Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: H2N1WB1QuIe8n57J0/sYMtmoRoZ9Ck/d9WWhLckIeYw=
Subject key identifier: 2F:25:83:EB:C6:68:C9:A7:EB:E7:AD:98:F6:8D:26:54:75:64:38:FC
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019D26962F763025C584F6DD5237BD358D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0BA2
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: 1OpOzE35G0uJlDcu2R+hmNqhyWloxr8I6Lydp+DtsXI=)
4: y4hgiLoZQuqwy9Ryf6xVQSqsZr4.roa (hash: N8EgNl6vfYaF1Ts0sECLbCkME6l5AEsMF8hotYpNW4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2f:76:30:25:c5:84:f6:dd:52:37:bd:35:8d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=2f2583ebc668c9a7ebe7ad98f68d2654756438fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:6b:89:fb:73:b9:0c:b0:49:30:a8:87:17:
7f:f4:9a:cc:d7:02:b3:29:85:6e:0c:4b:39:d2:a6:
09:53:51:18:c1:27:74:22:1e:9c:e4:a9:45:0a:72:
c0:ba:46:26:83:78:9e:a0:50:4f:7d:e4:a2:59:9d:
28:af:67:78:75:5e:2b:c9:96:9a:15:72:b8:97:39:
03:3d:3e:98:a1:84:ce:01:c3:79:15:c0:89:ba:94:
98:a8:c6:f2:4a:7c:0c:4b:a3:42:55:fe:9f:a8:a4:
3b:49:c4:ba:89:7f:a7:ac:81:f5:ad:74:ba:cb:68:
46:b9:ac:f1:28:41:40:bb:bf:36:a4:bb:f6:7b:a2:
76:2c:0a:5c:71:d9:59:28:35:ad:3c:3d:23:81:17:
c2:a2:43:57:08:93:a3:0c:f3:e6:14:23:fa:e6:46:
97:19:a9:0e:21:00:1b:9e:a7:d6:bd:f0:06:c7:ad:
a7:2b:dc:3e:94:15:b1:e9:ce:6a:86:b4:0a:8d:87:
1b:79:3f:9e:5a:d8:60:cb:0e:fe:86:10:d6:b3:05:
9c:49:fa:df:cd:ee:41:81:90:2d:35:1e:d8:74:7e:
50:b8:e8:7f:37:0e:f2:44:94:42:26:26:07:37:66:
63:31:24:a0:95:b3:de:18:6c:85:a5:d8:73:de:2f:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:83:EB:C6:68:C9:A7:EB:E7:AD:98:F6:8D:26:54:75:64:38:FC
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:ec:66:0e:0e:4c:fa:ac:81:ac:f7:f3:ee:d2:e6:a9:bc:
aa:bf:f6:e9:ed:1e:f7:e8:0c:f0:b1:d5:cd:2e:42:25:a4:fa:
69:41:91:45:68:dd:bf:db:9e:49:08:40:61:8c:f3:95:01:5f:
62:85:12:b2:66:5a:17:8e:9e:94:0c:8c:fc:af:57:c8:b8:65:
82:c9:05:55:b1:00:de:68:e3:88:72:aa:4f:b7:92:78:04:bc:
1d:27:f1:70:5d:bb:cf:5c:02:02:ab:66:20:8e:cc:f1:4a:b2:
8c:de:95:26:4a:a3:2c:41:9e:f1:b8:5c:cd:4e:ee:c2:70:89:
4e:cd:fb:16:81:44:81:c4:a6:9b:db:58:52:8f:f1:a9:e9:7f:
81:1d:be:9e:07:2e:e1:8b:b7:2b:ce:66:51:f6:b1:ad:9e:d8:
24:3f:85:b9:2a:56:7f:3a:df:17:87:4d:12:02:3e:b7:52:ef:
d0:e7:d8:a5:f5:48:b7:a9:38:7f:fa:cc:9b:c4:9c:44:39:89:
97:bd:20:b6:5c:ce:91:ca:28:22:16:44:72:24:13:31:3a:cc:
af:49:49:fc:64:0e:1d:c0:3d:1e:29:fc:a9:82:91:ca:0f:13:
dd:7d:b8:1a:61:fd:72:2b:d4:da:ff:69:4f:77:1c:2c:5f:bc:
04:9c:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:54 2026 by rpki-client