Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: mwbSWSauGCtkPnOIi1H0LIpY2QqP5QzMF6ooUTUBPmk=
Subject key identifier: 5F:2C:60:28:6F:78:76:37:63:C1:01:7F:A5:17:7E:D8:4A:08:45:21
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 019D273ADF7E34705F920F2B4DDD2CF276D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 17D4
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: Mj5kxOS6InXxAsOl3ej6zhI+XxTR58tFwMD8LPn4tfA=)
2: gQlCpCSnLDmN9RPpvzCQtlrd9TA.roa (hash: ZKoC7F9vGHQ7V9bs0WMl6IQhGf05jkOf05frZxYmNPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:df:7e:34:70:5f:92:0f:2b:4d:dd:2c:f2:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=5f2c60286f78763763c1017fa5177ed84a084521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:8a:9f:6e:cd:a3:1d:78:d5:2a:e2:e7:4a:
cb:bd:a1:5a:3d:6f:33:5b:c4:f1:ed:2c:96:2e:5b:
ce:6b:0d:52:3b:27:fe:ad:c3:6f:83:19:a3:f7:c2:
b6:d1:c1:de:fa:92:75:12:b1:35:71:d8:cb:7f:c7:
9b:ea:0a:88:a1:00:29:49:df:cb:74:07:ba:2a:13:
ba:ae:02:0f:68:95:c2:d9:1f:b3:04:91:96:7b:b2:
19:72:9e:6d:f3:b7:b8:20:af:f7:d6:48:bb:b2:2e:
70:9b:dc:bf:22:94:54:8a:24:06:c3:a8:fa:50:0e:
21:fc:56:05:06:6a:58:1a:f5:7d:a4:9d:ed:39:27:
b5:d1:77:8b:23:c6:7d:e4:9f:46:6c:a1:dd:7f:9c:
8d:a8:a8:8d:7b:a2:f7:a0:34:06:e2:de:57:15:9f:
92:59:be:b8:56:00:cd:78:51:16:c9:c8:67:6a:dc:
ee:14:6b:55:a3:6a:f6:42:41:07:c1:cc:9e:96:74:
5a:3f:55:f8:19:4c:1f:38:9a:80:14:7f:a9:e6:4e:
cc:51:5a:ac:45:68:26:f8:74:9c:78:b6:5a:1b:02:
45:9e:d1:f4:a2:0d:30:c9:f4:10:f6:fa:39:95:b4:
22:72:5f:19:29:85:40:5b:24:9d:2b:05:94:38:ea:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:60:28:6F:78:76:37:63:C1:01:7F:A5:17:7E:D8:4A:08:45:21
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b5:1d:06:a5:35:23:6d:5f:c5:98:55:78:89:23:af:f6:59:
9e:77:e8:88:7c:5a:5c:90:1f:ae:91:50:fb:34:24:fc:d3:14:
2a:3c:20:3a:19:23:41:51:2f:64:eb:fd:c1:da:a6:48:9d:b5:
f0:c6:b4:7e:1a:5a:8d:2b:16:2d:11:cd:9a:8a:53:dd:b0:11:
d7:53:87:a0:5f:bf:be:00:dd:7c:ed:84:c5:af:9c:fc:fe:b0:
03:1d:a5:cb:a1:04:3f:7f:aa:ce:ca:4e:c3:65:6a:c2:8f:aa:
ae:05:a8:5a:05:4f:ef:a0:77:9d:50:ba:58:2d:bc:36:47:03:
17:6e:28:5a:8a:d4:12:e4:94:f4:85:b1:09:da:00:cd:86:41:
3c:43:05:dd:af:c6:a8:82:8e:1f:cb:df:5e:c0:66:66:78:c5:
b8:58:49:23:90:2e:bf:6f:40:78:88:e2:f7:6a:9f:ed:ee:b9:
79:db:d4:9f:00:f2:01:33:42:51:ae:c7:d1:c2:72:19:de:33:
9a:7e:84:9d:2b:31:3e:82:1a:be:c9:ec:0c:42:c6:ba:f3:26:
41:b3:6f:cd:7b:26:47:e8:78:6f:0c:76:d9:67:06:71:ae:de:
5b:dd:00:3b:12:29:45:07:b2:1c:22:89:0f:0f:29:74:74:7b:
c6:b3:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:40 2026 by rpki-client