Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: yR1DwP+WZwqPevn/EPca3UocUpZ9iZRO4mi+hdAh2ys=
Subject key identifier: 33:E6:93:66:55:F0:85:1A:4A:FC:38:61:8E:36:CC:03:5C:43:06:A9
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 019D2703DC50198A4DCED36FC4C58C6CCE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 10B7
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: OqMdZ71oUrwmPSdn5V8YR7wwmDkDtYTURSkutJBLwfc=)
3: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
4: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:dc:50:19:8a:4d:ce:d3:6f:c4:c5:8c:6c:ce:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=33e6936655f0851a4afc38618e36cc035c4306a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:98:fc:d5:10:29:fd:7a:a9:4e:f6:22:fe:
fe:ee:58:67:76:4d:fc:7b:3c:45:50:64:a8:d1:b6:
bb:95:8f:c5:0b:ff:2d:3d:4f:f0:1f:89:fa:cd:d5:
54:72:70:c1:82:4b:c3:d7:84:06:06:2d:a3:21:f2:
28:98:c2:20:5c:c9:3b:53:1a:37:37:48:1a:ee:75:
4d:55:9a:c5:cd:54:4a:c9:79:4e:d9:15:58:59:02:
66:36:6e:f5:25:c3:cd:2d:23:3c:82:43:b7:47:ed:
6d:67:d9:1f:a7:fc:1f:1a:8c:db:7f:fd:59:6d:7e:
63:6d:5d:87:58:1b:f0:9e:13:53:09:2f:fc:4a:3c:
31:d1:35:39:73:13:1b:bb:2f:2e:c1:14:50:13:f5:
b8:74:df:72:8b:67:55:ff:25:09:51:b2:b8:82:c9:
80:83:a1:c7:ff:4b:66:c2:0a:b7:72:bc:25:bb:0b:
0e:b3:7d:db:c5:e9:50:29:a8:80:51:30:5a:57:5d:
f5:05:1f:70:01:67:2c:44:87:74:77:77:04:07:dc:
af:57:cc:3b:00:b0:76:56:0f:b1:69:d2:08:0a:05:
8d:e2:ca:e4:c2:1d:55:74:11:40:6f:bc:62:43:49:
3d:98:33:8f:4e:b9:1e:a2:57:8b:05:a2:99:69:03:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:93:66:55:F0:85:1A:4A:FC:38:61:8E:36:CC:03:5C:43:06:A9
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:97:61:83:4c:0f:cf:66:e6:95:85:00:ea:bb:81:42:9f:78:
71:15:9f:46:65:a5:51:1f:b2:5f:19:3d:ee:31:a0:2a:0a:d4:
b4:5c:7c:8e:86:0a:71:4c:59:96:c9:eb:e8:f1:e8:46:f8:bd:
a9:27:3f:e2:12:33:1f:f2:57:b1:f0:61:7c:e2:d0:a2:d2:3e:
d8:0c:4c:44:fd:1a:90:52:51:e6:d4:33:4c:4b:6d:c1:76:16:
71:30:39:3e:36:c2:2f:a6:ad:54:e9:85:54:47:9b:6f:cb:8a:
9d:a2:14:7b:7c:6d:a0:0e:03:20:d0:80:12:44:9f:88:36:97:
ec:8c:10:cc:4f:38:55:b3:d2:49:74:7b:81:9f:59:2b:c1:29:
82:64:4f:12:3f:44:16:db:8e:84:91:05:94:da:2c:9d:e2:6a:
64:99:14:dc:1e:96:71:fa:18:73:64:bd:64:eb:fe:33:a2:74:
87:5b:a7:ec:51:89:98:4d:e7:19:b2:e1:03:ce:d7:1a:37:8f:
30:b1:08:9c:14:6a:87:72:c5:66:a6:fd:00:1b:cf:32:10:30:
4f:0c:41:29:d3:51:aa:58:d9:ef:2e:08:70:16:93:cc:a2:6e:
07:c8:49:f1:31:0e:b3:04:15:f5:22:77:53:3e:8f:c6:eb:67:
fc:45:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:53 2026 by rpki-client