Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: IS2ATCKccAI00KKYJ6MiBP54NgdibCXoyXa0X9+/oLI=
Subject key identifier: 32:C5:DF:02:03:47:4A:50:A9:69:7D:0F:C4:D3:AC:6C:C4:A2:43:70
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019F8F477A1088B5D2F64F530D1A06D7F130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0CE2
Signing time: Thu 23 Jul 2026 14:00:53 +0000
Manifest this update: Thu 23 Jul 2026 14:00:53 +0000
Manifest next update: Fri 24 Jul 2026 14:00:53 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: 9y2R0Cl+2BtH/SN1hBbBhPIaWErM4WquADrcq7XaUsI=)
4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:7a:10:88:b5:d2:f6:4f:53:0d:1a:06:d7:f1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jul 23 14:00:53 2026 GMT
Not After : Jul 24 14:00:53 2026 GMT
Subject: CN=32c5df0203474a50a9697d0fc4d3ac6cc4a24370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:9b:b4:fb:62:44:ac:ee:43:ad:e9:3f:8f:
37:d3:93:53:8c:13:27:7a:13:88:8b:2d:23:0c:5f:
1c:4a:f2:cd:66:fb:5f:c2:46:eb:a4:f0:a6:b0:52:
9e:f6:e3:24:2b:e0:0a:f7:e5:4f:5c:bc:96:d8:ec:
0a:81:a9:e3:b5:9c:8b:84:1e:26:03:a8:1c:02:98:
3a:da:4c:26:ea:9f:6b:7b:54:22:96:9c:36:e6:9a:
98:03:12:35:80:e6:5f:2c:46:d1:ae:59:4a:c6:28:
46:fd:a0:8a:f6:26:67:ca:c1:e3:a2:c4:34:19:c6:
a5:1a:2a:99:d1:38:62:42:1e:cc:63:78:9b:f1:5d:
c4:cf:2d:93:75:de:a7:21:18:47:68:e3:bd:e9:f5:
b6:47:75:5a:80:9e:c3:0f:0f:78:39:de:34:38:34:
00:e3:60:a8:b9:ea:1d:5c:31:70:44:4e:48:02:7f:
34:7b:54:39:fc:e0:2f:5f:e6:ea:3b:cf:84:df:ea:
28:8d:81:20:f5:ce:c0:68:57:3e:b9:11:16:6f:c2:
c4:06:31:bb:13:18:9e:4c:a4:6a:b4:55:0e:0c:3a:
60:cc:5b:7d:21:39:a7:df:9b:4c:36:9d:29:1d:3f:
83:36:4b:3e:77:15:25:f3:d6:11:06:fa:1a:3d:49:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C5:DF:02:03:47:4A:50:A9:69:7D:0F:C4:D3:AC:6C:C4:A2:43:70
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:85:af:de:87:85:6d:65:20:4b:59:76:dd:c1:eb:1c:8a:7b:
5e:25:d8:3b:28:7a:c1:d9:06:22:40:3b:c3:22:6b:bb:5f:69:
bc:22:21:f4:30:00:86:99:de:a5:1f:f3:df:f9:87:06:06:37:
f9:81:e9:43:a5:4d:69:fe:7e:ab:40:9a:f0:5b:8a:6d:22:4e:
48:7b:37:5c:4f:74:e6:6a:ea:8d:b1:63:ed:79:a8:51:bc:84:
e0:df:bd:f5:c6:83:66:ba:a4:bb:d2:5e:b3:43:16:fa:66:95:
43:8f:72:a5:d8:34:30:55:02:9c:16:a8:1e:7f:31:83:25:01:
8e:1d:0d:49:60:6d:14:cf:6a:d2:07:01:ce:c5:da:6a:79:12:
72:86:8d:f5:79:b8:1b:52:41:f4:5e:ff:b1:bd:68:22:83:3b:
74:dd:03:7e:61:c6:70:11:8e:58:d8:ca:3f:1a:fe:8e:b8:08:
12:24:06:8a:27:75:0b:04:d1:00:5f:57:19:45:53:20:b7:0d:
0f:54:69:1a:27:91:79:59:f0:e2:93:1c:3a:69:47:c5:7b:46:
55:9c:4c:f1:fb:a8:be:07:db:bf:54:1f:2d:ca:71:d7:f3:7a:
08:6c:69:47:23:85:32:8e:b6:54:a5:5c:37:30:6d:20:0c:3b:
5b:5c:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:14 2026 by rpki-client