Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: weJspDmP4bL65JJZlqjaPVDoqwYoC55oOzSlJTgyZqw=
Subject key identifier: F2:1E:B2:AB:7A:22:84:76:45:C3:E2:6D:C2:F9:CD:D2:55:B4:FC:96
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019E1D90F6B2EB29610C071B5F229A5F12A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0E28
Signing time: Tue 12 May 2026 19:01:39 +0000
Manifest this update: Tue 12 May 2026 19:01:39 +0000
Manifest next update: Wed 13 May 2026 19:01:39 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: 0g7mBaVtBDBskRk9UaKq8Rq+RGTS6I7GmQ+IkzNRz+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:f6:b2:eb:29:61:0c:07:1b:5f:22:9a:5f:12:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: May 12 19:01:39 2026 GMT
Not After : May 13 19:01:39 2026 GMT
Subject: CN=f21eb2ab7a22847645c3e26dc2f9cdd255b4fc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:3f:32:0a:6e:67:e6:bf:ea:74:32:ab:1a:
53:b6:91:89:4f:eb:53:e8:b1:89:be:99:d4:81:73:
19:d2:a7:78:78:4d:16:66:42:eb:8b:ba:25:58:c0:
43:d8:e5:4b:50:53:81:91:81:d3:18:75:ed:52:97:
cb:52:dc:f0:19:81:c4:f0:d6:a3:4b:4e:6c:a5:4d:
0e:7f:a1:b8:41:53:d6:ec:b2:74:66:b5:40:c3:b3:
a0:b6:93:ba:58:1f:96:70:cc:13:d0:6e:33:46:df:
d4:43:fc:4f:db:71:a0:3c:22:36:68:c7:ae:d3:e0:
7f:f2:77:15:ed:36:40:a3:8e:69:e4:15:82:c1:f8:
4e:76:2e:71:2f:65:29:08:77:0a:52:30:5e:59:ae:
8b:30:62:4f:de:77:59:73:4c:5d:9c:76:c3:f7:61:
48:38:6a:3c:86:5a:ff:cf:d5:38:6b:ca:e8:7c:4d:
3a:9d:a2:dd:b5:96:34:3e:7d:f2:8f:39:03:e5:f1:
e3:f6:b7:9f:bf:2a:be:fd:86:c4:f4:7a:bb:c7:97:
4e:e2:d3:6f:c5:cb:74:c7:c8:f3:dd:21:4b:a7:b0:
a8:be:5d:4e:4a:bf:e1:fd:fb:f2:d3:df:95:3b:a3:
a8:87:f5:26:68:a0:06:f6:02:5d:e7:9d:c6:06:a4:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:B2:AB:7A:22:84:76:45:C3:E2:6D:C2:F9:CD:D2:55:B4:FC:96
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bf:11:b1:2d:45:26:41:52:7a:32:9a:1b:d2:35:93:df:f7:
33:f8:66:17:ec:d2:74:06:39:54:71:10:e3:f4:b4:ae:cd:e9:
13:07:50:29:9e:dd:f2:17:6e:af:ef:26:f1:1f:19:6c:2a:3d:
85:46:57:60:6d:e6:c2:85:e4:78:97:12:5c:13:ea:96:e9:51:
52:8a:a3:dc:b1:fc:60:23:8f:c9:5c:52:91:e8:6c:d1:a5:13:
20:ae:09:7c:89:5c:d4:a9:d4:a5:c3:49:61:3e:73:ec:29:da:
23:4d:05:52:8a:7d:c6:67:48:de:0e:f5:b4:47:3f:5b:1a:a0:
d8:75:de:8f:9e:10:00:e4:8d:21:1b:8a:d5:fe:e0:86:5e:86:
71:bf:5c:34:33:ef:96:53:c5:68:c0:8a:5d:36:20:f7:fd:8f:
24:1d:fd:8e:a3:ea:04:f6:82:28:39:49:25:12:8b:cd:07:12:
eb:e0:dd:a8:0d:9a:df:da:73:0a:19:1a:df:d9:02:26:ba:05:
11:47:3a:51:31:11:1a:ca:7b:87:4c:14:81:dc:12:72:be:c7:
9b:4c:c3:c9:ba:29:bb:45:76:ca:fb:6d:7d:07:62:17:a1:81:
4f:8c:dc:40:2d:33:dd:f0:2b:cf:8d:32:93:32:17:9b:c7:1d:
1f:41:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:12 2026 by rpki-client