Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
File: kyIxLx0huzs4bKOqlzrGzSVLcDk.mft (raw, json)
Hash identifier: fNTXtu2W6vGKsTD0uTUKN7pvkimq/V49k2Q+wuoRVqY=
Subject key identifier: 04:6E:E2:0B:9C:3C:EC:F4:54:39:5B:FA:1A:5E:05:2C:B9:99:AD:EE
Authority key identifier: 93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
Certificate issuer: /CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Certificate serial: 019D27A92140D45F0AD0963EE5F981BBCD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 01:01:28 +0000
Manifest this update: Thu 26 Mar 2026 01:01:28 +0000
Manifest next update: Fri 27 Mar 2026 01:01:28 +0000
Files and hashes: 1: kyIxLx0huzs4bKOqlzrGzSVLcDk.crl (hash: TtOvSh79RCnZI9gntkevHeVi0TKkkDNLNOBCmBKnnPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:21:40:d4:5f:0a:d0:96:3e:e5:f9:81:bb:cd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Validity
Not Before: Mar 26 01:01:28 2026 GMT
Not After : Mar 27 01:01:28 2026 GMT
Subject: CN=046ee20b9c3cecf454395bfa1a5e052cb999adee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:8f:b1:fa:4c:8b:10:5d:17:cb:f5:ab:77:
ae:fb:4e:f1:8f:e8:ad:eb:63:a3:12:f7:d5:5f:55:
d4:92:28:a2:41:18:5f:65:6a:4e:fa:30:16:46:dd:
90:4a:e0:48:18:4c:10:8e:4c:00:e8:70:1b:71:e5:
2d:a8:9c:09:9a:2d:c4:5e:fd:20:84:c7:47:bc:02:
e7:27:1d:02:b3:54:a3:2b:4f:f5:23:af:db:b1:a2:
22:14:b5:00:49:29:53:45:8c:7f:84:7c:d7:ad:4c:
ba:27:1c:fd:0a:f1:14:64:9d:0d:9f:d4:7b:fb:ed:
19:7b:45:86:b9:21:1c:bc:52:8f:4c:2c:ab:cd:f2:
f0:67:07:25:93:76:ea:71:64:89:e1:6d:53:82:b8:
51:b4:77:94:eb:e3:69:eb:87:b6:b2:92:3b:2b:18:
95:cd:6d:83:dd:c0:2d:16:1a:bd:aa:b3:3a:42:56:
70:91:67:78:31:c3:53:a8:7c:70:29:ea:22:02:ae:
9f:17:14:fc:2e:a8:60:a2:31:4f:23:71:9a:af:90:
d6:c3:17:37:60:8f:48:6e:77:be:d9:6d:47:7e:16:
06:63:1a:a4:90:d1:6d:3f:6e:f5:12:f8:c1:83:a2:
1c:4c:65:ac:29:39:b0:2b:aa:6e:79:39:de:e2:bd:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6E:E2:0B:9C:3C:EC:F4:54:39:5B:FA:1A:5E:05:2C:B9:99:AD:EE
X509v3 Authority Key Identifier:
keyid:93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:8b:18:0b:9e:39:cf:ac:98:64:5b:d7:2c:d3:4b:de:c0:
6a:6a:c3:69:99:06:ae:3d:e2:fe:c0:83:12:4d:ef:19:7c:ca:
8f:88:a5:f0:26:07:67:94:39:ed:06:f2:fc:7e:dd:fe:e1:c6:
64:b7:1a:db:78:75:29:90:57:52:d6:bf:c5:a4:98:95:9d:4e:
61:39:15:3e:8a:47:d5:26:6e:2d:84:2a:3b:f8:81:7d:e4:98:
7b:7d:bf:4f:97:7a:cd:c6:59:f9:e2:3e:f1:d0:77:9b:ec:bc:
7d:65:a7:d6:83:2c:9e:42:13:65:f4:32:83:ca:fd:63:2f:1a:
ba:e3:2d:9b:7d:bb:91:a0:1e:84:07:64:f8:f6:f1:c4:91:7d:
bd:f0:4b:49:7b:d3:5e:ee:09:ae:42:b6:95:1b:45:3a:a2:7e:
0e:f8:ea:c0:c2:3c:60:0e:8e:5c:73:ef:2b:a2:3f:0c:9f:7e:
ac:12:3c:57:72:40:de:6c:e6:8f:11:86:46:2e:f1:ea:cd:13:
21:f0:e6:c5:55:47:aa:97:c2:5a:87:08:f3:26:b2:8a:02:83:
a4:db:ff:e4:35:a9:bb:e0:b6:ff:57:b9:b1:ba:f6:10:9f:6b:
b3:49:c8:23:42:72:6c:1f:0d:38:fd:4c:3c:2e:6d:ec:8f:e7:
e3:6b:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:49 2026 by rpki-client