Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: 9IEUKUeMLYnhWsI4UqROK5AqLI1dcsFPFM26U/Yym28=
Subject key identifier: DB:EF:07:48:80:16:9F:67:8C:44:4D:73:50:18:D6:1D:CD:47:40:3A
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019D2695CD11D3939C47E3F21D45E06BE5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 0921
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: PsD4qtpCS6EIQNY6ijpZL8T0zW8I6F8NgyAfxecRHtU=)
2: ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa (hash: q4viv2fxAfHFR/GFrBCoNhBLbbosPZIEVECgSP1MwQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:cd:11:d3:93:9c:47:e3:f2:1d:45:e0:6b:e5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=dbef074880169f678c444d735018d61dcd47403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:2b:31:87:27:bc:2d:18:86:56:31:5b:56:
db:bd:79:ba:5c:f8:b9:6c:1c:93:10:0d:f2:ba:47:
8c:74:69:ab:69:a7:78:6e:26:87:44:07:e2:f2:94:
44:c9:5c:20:3f:b1:82:78:f9:1a:19:26:dd:04:41:
d6:45:da:67:6a:80:9a:f0:60:d9:07:6e:87:fc:85:
bb:2a:d6:87:b2:ff:4b:a8:70:39:49:d6:10:81:0d:
69:75:ee:e4:0c:d3:05:33:a3:da:16:7e:d1:cb:65:
69:39:a8:c8:a8:22:49:fc:ff:fd:6f:23:d9:8b:cd:
41:84:a5:6d:f0:6b:63:30:0d:5a:1d:df:4d:ff:22:
fc:45:9a:9e:9d:07:6a:ad:19:02:bf:e6:7a:a6:09:
d0:1f:9c:16:4c:10:8b:79:2d:bb:ff:83:95:ed:d3:
93:80:41:44:31:9c:14:87:07:56:3c:15:12:66:92:
42:13:9f:d0:25:75:0a:7c:02:c7:e9:eb:29:6b:6a:
0b:c8:10:18:3a:0a:6f:6f:b9:7f:8a:1b:b3:91:a6:
8c:cf:d6:9b:64:96:a7:97:c6:b5:9c:81:cd:71:e5:
e4:ea:ab:f4:93:90:5d:c4:a1:8e:6c:fd:61:a5:e4:
c6:5c:6f:af:f7:7f:ff:86:2c:b5:88:ab:8a:7b:43:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:07:48:80:16:9F:67:8C:44:4D:73:50:18:D6:1D:CD:47:40:3A
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:6a:b3:75:04:e7:76:5c:d7:c6:0f:ba:f0:bb:62:da:09:
fa:df:c3:b4:ce:ef:4b:de:04:95:11:54:23:e0:21:46:c5:1c:
50:c4:83:42:d5:1d:26:bf:78:54:c2:29:5e:a6:ba:61:65:ba:
ab:98:c1:b2:09:fc:36:49:45:8c:cd:8b:05:25:a3:f7:45:65:
04:d0:ef:c8:fa:e7:6a:f6:f3:00:d9:06:67:0d:9d:9e:87:49:
02:8e:0d:ac:02:e0:aa:88:cd:29:c7:a5:76:ff:bf:e9:83:91:
e4:0f:3a:97:e7:0e:4f:8f:4e:1b:b3:f1:ac:28:18:60:fe:b1:
28:35:78:1f:10:15:f4:6d:d3:ea:4b:38:7c:d8:79:03:7b:4f:
34:39:73:b0:7c:15:c4:3e:9b:5e:42:85:84:40:8e:82:13:99:
c9:14:5b:42:a2:11:82:4e:46:2e:4c:2b:f8:86:0e:b2:cc:27:
84:04:b1:86:82:e8:9c:65:74:05:50:fb:b1:9e:3f:02:96:51:
8a:a5:a8:02:3e:e5:f9:c4:dc:51:6b:a8:43:bd:1f:00:9a:09:
dc:dd:d4:ab:df:87:c4:85:3c:7d:04:00:5c:2f:eb:06:88:1c:
3c:c3:7d:9e:16:0a:e5:66:c9:8c:0f:8d:9c:c5:e4:81:79:58:
12:c9:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:10 2026 by rpki-client