Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: rr1QXUPyC9yeUju1w78lA1A269w6DcmWKRe9nJWw/5Y=
Subject key identifier: C3:A1:F8:2E:FF:C3:ED:62:8B:DA:43:69:63:A6:4D:C7:FF:E9:FF:66
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019D265F5BFF8B59F79E6046147EAF8263B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0DA8
Signing time: Wed 25 Mar 2026 19:01:16 +0000
Manifest this update: Wed 25 Mar 2026 19:01:16 +0000
Manifest next update: Thu 26 Mar 2026 19:01:16 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: 9fnzFghZbqe9LE8uxTrWSNoPFSlyW3DhUL0V4BVhQm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5b:ff:8b:59:f7:9e:60:46:14:7e:af:82:63:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Mar 25 19:01:16 2026 GMT
Not After : Mar 26 19:01:16 2026 GMT
Subject: CN=c3a1f82effc3ed628bda436963a64dc7ffe9ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:c9:eb:3a:bb:00:17:66:11:e4:f7:1f:ba:
25:50:7e:a6:34:7d:1a:3b:d0:0b:2d:82:b8:47:50:
c8:db:df:5e:d3:37:91:b0:96:12:8a:f8:23:09:3f:
2b:80:b5:b9:c1:4e:cb:60:73:29:e8:9c:32:f4:09:
0f:ad:48:79:c8:0e:46:53:c0:94:41:3f:dd:f5:af:
0a:b7:ee:fe:7d:c6:57:99:71:f5:ac:4d:ca:df:90:
3d:37:29:55:fe:d1:90:1a:e9:f6:7f:99:c4:c5:0f:
38:7b:4f:59:60:9e:1b:90:63:b3:78:86:d4:a5:65:
f5:16:58:c6:19:15:10:72:7e:9a:2b:ee:a2:3f:71:
3c:d6:15:99:c2:70:f8:8e:de:52:ef:06:ba:77:04:
06:e2:b1:02:b0:24:66:0c:b7:bf:f9:4c:2a:d0:2d:
28:1c:da:15:ec:f6:fc:a9:ce:f6:48:d4:6a:3c:16:
a5:7a:0f:5b:f9:ba:8d:6a:79:97:b7:9d:3e:de:7b:
94:b6:b7:02:21:70:e9:c3:b9:f7:a4:34:f8:fb:3e:
53:41:ed:3b:d5:74:1c:26:b8:bf:a4:64:26:e6:95:
fb:72:01:b8:74:0b:10:96:e3:3f:90:fe:23:3b:e6:
d4:06:01:69:19:7b:96:9c:76:57:2f:1b:7b:c8:2a:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A1:F8:2E:FF:C3:ED:62:8B:DA:43:69:63:A6:4D:C7:FF:E9:FF:66
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:da:d4:6b:b0:b0:5d:ce:52:15:e6:93:8b:a0:a3:52:2a:dd:
fc:1c:31:02:b3:57:d6:f7:57:a8:38:75:db:b7:f2:6f:ce:6a:
f3:6b:15:54:85:59:8d:2e:d3:a2:3c:61:2f:bf:1c:93:70:b3:
d2:74:e5:39:08:05:1b:0d:15:b1:9d:aa:e3:6e:37:cd:15:31:
57:26:b9:4c:53:24:c5:e4:f6:33:63:f2:b0:4f:e2:b2:af:d6:
0c:8e:30:68:c1:6a:3a:50:a4:a5:d9:f5:2b:85:c0:60:60:99:
a9:c9:0a:e8:6b:20:19:ad:c1:f3:f7:39:b2:33:b2:dd:d1:94:
87:a2:09:2c:df:68:5c:b8:6c:72:6c:96:cb:7b:6e:68:f4:89:
26:70:3e:ae:fe:5f:74:3a:dc:39:d0:17:22:31:ab:58:df:86:
4e:b7:97:b0:7f:79:df:81:19:83:01:b2:fc:6b:19:25:74:2c:
db:24:47:b5:fe:bc:db:4e:95:03:46:39:a6:0f:a1:c6:1a:71:
90:f3:1d:97:bd:c2:a6:2b:08:dc:4a:1d:e7:fb:ca:a8:b9:ab:
3b:1a:a2:ad:92:42:59:dc:77:1d:d2:db:02:2d:01:0c:41:b7:
ff:6a:9b:fb:17:a5:1c:ea:a6:6b:f0:fc:ac:cc:36:2a:d0:09:
07:f2:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:48 2026 by rpki-client