Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: 9BKnNQTiw9uKGbjjUwaV8cTA5LNuxBceDwbUMwVK2Zk=
Subject key identifier: 3D:0A:79:F5:AB:B2:2E:5D:76:16:7D:82:C3:3A:33:40:09:DA:0E:6C
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 01A0E7AE30787CDF59F43F7DA0BA14D563BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 138F
Signing time: Mon 28 Sep 2026 11:02:27 +0000
Manifest this update: Mon 28 Sep 2026 11:02:27 +0000
Manifest next update: Tue 29 Sep 2026 11:02:27 +0000
Files and hashes: 1: 2-XnZW4TiALtvTXUhzckTDgdFEY.roa (hash: mfFDzvxLFQpBExCKEC3//zMXveoR9qw1NyzavU+Pa/M=)
2: 24_TAE1gOjHul0shNH3vlh03qlM.roa (hash: GYBsxiKKB7QAecXqc/XnTeJ6ukkFBvU/odaR6RLYNno=)
3: Sl30k11z1TwtyMHAj_NqDrPSCvg.roa (hash: 9wZBkgJcqw68v5ewI2FJS2vHd+COBYLKeeovUBuZl+s=)
4: VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa (hash: cBePxMn2gu4hOVG4L1uDVTVupTtrFtWliRD+lUUfRvc=)
5: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: I7uHgRzeYwuKu5vd8n22Gme5hL1vypGaU0DPERzd6O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:30:78:7c:df:59:f4:3f:7d:a0:ba:14:d5:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Sep 28 11:02:27 2026 GMT
Not After : Sep 29 11:02:27 2026 GMT
Subject: CN=3d0a79f5abb22e5d76167d82c33a334009da0e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:af:55:b6:e9:b5:35:f6:0d:63:a2:6e:1c:18:
bd:5b:12:10:0d:41:10:a2:a7:e8:02:b9:3f:ec:96:
3c:85:67:c0:5d:c2:52:0e:bc:5d:84:4d:b5:7a:d6:
6a:d7:1e:5e:c4:8a:22:b4:95:8f:53:47:01:89:f7:
4b:0f:1b:80:8a:04:98:40:6b:9a:1a:12:4a:74:20:
06:43:64:57:89:ed:fb:76:e2:e0:3a:58:b1:4d:47:
c0:35:92:62:57:78:d0:24:a7:4f:65:5a:30:0d:89:
a2:af:e5:9b:0b:ae:42:d6:d3:b2:59:bf:8f:c8:7a:
45:05:5d:c1:40:ef:ab:15:cb:3b:b3:49:50:c6:08:
05:65:6e:db:71:d0:d6:7f:2b:a2:a6:8c:a6:31:4e:
d6:25:ba:dc:aa:a2:af:46:25:b4:a3:21:5e:00:33:
50:66:27:11:db:bc:d9:64:04:e4:13:69:00:68:de:
2e:dc:8c:66:d3:88:f4:80:a2:2b:6d:16:d6:66:ab:
50:0d:c1:54:7a:0b:41:ff:ef:b0:df:39:e0:44:57:
99:af:9c:0a:f5:a3:88:7a:a6:3c:84:6c:fe:35:7f:
9c:8a:30:e6:b8:8f:a8:fa:1a:a3:ae:63:8b:97:68:
e3:f3:a0:b5:9a:ee:a1:0a:0c:b1:a3:6a:b9:10:c2:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0A:79:F5:AB:B2:2E:5D:76:16:7D:82:C3:3A:33:40:09:DA:0E:6C
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ba:62:d3:66:83:9d:a6:1b:51:b0:e1:e6:f1:13:b4:8b:70:
c8:fa:4c:78:75:20:15:42:e1:fe:49:6d:68:b2:44:67:87:1e:
35:11:13:95:ba:83:9b:16:eb:eb:00:2a:88:e0:3a:96:82:20:
32:00:26:05:aa:f0:35:f7:aa:d8:87:68:41:a0:3a:ae:9f:7c:
49:a5:6f:9b:d6:d5:10:6f:8a:cc:1f:e9:c7:03:2f:72:6a:68:
09:d0:c0:81:d9:ed:a6:30:81:b6:c5:58:2b:e3:e2:74:f8:6f:
db:d6:8c:0c:39:39:57:a3:d3:6a:b2:9b:9b:0a:ea:16:ba:8d:
88:5f:36:c6:da:d0:29:e8:9a:07:eb:cd:09:e3:46:22:b1:53:
23:7d:a2:8a:30:f8:8c:1e:ed:08:be:ce:0e:ed:b9:3f:bb:4e:
e4:31:56:81:f8:67:6f:19:61:fc:49:38:40:75:0a:0e:c1:e7:
0a:66:4f:92:98:f7:c6:99:10:26:43:32:0e:e9:d5:39:d1:e1:
a7:e8:da:d0:82:91:de:06:88:33:88:0f:11:e6:ab:e8:b1:a0:
8a:cb:d3:58:a8:82:a2:fb:22:18:55:92:6e:f8:47:ff:e7:fa:
9d:c8:41:d3:2a:f4:6f:a4:81:6c:a9:2d:27:73:d3:e5:4b:90:
83:ea:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:20:18 2026 by rpki-client