Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier: vd6ZQXXDlci/cUcYahzhlQs1Zto6DyOcg59cpCh+2y8=
Subject key identifier: F1:19:41:6E:60:D4:AB:8E:73:A5:44:29:2E:55:04:CA:75:35:55:CD
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial: 019D2771E69F0C09DFA273D632D19A7EE091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number: 08D3
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: MXA3c8QX3g7YwiQOnrLTeGWh5fs.roa (hash: E7jF1me4KBNOx1U7XGJgq5UdFci6SFszrBrpba8pjPc=)
2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: 8d0X5r/rzhQngsjimQkv3i1uxey7AWBIyOIC9R8GzCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e6:9f:0c:09:df:a2:73:d6:32:d1:9a:7e:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=f119416e60d4ab8e73a544292e5504ca753555cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:9e:4c:21:62:1e:04:27:37:55:69:18:3d:
f2:f1:e1:54:9b:c0:c6:99:e1:43:b0:12:ef:4b:6d:
d0:25:70:bf:a9:36:10:66:66:17:48:d7:fd:48:7e:
83:59:23:d3:d7:9e:ef:ce:87:4d:a7:93:21:31:a5:
d7:dc:f1:df:fe:61:20:88:5a:4c:15:cc:67:3e:16:
81:45:d6:5e:11:77:ff:b9:5f:84:c1:08:47:84:6e:
7c:aa:e7:d5:47:20:9c:73:e1:22:a1:00:ee:c7:28:
25:57:76:1b:68:09:c6:db:88:00:5b:87:f7:25:da:
44:14:39:a5:1c:2c:d0:20:d0:a0:bb:19:f2:f8:da:
b3:49:62:02:56:5f:a1:3b:54:04:36:d1:6c:df:82:
59:87:a6:38:54:bf:d1:26:86:ad:bc:81:ba:fa:c0:
06:e4:2f:7c:7e:5a:92:84:b2:0f:57:80:e0:11:db:
08:42:ee:b8:3a:d5:3f:dc:94:48:1b:9f:e6:99:c8:
ee:3c:63:94:0d:49:c1:28:b7:28:12:4f:d0:03:23:
25:9a:8d:bd:9a:36:f2:ed:f1:1a:5a:84:c8:62:59:
e3:ed:85:9c:d1:1d:09:96:2e:96:28:9c:7b:79:ba:
b9:92:f2:c7:8f:e6:1b:02:8b:fe:64:66:0a:a2:c0:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:41:6E:60:D4:AB:8E:73:A5:44:29:2E:55:04:CA:75:35:55:CD
X509v3 Authority Key Identifier:
keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b5:1f:88:6d:0c:64:d8:f3:85:e4:02:80:67:35:b3:16:b6:
27:26:62:66:1f:b6:13:97:f4:b0:bf:34:a1:f7:0a:60:85:4c:
78:eb:97:e7:7e:96:b4:79:39:d5:eb:8f:36:39:97:dd:17:22:
f0:8f:7f:44:5d:4c:d2:58:a1:3b:34:1c:f2:d6:e0:a3:12:a6:
43:f6:60:77:31:1b:54:56:a4:02:65:85:28:4e:9c:3e:43:c2:
24:ac:47:63:c2:46:2a:f7:76:dd:9a:27:62:18:f4:d9:8a:a9:
13:a9:86:de:a5:11:01:f9:bc:52:3b:18:04:27:5d:51:52:7b:
44:49:a5:dc:62:da:dc:6b:20:88:a5:d9:12:a4:12:99:25:ff:
c8:04:87:c6:a2:1c:7d:42:11:9a:0a:2c:1f:03:06:82:ff:e1:
ce:d3:a6:d1:90:5f:80:a3:e4:3d:b0:77:08:64:c9:1f:59:3b:
cf:e0:95:6d:ab:d8:f6:df:72:ea:68:26:fa:94:fe:df:56:da:
4c:e9:f9:46:2b:2c:04:04:a7:78:44:70:fe:b2:fd:c1:b2:84:
89:64:fd:6c:63:4e:4a:34:f6:96:82:7c:c9:4e:31:78:3c:05:
89:80:82:a0:70:fd:bf:a0:5f:41:08:f6:48:30:44:2a:61:27:
55:46:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:15 2026 by rpki-client