Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: y8IeHdcufXa2uZrIP4GQns/sU0tlz7HA3lsQrZ9n730=
Subject key identifier: 81:71:55:4D:A2:D0:CB:38:55:2C:F7:D2:2E:09:32:55:74:54:E8:C1
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 019F946D757AC888D2D0C2CCABCF5AE7ECC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 07B2
Signing time: Fri 24 Jul 2026 14:00:29 +0000
Manifest this update: Fri 24 Jul 2026 14:00:29 +0000
Manifest next update: Sat 25 Jul 2026 14:00:29 +0000
Files and hashes: 1: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: B26TevO+ZBZw4WRVlx3jPj1C4yho9HPS/oBILRXbMrM=)
2: ZS3grquCf_l1OKXIoqEGRKP0J6M.roa (hash: 2PBPag/zPM22x9IohJ6q0TulDZRbeQTFCvgCnuCjnz0=)
3: vUdfXnwcRDPW7e3X7ofFMJYqkDk.roa (hash: 4hcskGjMuomfYGEOrtlmJrd0tV2p1HAsJ5FOV+HnCFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:75:7a:c8:88:d2:d0:c2:cc:ab:cf:5a:e7:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Jul 24 14:00:29 2026 GMT
Not After : Jul 25 14:00:29 2026 GMT
Subject: CN=8171554da2d0cb38552cf7d22e0932557454e8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:06:44:63:21:4e:e8:b2:79:25:81:2f:50:
19:65:19:81:6c:f2:af:e3:cc:77:f7:10:d9:2f:fb:
ab:19:bc:3b:78:e7:87:c5:8c:99:99:ef:f0:3a:b6:
f3:41:64:b3:2a:23:cd:b7:47:0d:33:cb:fa:dc:84:
58:0a:6d:ff:8c:06:9f:03:35:68:22:0a:81:e6:7b:
a8:48:a6:73:7b:8c:78:90:49:31:ef:c7:7e:46:3a:
fe:8f:f5:c7:83:23:50:e9:74:30:39:39:1f:d1:69:
8b:93:a6:6b:d4:c4:7e:f4:cb:7a:1d:cf:fb:ac:4e:
a3:cf:d1:d4:4a:d8:4e:7b:93:d6:4a:93:ed:eb:41:
14:66:72:6a:9e:b2:cc:92:e5:44:f8:c9:6e:31:99:
70:f9:e0:ca:23:64:5a:fc:07:32:3f:db:73:e4:14:
06:5d:c2:96:6a:61:99:5b:36:96:67:cb:ca:aa:27:
f6:12:88:7f:51:bb:56:66:cd:c2:0d:8a:ae:5c:68:
52:c5:9b:c0:6e:01:18:b0:49:2a:06:9e:c2:8d:a2:
8e:e8:81:ac:9b:b4:6e:b5:92:a3:1c:1c:8d:c1:49:
30:04:46:69:73:b1:47:00:5f:3f:54:23:b4:5b:26:
b4:ae:d1:d5:8a:a8:62:13:52:61:3c:36:ec:1d:45:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:71:55:4D:A2:D0:CB:38:55:2C:F7:D2:2E:09:32:55:74:54:E8:C1
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b1:6e:bd:61:2e:52:96:03:d1:63:22:20:6b:41:77:05:37:
8e:56:cf:70:16:c7:44:a5:fd:a0:60:5b:f9:97:26:76:b7:41:
40:de:49:a8:b8:0c:b1:4c:30:e7:57:46:79:87:84:b5:51:7c:
01:cb:65:2b:26:da:46:b1:fb:0d:ec:bc:4a:2d:a6:16:34:a5:
d8:e6:80:b0:b0:e7:91:10:b9:34:57:d9:d8:fd:33:14:27:99:
28:ff:f1:a5:e8:0e:b7:05:f9:2e:ec:cf:d4:99:bb:00:c9:bf:
d1:cc:3f:a2:2c:fb:85:ec:6c:86:64:a2:3d:64:1a:e2:e9:cf:
2f:10:dc:b9:ac:2d:e5:61:0e:b2:08:7e:eb:ef:11:07:74:ff:
de:98:8b:6b:9f:20:0f:ed:72:b6:24:6e:d9:d7:cc:51:aa:d6:
0d:84:b5:8d:05:f9:a9:38:fb:f4:52:97:0c:15:31:be:c4:0d:
29:5c:e5:e9:66:d7:09:72:84:5c:e7:e2:d6:22:ea:80:46:59:
a9:69:a4:8f:17:7d:9f:9d:7e:a7:65:5e:8a:90:de:1c:17:55:
9a:8a:45:a4:7f:6d:88:64:be:71:a0:74:8a:5b:6e:0f:ad:48:
19:f3:e8:36:a8:a8:63:26:17:0e:45:4a:74:37:d9:e5:22:49:
22:c5:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:09:54 2026 by rpki-client