Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: OmPwUcXLF9TrQhVeyWwXb/06kzTzLI9mF69++uHrHqg=
Subject key identifier: 43:CD:3C:66:93:F0:9E:2C:5E:72:31:85:3E:5A:E5:8E:ED:59:85:1C
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019D27DFFFFF2B1C19DF22264022027D9061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 0372
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: ToPgeNfoRUPaeQwreOS8blnboOZ+rBxVIddvVMZ7K8c=)
2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ff:ff:2b:1c:19:df:22:26:40:22:02:7d:90:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=43cd3c6693f09e2c5e7231853e5ae58eed59851c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:ba:88:a4:53:f6:c2:8f:99:24:78:6d:d0:
a8:fd:44:0c:f9:e7:06:ee:7c:1f:e4:84:65:05:41:
05:00:17:37:8d:95:3f:95:b5:db:d4:4a:34:52:95:
92:a0:40:1a:c2:e0:f8:07:9b:9d:1c:1b:7a:7a:66:
41:d4:f7:fe:75:ae:02:2a:77:bd:5a:e9:44:1a:8c:
dd:8a:e1:65:cd:da:86:14:e5:45:20:22:6d:59:82:
4d:ca:03:53:51:26:9b:53:f0:06:d1:04:d5:13:7e:
6b:01:d8:1d:a4:20:ce:5c:1b:49:b8:4d:e4:89:52:
e4:cb:db:51:ad:d7:cf:ba:96:ae:2e:3c:d5:d0:b6:
e4:19:a8:ad:33:71:f9:73:07:3b:96:d8:b9:d1:c6:
e2:b4:9a:d3:a2:4b:71:51:12:17:7c:1e:81:75:85:
01:ae:7e:f2:2a:8a:70:c2:d9:6b:f4:34:f0:85:3c:
84:52:cb:61:f2:50:ca:39:06:fc:9b:e5:92:0f:70:
86:16:b8:4f:2e:c3:79:ad:4d:8f:f0:29:2b:c4:37:
f9:f1:33:63:39:23:0f:5a:43:ac:f5:09:39:64:b3:
a5:e8:09:5b:99:e6:f4:53:04:ff:3e:c2:da:dc:75:
7e:c5:54:01:5e:92:da:25:af:34:7f:c8:9f:fc:c5:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:3C:66:93:F0:9E:2C:5E:72:31:85:3E:5A:E5:8E:ED:59:85:1C
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ac:e7:a3:ca:e4:db:2f:53:8b:a2:7e:40:54:65:05:43:3c:
ac:a8:ae:b8:1e:30:24:62:de:e9:20:79:48:72:7d:10:1e:5e:
73:4c:59:bb:64:9b:c9:a5:28:56:95:5f:d7:a7:8d:01:9d:2c:
1e:56:cf:15:05:dc:70:47:8e:33:fe:3f:29:d2:c7:1d:07:be:
ba:c9:93:f8:d4:b4:ad:2e:a6:e6:b7:bc:0c:18:28:0f:49:fe:
04:a0:0f:5f:fd:4c:4d:e6:6c:a0:e8:ac:26:cb:cf:56:73:cb:
86:8f:5b:ee:74:6f:4e:a1:95:0c:19:4d:2b:a9:94:cf:2a:16:
24:3d:d3:be:c0:f1:de:ba:ce:55:45:20:28:78:b0:12:24:89:
f2:b9:fd:be:be:f8:04:a3:cb:c5:cc:bf:95:e0:45:a4:b2:2b:
89:bd:ca:24:e0:2f:5f:3e:89:9a:db:c0:e1:06:d6:dd:3a:d9:
87:b5:40:c3:1c:6f:3e:dc:e5:32:1b:67:8f:bb:71:54:cd:31:
7c:c1:09:3c:fa:67:70:e7:17:8b:a4:cf:28:f0:eb:f6:f2:e6:
4c:af:d5:ab:03:f3:ed:9e:eb:d4:4b:88:f9:35:49:9c:e3:dd:
67:17:1c:27:01:5b:77:d4:f5:11:ce:7c:90:58:82:e2:9b:11:
15:d8:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:53 2026 by rpki-client