
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: Im0lYute174rC33Ce3ALlnO5kV90IAgWZOhopOmnhmM=
Subject key identifier: E1:89:60:AA:A6:A9:F4:BB:39:64:81:18:1A:CB:A8:25:1F:FB:C8:3A
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019F91DAB305F907E8EAC5EE1BCB03B462E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 04B2
Signing time: Fri 24 Jul 2026 02:00:56 +0000
Manifest this update: Fri 24 Jul 2026 02:00:56 +0000
Manifest next update: Sat 25 Jul 2026 02:00:56 +0000
Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: HGx6q5y6zYhUHm5bXkdiK1or17eOEsmmYF1CccTdCzc=)
2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:b3:05:f9:07:e8:ea:c5:ee:1b:cb:03:b4:62:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Jul 24 02:00:56 2026 GMT
Not After : Jul 25 02:00:56 2026 GMT
Subject: CN=e18960aaa6a9f4bb396481181acba8251ffbc83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:7e:c8:8e:0c:7e:23:bb:63:f7:3e:7b:c9:
a1:f0:f5:3c:bb:d5:53:ab:05:05:61:09:2c:67:4b:
16:44:3d:79:bd:0b:9e:94:78:af:6a:92:f1:a2:b7:
10:c2:06:34:a8:62:90:0e:57:9e:e7:09:2e:23:58:
26:0e:5b:ca:80:99:10:e0:d7:49:14:30:81:d7:68:
66:00:b0:b9:8c:60:ab:d0:cc:4f:28:55:87:fb:b9:
9e:73:e8:be:cd:b0:f7:c2:74:68:a4:0a:55:5e:07:
84:c1:18:ab:66:fc:34:3e:50:95:b0:da:15:d5:23:
42:cc:0e:ed:3f:84:d9:7f:41:b6:79:15:e0:7e:2d:
ad:89:56:11:6d:bb:66:49:a7:bd:ab:96:45:be:4b:
4d:18:56:9e:2e:d8:10:05:4c:45:27:96:7e:fe:2a:
ba:5e:3e:46:bf:9b:bc:92:f3:b8:b3:f3:3c:5c:46:
55:06:16:c7:c1:b1:a2:59:e9:22:ab:0d:f2:ca:b5:
93:e3:92:32:e4:07:3c:f1:44:d2:12:14:f2:09:d3:
aa:55:1c:9e:86:b8:85:58:67:52:38:af:25:85:0e:
2b:8b:fa:64:07:f5:c5:bf:c2:67:b2:99:cb:c1:5d:
ca:64:62:8b:e8:a8:4a:35:74:d2:dd:7d:40:73:11:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:60:AA:A6:A9:F4:BB:39:64:81:18:1A:CB:A8:25:1F:FB:C8:3A
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a0:5a:45:88:b5:79:35:3a:3d:e8:53:5e:42:c3:88:99:de:
00:5f:f5:39:97:44:d0:cb:b0:b1:91:7b:19:93:21:6a:af:39:
55:03:de:ce:7a:1f:22:a6:a0:4c:f2:e8:cd:1e:20:bd:9d:80:
9f:91:ce:ee:9e:d8:ad:16:fd:4d:fe:d6:56:82:ea:14:8e:85:
bb:9c:82:97:a2:d5:af:93:cf:c2:1c:55:e3:98:24:8e:b7:e2:
0c:73:c0:8c:43:67:08:a2:1f:ec:95:af:be:5a:95:29:85:b5:
e8:c9:e6:d2:cc:e1:10:74:8e:9a:ea:34:89:60:18:c1:c9:d2:
b2:d1:d4:9b:f1:52:ff:7f:0a:cd:fa:41:09:21:9e:09:2d:76:
02:49:b2:c9:1c:c8:28:89:80:57:cb:89:75:9c:6c:63:ae:e0:
2f:66:b0:04:e2:44:c3:b9:ca:63:1c:fa:57:c5:97:d5:77:f7:
a6:99:9c:9b:9b:d3:47:9a:02:4f:2e:a4:4e:d1:2f:86:40:48:
5c:6a:b5:32:ed:40:2c:64:79:e1:c1:dc:ac:0d:e3:79:80:d8:
6e:e5:54:0e:62:38:5b:a6:67:9c:7e:18:ae:b7:b6:5c:1a:10:
41:bc:d6:fa:71:90:e0:ab:17:8b:29:f9:09:4a:72:e9:96:96:
46:64:35:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:30 2026 by rpki-client