Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: MCYQYyNrFwOxQ0vQ1BhpcaPBJvr3oU+44nqusBcFcXM=
Subject key identifier: 3E:C3:14:99:DC:E0:53:CA:7C:26:E6:44:97:1A:DB:CE:6A:5C:14:2A
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 01A0D382C32F1E45A1A0210E47359E112770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 129E
Signing time: Thu 24 Sep 2026 13:02:37 +0000
Manifest this update: Thu 24 Sep 2026 13:02:37 +0000
Manifest next update: Fri 25 Sep 2026 13:02:37 +0000
Files and hashes: 1: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: k2YuQcckchgyG3JI7GCARsEdWJyPzoMhtiOULTOwlCQ=)
3: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
4: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:c3:2f:1e:45:a1:a0:21:0e:47:35:9e:11:27:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Sep 24 13:02:37 2026 GMT
Not After : Sep 25 13:02:37 2026 GMT
Subject: CN=3ec31499dce053ca7c26e644971adbce6a5c142a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:52:65:21:8d:1f:28:25:ac:ce:73:c1:d4:
ad:30:4a:1b:d7:44:6a:6a:3b:7d:78:03:a3:88:ec:
b1:8c:41:67:c6:55:4d:7d:12:b5:05:be:8c:8b:11:
6c:9d:95:ef:41:27:4e:82:db:4c:1b:42:d4:ac:35:
49:f9:8c:54:00:b6:97:38:f9:34:12:93:eb:30:86:
63:fa:14:7c:7c:f9:c1:da:a8:d7:26:ea:5a:61:a6:
23:7a:f9:4f:0e:b4:e6:cf:ac:d9:6a:6e:48:98:2e:
38:69:1f:c2:89:f9:c3:ce:d8:1c:76:7d:2f:9e:44:
57:72:4e:15:a8:ae:7c:40:3f:c6:12:b7:42:11:4f:
ce:79:26:c8:c9:fd:44:e6:d9:35:9a:7a:7b:34:2f:
01:74:a0:98:2a:cd:a5:c4:17:9d:e8:cc:03:c2:91:
bf:b2:19:64:21:6e:80:db:11:f8:31:22:b5:9c:da:
94:06:73:ad:d2:15:69:88:b5:59:49:fc:87:55:5e:
c0:10:9c:01:58:b3:6f:e9:6c:f5:ee:59:3f:68:2b:
46:a6:89:db:03:2b:d9:a0:5c:17:39:94:bd:4c:88:
59:25:43:17:8e:28:ff:f7:80:9c:d5:c3:43:64:83:
1d:cd:56:51:e0:65:f8:ea:db:14:f3:96:88:dd:05:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:14:99:DC:E0:53:CA:7C:26:E6:44:97:1A:DB:CE:6A:5C:14:2A
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c1:8d:74:b5:0b:a7:bf:c9:29:86:3e:47:d0:65:34:b2:aa:
e6:07:d4:d6:1c:68:d0:a6:a5:54:25:71:85:fa:b6:40:ef:ea:
c4:ca:1d:db:f8:b6:7e:a0:f8:b8:26:93:f9:53:26:02:33:96:
ca:1d:74:60:f9:06:d2:3e:23:8a:8b:43:99:5c:6f:b4:d3:d2:
88:f8:9d:c4:04:47:7b:59:60:1a:32:ae:fa:85:e5:c8:49:94:
0a:da:c7:6a:b7:42:70:56:3a:13:fb:10:14:de:6d:0b:f2:55:
12:7b:c5:b3:07:ff:f5:21:db:f7:72:2d:75:41:6e:73:37:03:
04:42:9b:dd:0d:7a:58:c5:72:f7:9a:27:d6:57:80:09:ba:d6:
af:0a:d0:c7:8b:78:a3:2d:fd:e0:6f:39:12:88:76:e1:27:63:
1f:68:c6:09:0a:b6:c9:1a:96:8e:d1:5a:3a:fa:a9:d0:2c:0a:
7a:45:3f:86:14:da:e4:bb:07:6b:09:77:9f:01:4a:ff:33:ff:
bf:a6:94:df:9b:c1:b4:97:5d:64:6f:7d:99:57:1f:97:c2:21:
26:21:2b:99:e0:32:2b:4c:4c:b9:3e:cf:ec:40:6d:0b:c2:43:
c6:48:cb:e6:9f:57:6f:c6:2b:b3:42:f6:eb:8d:a2:9c:9a:c4:
fb:ab:3c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:35:59 2026 by rpki-client