
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: KlpX6AYAjGblFOLIPriZbs/NlOBQmpqyE9jKTuI3y28=
Subject key identifier: BF:74:7F:9A:65:3F:B9:5A:D5:CF:40:FB:BF:B2:3D:5D:E9:11:F4:BC
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019F93C9438AF034DCF8F31DFC190E6EA9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 12DF
Signing time: Fri 24 Jul 2026 11:01:08 +0000
Manifest this update: Fri 24 Jul 2026 11:01:08 +0000
Manifest next update: Sat 25 Jul 2026 11:01:08 +0000
Files and hashes: 1: 2-XnZW4TiALtvTXUhzckTDgdFEY.roa (hash: mfFDzvxLFQpBExCKEC3//zMXveoR9qw1NyzavU+Pa/M=)
2: 24_TAE1gOjHul0shNH3vlh03qlM.roa (hash: GYBsxiKKB7QAecXqc/XnTeJ6ukkFBvU/odaR6RLYNno=)
3: Sl30k11z1TwtyMHAj_NqDrPSCvg.roa (hash: 9wZBkgJcqw68v5ewI2FJS2vHd+COBYLKeeovUBuZl+s=)
4: VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa (hash: cBePxMn2gu4hOVG4L1uDVTVupTtrFtWliRD+lUUfRvc=)
5: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: d2kk1ADx2gTBuTKT/1BBTQNRkw/jbyrhjIOjUynqiL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:43:8a:f0:34:dc:f8:f3:1d:fc:19:0e:6e:a9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jul 24 11:01:08 2026 GMT
Not After : Jul 25 11:01:08 2026 GMT
Subject: CN=bf747f9a653fb95ad5cf40fbbfb23d5de911f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:94:5c:c5:d6:3f:a2:f4:e9:80:cc:7f:c0:
f9:26:5a:76:38:dd:bc:a4:4a:44:a2:46:af:fc:08:
ff:65:12:38:d2:a4:a8:d5:de:f6:e4:d9:2f:d0:2f:
dc:8c:7e:54:83:f0:f1:76:25:6d:02:11:74:95:35:
94:c2:91:18:6f:d4:ee:c6:45:30:d3:67:6c:a4:00:
f3:8e:17:3a:20:8c:1a:e3:04:d4:47:d6:e8:74:ea:
d1:0d:5c:07:f0:8c:8f:c0:92:a6:e4:c8:b1:b0:d4:
9e:06:b8:f1:28:52:65:4b:4f:d1:bc:b6:fb:47:55:
3e:52:02:f7:be:b6:ba:ad:55:bf:8d:89:48:3b:e6:
3d:8d:bf:43:70:cf:15:c1:f4:03:eb:91:ee:5a:b7:
ee:d0:e6:98:26:a1:ba:88:e1:76:9f:2b:f0:0c:5f:
90:41:5a:10:dc:0c:bc:d1:d7:af:50:0d:8b:2d:a2:
12:a6:e7:3c:70:b8:2d:33:36:4e:a7:7e:24:0a:34:
8a:d6:01:4f:d7:7e:9a:7b:73:13:45:c8:60:2a:fc:
f6:23:00:1b:6f:3e:bb:80:30:94:d3:a5:1a:60:56:
c5:3b:68:88:e6:59:25:21:17:14:9d:b6:03:4c:92:
9a:70:8e:b1:35:e7:1e:a9:b6:9f:f2:f4:e4:03:27:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:74:7F:9A:65:3F:B9:5A:D5:CF:40:FB:BF:B2:3D:5D:E9:11:F4:BC
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4e:96:21:e6:b2:1c:cc:f3:05:37:06:46:ff:36:77:2e:77:
4f:c6:88:7a:98:11:2c:d0:4e:8c:c1:7d:17:44:ac:17:4a:c4:
b2:50:7f:31:9b:25:bd:de:04:37:a5:63:73:78:ad:26:00:0e:
03:b8:a5:e0:f1:ca:29:e9:ae:74:bc:91:14:e4:b4:76:b6:68:
8f:a4:6f:a5:6d:92:6b:83:22:40:d7:4d:15:7c:c5:37:3c:e5:
92:44:d0:5e:be:63:7d:55:71:80:09:5f:e1:95:43:46:64:09:
48:12:ce:31:17:02:9a:83:44:fe:8f:d1:8f:b1:7d:4b:62:3a:
83:00:82:94:08:bf:13:42:c7:ea:aa:d4:e1:be:67:98:01:d8:
f9:5b:bf:98:fe:dd:6e:d9:36:7c:6b:1a:87:7c:c8:88:5a:0d:
ed:69:65:2b:d9:29:3c:fc:5b:5f:ff:fd:a4:c0:f9:05:cc:3c:
8d:42:0a:31:1e:1b:1d:16:70:b0:7b:14:db:2b:91:a0:a5:a8:
ca:f5:cb:05:93:1f:2d:03:f1:7d:76:f0:9f:c7:b8:ad:c1:49:
42:b2:96:81:2e:65:e8:64:a0:ec:f5:be:6a:01:6b:c2:b5:70:
32:af:5a:77:71:6b:8e:72:20:f2:31:70:99:e5:15:9d:70:7f:
42:56:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:55 2026 by rpki-client