Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier: 5Zp3AY79Ke0Bw2XLGUGFazTySHPN8wVywzMPEdyaUlE=
Subject key identifier: 96:73:4F:E1:57:86:4A:F2:9E:C2:17:1E:33:06:10:F8:9F:A1:53:6B
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 019CABD8E495DF89E69DBFB86A08092BA44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number: 1040
Signing time: Mon 02 Mar 2026 00:00:43 +0000
Manifest this update: Mon 02 Mar 2026 00:00:43 +0000
Manifest next update: Tue 03 Mar 2026 00:00:43 +0000
Files and hashes: 1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
5: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: gIGzfUAOYyQUbG6N73niifV+E0qC9QEmFOKZfI4dh+Y=)
6: ax3hJrj1jKccen4LkvygGa6u_zk.roa (hash: YPVLrZ9Q05uGWBIZMWGr1R3Ivd6hvxv84SERSuRddso=)
7: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e4:95:df:89:e6:9d:bf:b8:6a:08:09:2b:a4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Mar 2 00:00:43 2026 GMT
Not After : Mar 3 00:00:43 2026 GMT
Subject: CN=96734fe157864af29ec2171e330610f89fa1536b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:0a:a9:07:bd:0a:0f:d8:37:a0:d6:5d:5c:
de:e7:1f:4a:71:a9:88:76:f6:a1:21:a1:fe:49:13:
33:9b:af:8b:7d:a6:af:b4:66:a8:b9:85:62:aa:06:
54:f7:5a:15:99:cc:3f:f6:8d:68:55:d9:4a:8a:bd:
9e:2f:c5:2b:41:0d:0d:69:93:cf:9e:21:62:64:c6:
e8:dc:4d:04:50:3b:68:44:b2:d0:37:20:88:30:db:
e5:6f:e6:f9:b8:b8:43:eb:a2:58:f7:f3:6c:26:b5:
16:86:6f:78:8b:ca:f6:9f:05:8a:54:d3:03:36:b5:
26:6f:0b:71:f4:a5:eb:8b:ae:e5:86:f6:99:34:c9:
59:ca:e1:49:66:14:fe:11:71:db:9e:1e:c5:dc:c9:
aa:24:04:6a:c7:3a:b8:cb:c4:ed:f5:a5:04:b8:75:
4e:e6:a5:72:89:81:6c:4a:5f:fe:7b:fe:5b:d7:8e:
f5:11:26:e6:66:99:4b:21:55:37:3f:d7:7f:15:68:
93:b4:d0:2c:ea:6f:4a:5f:1c:d7:c1:48:2a:e9:67:
53:8f:cb:b7:3e:5b:8f:2e:d7:a3:1b:18:6c:8f:aa:
27:61:af:46:dc:7c:20:64:34:86:58:2a:bb:dd:54:
2b:d5:ee:09:9d:98:d5:3e:82:7a:90:f0:3f:fd:34:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:4F:E1:57:86:4A:F2:9E:C2:17:1E:33:06:10:F8:9F:A1:53:6B
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9f:3b:25:26:c4:d8:a2:7f:b4:fd:cb:2e:ed:5d:3a:39:09:
51:89:89:5a:78:fa:1c:13:a1:0c:21:c9:a8:e3:fd:72:97:f8:
5c:60:18:a5:8c:94:39:df:45:72:c8:ed:26:fa:d0:d7:22:de:
fa:69:3b:a0:52:02:9b:39:9f:65:30:70:18:e7:b6:a2:61:2c:
3c:2d:0e:08:13:07:a5:45:c6:33:63:c8:dd:ea:0e:a3:8b:04:
36:09:ed:73:ab:56:6b:ff:1e:af:39:ed:bf:0a:20:dc:10:4d:
77:24:12:39:55:aa:ab:28:9e:ff:3a:84:b6:e9:62:d1:8a:d5:
f1:1a:4e:2e:e7:6b:9b:22:6a:c1:e4:78:dd:4f:d0:f9:ec:6c:
4b:4e:64:37:ef:62:b2:f4:fb:e1:19:fa:d7:ec:61:ac:81:72:
fc:a7:65:57:71:62:e6:29:85:a9:89:a1:32:25:eb:18:cb:71:
ea:17:1e:d1:45:29:df:10:fa:39:c5:d7:46:09:b0:4b:fb:51:
b6:53:e5:10:38:8b:62:90:78:2c:73:1e:d9:93:ed:ad:5b:45:
b9:3b:50:1e:82:b1:24:9b:f7:9f:ec:b0:50:08:32:4c:b3:4e:
a3:a1:66:ee:8c:0c:1e:09:d0:cc:46:ab:80:41:88:f7:81:59:
8f:31:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:06 2026 by rpki-client