Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier: 0ZP/Po6195McksXmk6QAbR7RJh+zWBS/zXEshU0tHeE=
Subject key identifier: 19:BD:46:FB:FA:69:A4:F7:90:97:29:31:CC:EE:3C:95:BE:15:BB:57
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 019D29616029676D61E0AD192670D3B98E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number: 068E
Signing time: Thu 26 Mar 2026 09:02:20 +0000
Manifest this update: Thu 26 Mar 2026 09:02:20 +0000
Manifest next update: Fri 27 Mar 2026 09:02:20 +0000
Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: scp+LY3amxO53pmmjottlmtaWd2rNNcsmaHspocurIk=)
2: vRHDe49dNuvNmUAPOcMtSNJoxSk.roa (hash: 5+TSEDtVIZGmMa4KwGaP+zSgVu5+duOGjOl+EoHvBLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:60:29:67:6d:61:e0:ad:19:26:70:d3:b9:8e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: Mar 26 09:02:20 2026 GMT
Not After : Mar 27 09:02:20 2026 GMT
Subject: CN=19bd46fbfa69a4f790972931ccee3c95be15bb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:4a:0a:8e:66:fa:1c:b2:09:8e:58:51:d5:
bb:90:19:de:3d:6f:f1:5d:3d:d6:d1:98:35:b0:4e:
0c:9f:e1:65:95:80:44:bb:86:8b:b1:16:5e:70:db:
40:45:92:f4:53:a7:8f:98:4a:28:bd:ec:50:b2:ea:
0d:fa:f3:16:d8:1f:c1:c7:74:5b:b7:96:01:8c:46:
70:df:c0:2f:ed:eb:0b:36:55:6c:a5:74:59:07:34:
9c:bd:0e:18:e1:3b:32:26:08:33:2a:41:b3:52:44:
14:ec:f3:5c:6c:c5:0b:5a:bb:ad:86:9a:77:28:be:
a5:62:7f:fe:ee:22:e2:2a:3a:dc:ac:9a:d5:4c:3e:
19:19:1f:92:dc:d5:39:3d:bc:9b:59:a3:e4:4f:06:
2e:b0:88:84:b7:c3:1b:c7:28:ea:6d:ac:88:80:27:
d6:99:f0:68:cb:1e:ad:f9:a7:d2:8f:dd:9c:c1:97:
84:63:04:54:df:42:2e:76:d6:80:b3:be:e0:66:7d:
6a:75:fd:5a:b3:04:b4:9e:d5:53:a4:99:0a:0b:e4:
0d:72:d5:07:fa:7d:c7:4b:80:c8:52:74:2c:80:10:
d7:2d:2f:0d:8b:44:06:4d:e3:dc:a9:10:d5:1e:1e:
a5:62:1e:70:39:01:1f:28:9f:0d:2e:e9:f7:1f:b7:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:46:FB:FA:69:A4:F7:90:97:29:31:CC:EE:3C:95:BE:15:BB:57
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0c:f5:1f:ec:c4:1b:44:c1:72:2c:56:69:79:2f:84:a1:b9:
79:25:53:b3:2b:9e:93:fe:a5:56:81:9b:f5:be:96:7c:73:8b:
c1:f4:0b:f3:6a:0d:70:0d:cc:96:28:34:ad:81:e9:53:d0:13:
c0:52:00:0f:f7:7d:21:09:f2:f9:54:e2:7e:4f:13:d0:ba:35:
f2:db:f2:6b:b0:6f:4e:3e:da:18:04:8f:99:25:7e:18:e7:e4:
b0:41:cd:c3:1c:ea:1d:3f:44:b6:84:c1:a0:96:dc:40:25:92:
cb:33:d1:e0:ab:22:f4:bf:33:42:91:62:6a:5e:9b:85:f5:a5:
73:12:16:28:96:d4:41:18:8c:53:65:db:d3:03:d1:12:fb:a8:
3a:1d:d2:06:94:7a:21:4b:15:c7:90:e0:f5:74:39:5a:f2:2e:
20:4e:e2:28:e6:c2:b4:b8:05:97:28:86:79:28:d4:d2:4f:55:
9e:0d:63:69:2b:b7:2d:e5:fe:f8:d3:d5:19:fb:43:68:1e:9f:
9e:cb:6a:60:48:72:45:70:b5:a0:ea:7d:24:d4:ae:57:f9:57:
aa:9c:ae:67:14:fa:35:67:5a:fd:c2:e7:04:7c:46:98:e9:bf:
c3:de:78:42:b0:2a:4f:f2:33:88:44:54:62:d5:44:ed:82:4d:
87:f9:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:58 2026 by rpki-client