Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: CnXZeifFzCf1S0UY/ydiKODvexcYmjus+EDYEzy6nzM=
Subject key identifier: BF:AA:AA:F1:75:06:04:76:C0:2F:3F:A6:C9:F1:2F:3E:02:AE:54:56
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 019D273B355303DD16120060BC64F5F94E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 05B1
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: 1-R5bGFGuEXrAhFEJ1itmGfkDohw.roa (hash: lVFYFuzRt87ejZ4L9ObTyPTLDyvZKJrO1X0F0BrVUAQ=)
2: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: dJtyPa3cGEsypguG1FncLUtBmkEjMjeXdNZhXl2dcDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:35:53:03:dd:16:12:00:60:bc:64:f5:f9:4e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=bfaaaaf175060476c02f3fa6c9f12f3e02ae5456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:50:5d:1f:e8:0b:9b:c2:4c:5b:90:df:e0:
ac:ea:0c:54:8b:4a:fb:b5:9f:62:d6:68:cd:49:de:
8b:71:0e:50:a4:04:d1:25:6d:ed:20:7a:65:8d:16:
58:0a:51:95:8b:a7:2d:1d:a5:d5:04:25:3a:02:b6:
48:e0:02:46:78:e9:c5:58:b5:34:e0:7e:e5:3a:7a:
ce:8e:47:cd:1f:6f:72:f1:ec:ea:b4:37:41:3a:16:
fd:42:a9:bf:e9:8b:d9:fc:02:49:70:65:03:2d:0e:
bb:e7:32:75:9f:c5:93:77:a2:7e:7e:62:4a:43:25:
35:6c:27:de:d3:60:c0:b1:70:33:18:92:75:e2:dc:
2a:b4:7c:3c:c8:43:a8:40:3e:9b:0d:d5:e0:a0:56:
f4:ad:ee:c0:81:04:29:61:bc:dd:62:09:0c:9f:a4:
48:8a:37:97:28:33:7c:ed:11:79:7a:5b:81:9f:2b:
85:ad:ab:34:65:24:22:1e:7c:7e:70:cd:3e:1a:4e:
d8:63:9a:0d:63:d3:80:87:20:e5:40:17:5e:80:61:
96:41:8b:1b:b9:d4:15:5c:9d:5c:bb:bf:cc:e8:bb:
44:b8:8c:94:aa:f8:dc:b6:e4:71:8a:14:25:ee:ea:
dc:9a:02:22:51:73:72:8d:78:f5:3f:36:f5:34:50:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AA:AA:F1:75:06:04:76:C0:2F:3F:A6:C9:F1:2F:3E:02:AE:54:56
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d8:0d:44:ac:3c:2f:fb:37:32:3a:fb:46:28:90:5b:8b:61:
4a:45:6e:4a:78:26:f0:49:06:1b:fa:6f:b6:6f:6f:e9:8d:1d:
f0:aa:bd:bc:4b:ee:ec:30:5e:1a:ea:9b:21:9c:8b:22:df:43:
b5:51:14:ac:b8:dd:63:d0:d0:9c:45:81:c0:a2:32:8a:68:33:
e8:fe:44:a0:f3:5b:d4:a5:d1:17:d1:59:be:60:cd:4d:db:17:
3f:69:d4:c1:fd:5b:1a:60:0d:2a:62:ae:2d:8a:a0:d9:a6:6e:
ef:4c:95:ff:16:ec:b1:62:b2:b0:ed:30:c6:1e:c0:fd:a3:4c:
20:d3:67:13:7f:f4:ec:91:78:d3:a9:c7:5c:60:ef:0b:3d:5b:
24:93:d0:74:5e:7a:eb:35:3f:f6:0b:8c:2a:d0:dc:ca:88:94:
b9:2c:4a:48:1d:24:3c:4b:88:ab:5e:15:ac:26:4c:10:8c:1a:
a4:95:87:0e:ab:5e:eb:e5:f3:7a:a0:df:53:d8:62:2b:b6:95:
93:0a:bd:0a:e5:4d:8c:85:01:8c:af:be:9a:52:98:20:77:0c:
f4:77:ad:a6:e0:61:dd:63:07:fd:d5:60:8e:af:f2:0f:d5:52:
3d:60:01:a6:4a:4b:90:43:2b:b5:b2:bb:9d:29:2b:10:a1:27:
fc:61:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:44 2026 by rpki-client