Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier: GISa85RE9yBNxm0anrquAFE5kk9JYP/s47Ic5ZWJTCE=
Subject key identifier: 8E:E2:9F:9B:1E:71:B1:2C:5A:62:B8:B1:BD:2B:50:BA:4E:AD:A4:21
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01A111F2782EF991754711C03D2B4A41DE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number: 1289
Signing time: Tue 06 Oct 2026 16:01:05 +0000
Manifest this update: Tue 06 Oct 2026 16:01:05 +0000
Manifest next update: Wed 07 Oct 2026 16:01:05 +0000
Files and hashes: 1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
5: JZY_foOujAs2S8oyUiHgzJmfQdc.roa (hash: DgfisKHYgXWyrC09kLGXsPVkL/aoRfMRq+KSAiwmCN4=)
6: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: V315xhhC+xXwVueQ9H6AfheHstx7etTBOHVT5JU+TxI=)
7: fEVKCWfXS81UhHXs6FzXRgVVlS0.roa (hash: DYXjiwoD9ieXBJq5p3EJXuBIjNeNxc0egoZ1sUSDsuY=)
8: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f2:78:2e:f9:91:75:47:11:c0:3d:2b:4a:41:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Oct 6 16:01:05 2026 GMT
Not After : Oct 7 16:01:05 2026 GMT
Subject: CN=8ee29f9b1e71b12c5a62b8b1bd2b50ba4eada421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:77:2e:75:de:c8:7c:97:3b:5f:08:2d:f6:
15:ab:58:34:7b:c3:85:a9:a6:dc:af:47:fe:35:22:
bb:c5:9a:52:15:69:57:69:6c:da:e5:bd:4f:38:30:
ec:cd:ac:65:6e:12:e9:ba:16:ea:06:db:77:18:30:
8d:c7:74:1d:1e:b3:48:a0:40:c0:52:02:c1:a7:05:
2f:e2:07:3a:d5:9c:75:0c:40:d3:22:b2:64:f3:ed:
07:ce:4c:80:33:11:62:b2:68:e9:e9:8e:75:94:3c:
8d:c2:50:5d:18:6a:91:81:b1:92:e8:9e:fe:76:4c:
ec:4f:4b:33:0c:f1:22:5d:e2:c7:cd:2b:fc:e8:6b:
ab:84:d9:d0:d6:85:b3:b3:bd:23:7d:81:27:6f:e6:
3b:56:e4:42:60:0a:4e:3e:68:2b:3e:6c:4c:25:26:
68:6c:21:bd:04:43:b8:30:62:87:f4:24:a4:b2:18:
19:07:fa:84:73:7c:0e:dc:fc:e2:b3:fa:bf:21:ee:
5f:fe:ef:cf:a3:8d:72:39:45:50:a0:5b:a2:8b:f7:
6e:f1:12:8f:d7:d7:cb:b1:75:cb:ea:4e:c7:3c:5f:
19:51:7e:96:d8:e0:61:5b:ef:1c:8a:02:b9:e9:0d:
3a:c9:28:b8:1d:ee:f6:cf:6a:f0:fb:85:96:82:28:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:9F:9B:1E:71:B1:2C:5A:62:B8:B1:BD:2B:50:BA:4E:AD:A4:21
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:ac:5a:44:92:43:88:e0:fd:18:5a:60:2c:bb:39:6b:02:
ff:30:9d:db:2d:92:02:87:87:2e:a7:e9:0d:1b:57:0d:57:16:
28:2c:ca:1a:1e:bb:83:d5:f5:80:15:f1:90:ea:96:b0:ec:3b:
c2:f4:4e:a3:e5:f4:b3:b5:ac:cb:b9:3e:ae:e8:0a:47:20:da:
38:55:3b:a0:bd:ba:49:23:5e:89:74:f0:2b:07:91:11:19:f5:
77:b5:2a:e1:92:52:79:d5:8a:5d:04:33:20:66:a7:3f:58:13:
ec:9d:c2:0b:9d:15:a4:18:a8:46:af:fb:1f:4a:00:7d:14:ad:
60:fa:25:5e:d6:d0:13:b3:89:84:50:1a:13:50:fc:86:87:78:
b5:48:5d:12:67:49:35:73:af:75:98:66:df:a4:b5:6c:eb:41:
33:4d:ba:a7:56:b2:cf:23:ff:a9:78:73:fa:61:84:a4:30:b7:
53:58:ab:ab:39:b2:87:04:d3:60:da:fe:bf:4a:3b:e0:58:79:
ed:8c:66:1e:7f:75:60:07:be:1d:4c:c9:6d:a4:61:fe:c1:69:
53:9a:bd:99:f8:dc:00:a4:4a:46:d9:3d:20:c3:b1:e7:7a:a5:
be:c9:ce:5b:96:70:09:9a:9a:5c:3d:43:94:c3:82:7f:21:3d:
bd:8a:ee:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:59:10 2026 by rpki-client