Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier: kYOtrPvAG/t0pEqfp3TfIvqvha+RCUz8tao+44jCfKE=
Subject key identifier: B6:00:01:B5:C7:89:B7:F4:84:F8:1A:2E:66:06:98:36:73:6D:B0:2F
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial: 019D99D05C05D4DDD3BAF79F1A606D3F66FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number: 13C5
Signing time: Fri 17 Apr 2026 05:01:02 +0000
Manifest this update: Fri 17 Apr 2026 05:01:02 +0000
Manifest next update: Sat 18 Apr 2026 05:01:02 +0000
Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: UMrZDEVyoOhiXIBRN5osugFHqk1031Iagb+QjwZIaPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5c:05:d4:dd:d3:ba:f7:9f:1a:60:6d:3f:66:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Validity
Not Before: Apr 17 05:01:02 2026 GMT
Not After : Apr 18 05:01:02 2026 GMT
Subject: CN=b60001b5c789b7f484f81a2e66069836736db02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:bc:84:43:0b:7c:f6:8f:4a:bf:6f:2b:b7:
68:05:53:6e:79:54:b5:46:7e:60:8b:cd:43:78:f5:
53:5d:95:2e:65:a7:9b:e2:c9:63:fb:34:a4:8f:d9:
e1:93:1d:aa:03:9f:1c:7f:8a:55:43:f5:a3:94:16:
a1:56:03:81:17:3b:2f:9a:75:60:99:4e:73:5a:8f:
31:90:1e:ec:30:94:9f:7c:38:49:a5:2b:27:0b:5e:
1c:75:82:46:54:6b:f5:c9:8c:bc:cc:a5:70:3e:75:
00:a0:1b:b3:49:26:4c:b2:22:79:28:e9:7e:cf:de:
06:88:b3:f8:4a:e2:e9:0b:28:8d:44:56:89:86:59:
7f:c6:27:42:81:fd:6a:15:d8:cf:a5:06:e1:6b:f3:
42:65:b7:46:f4:7c:be:da:93:e2:45:6b:7f:99:3e:
34:b0:19:a3:5d:f1:6f:07:94:ab:15:8b:1d:b0:75:
65:1f:9c:6c:61:48:29:56:ae:87:b4:04:06:96:f4:
20:57:5f:e6:d3:c0:8b:f9:43:11:d8:a6:8e:52:7e:
35:75:27:b3:dc:64:96:4e:89:d2:9e:23:28:e7:ca:
b8:e7:02:40:d7:7b:de:b4:7d:46:4f:10:e3:bb:d9:
24:e7:75:95:9b:ae:1b:ff:3e:48:31:9a:e9:20:e8:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:01:B5:C7:89:B7:F4:84:F8:1A:2E:66:06:98:36:73:6D:B0:2F
X509v3 Authority Key Identifier:
keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3f:6e:9e:c2:cb:7f:1f:51:e2:67:02:c0:d3:9c:a7:60:4b:
fb:fb:ab:67:cd:d2:97:6a:89:36:81:1b:ef:02:0d:e1:80:35:
8b:73:af:05:85:fc:50:f0:0f:bf:e0:59:0f:80:d8:36:8d:0a:
de:90:7d:b4:50:c9:6e:78:9b:89:ba:0a:3f:10:18:11:1e:f3:
7d:6f:28:f2:e7:01:2f:d5:46:bd:27:a1:f0:db:e9:a5:4f:18:
b5:1d:45:0d:53:59:94:4b:75:a7:e4:67:66:54:36:93:cf:cd:
6c:14:80:d7:05:a4:54:71:35:07:1d:21:c2:61:3f:fc:45:b6:
3a:d4:2d:77:83:a6:5c:84:81:6b:f4:45:87:13:62:90:2e:73:
db:de:60:2b:de:30:35:f7:8d:b8:be:88:65:e3:1f:01:0b:e6:
68:95:eb:13:66:b9:a7:78:4b:4f:a2:84:f3:de:a4:e2:42:4f:
0b:51:7d:26:6f:7c:55:b2:81:62:2a:d8:7d:0b:cb:92:b7:4e:
bc:a1:cc:23:3d:99:72:f4:b4:25:43:94:52:53:ad:cd:53:37:
a6:bf:28:a9:9c:65:f9:a5:62:37:0a:c0:c3:70:90:09:59:c5:
11:ce:f1:13:bb:d9:83:d6:2d:5f:25:fd:aa:42:26:e1:85:c4:
b1:ad:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:59 2026 by rpki-client