:c8:b1:20:17:d5:60:3b:e3:9b:5c:4b:83:7a:bb:92:84:0c:
6f:92:54:3b:14:b9:79:86:f8:8b:0b:6a:59:3c:41:33:b6:7c:
e4:20:14:21:5c:63:44:0f:a4:ed:e2:3a:9e:7d:40:00:41:a5:
5d:43:dd:63:9e:a6:7d:1a:71:87:4e:4c:46:ce:0b:94:44:de:
61:57:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:15 2026 by rpki-client