Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: c8GIV55NrNHrBFdKq+BYfJUBFVMiMwFiKIuzZDDdnrI=
Subject key identifier: 7B:A8:CB:B1:E2:1E:31:3B:07:E1:06:19:16:8E:9C:63:84:B8:89:A8
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 01A1DE02D4097E28811E6E5F0C3DF1EC31BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 1328
Signing time: Sun 15 Nov 2026 07:01:29 +0000
Manifest this update: Sun 15 Nov 2026 07:01:29 +0000
Manifest next update: Mon 16 Nov 2026 07:01:29 +0000
Files and hashes: 1: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: KZ6YNKDDQvgS5bswDiKcaOK/MmS7WbzdE76XqHYBvLU=)
3: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
4: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:d4:09:7e:28:81:1e:6e:5f:0c:3d:f1:ec:31:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Nov 15 07:01:29 2026 GMT
Not After : Nov 16 07:01:29 2026 GMT
Subject: CN=7ba8cbb1e21e313b07e10619168e9c6384b889a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:c5:a7:1b:69:38:dc:aa:f6:bb:d2:c8:c3:
72:60:d8:42:d7:10:b1:c0:65:5c:57:ec:8a:9f:3e:
50:f5:e6:b2:ef:8c:a8:3b:15:84:e5:7e:ce:b8:2b:
31:87:e4:28:74:7b:27:d8:e4:24:ab:2c:36:10:14:
9e:4c:5e:43:e7:70:2a:0b:21:84:34:75:11:46:c7:
48:08:3b:59:af:c3:1a:20:36:56:1e:96:a5:c3:f3:
34:bd:c3:86:46:5e:ca:f5:7d:67:43:7f:4c:c7:f9:
53:31:04:b2:d4:76:62:b7:79:ef:da:f8:ac:60:c7:
2d:3a:13:07:7e:82:53:82:ab:53:9e:b6:d9:9e:e8:
1f:72:f1:35:fc:e0:5a:9d:a8:b0:a9:02:2f:6d:53:
4a:b7:38:d1:0a:b6:27:d0:70:cd:96:89:f8:cf:4f:
a8:5f:57:9c:a8:7f:ab:a7:65:5f:72:66:5d:32:c6:
bf:21:c6:9a:39:25:b2:68:d8:ea:ce:ae:c1:df:54:
94:0a:bd:76:21:e7:e0:9e:44:e4:29:8e:fa:97:c8:
44:6a:a9:45:9b:d1:f7:5e:53:a2:3a:3d:ba:4e:7e:
9f:56:7f:e3:d3:9b:75:b3:bc:fb:b4:59:38:7c:51:
77:78:07:a6:59:47:cb:df:3b:39:f3:b5:bc:8d:af:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A8:CB:B1:E2:1E:31:3B:07:E1:06:19:16:8E:9C:63:84:B8:89:A8
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:59:d3:87:f6:19:79:1b:8c:37:2e:d1:1c:d4:53:81:f0:
79:70:13:b0:de:f5:1e:58:d9:c1:92:df:36:bf:c9:36:be:01:
34:a7:76:25:b5:24:26:c3:a7:06:e0:a9:af:44:c7:6b:c8:1f:
c7:35:b9:25:a0:81:ec:5f:7d:af:37:5b:f9:85:e5:1c:e7:f1:
0c:90:cf:23:60:d8:e0:20:bf:fe:6c:da:42:44:b6:df:18:2d:
aa:ee:42:8f:92:a1:11:b9:23:e4:44:95:c2:46:03:32:1c:dd:
89:74:6e:73:8e:74:69:70:2d:84:6e:c7:e7:92:ec:03:bc:39:
18:66:26:20:e8:b6:12:66:14:d1:54:12:75:26:ca:f8:73:07:
0f:40:ab:b0:12:f7:6b:cb:09:2f:26:50:d0:db:96:d1:6a:ef:
74:4a:4b:b3:41:ae:6c:6a:cc:00:01:00:2c:11:b1:a1:d1:04:
93:f7:ca:01:12:8e:c3:b0:e2:cb:59:f7:47:09:06:a5:7a:79:
11:40:ee:8d:b4:87:ea:98:13:4f:f2:17:fd:86:c9:77:3e:55:
c7:27:9a:22:9e:0e:60:1d:48:d1:d0:bc:33:28:62:29:ac:ac:
bd:c2:26:57:30:a0:23:cc:7a:0f:40:c7:65:9d:6e:d3:69:f8:
b9:50:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:04:52 2026 by rpki-client