Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: cj7awvvBjfR7CXxwkx9BSm0C+1UiiMOdaWU+MNMbRqQ=
Subject key identifier: AF:1A:38:C1:38:84:F5:2A:43:BB:51:FA:BC:65:43:D7:EC:B8:7C:7F
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 019CABA263CB3C213061DBC365A5422400F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 1188
Signing time: Sun 01 Mar 2026 23:01:12 +0000
Manifest this update: Sun 01 Mar 2026 23:01:12 +0000
Manifest next update: Mon 02 Mar 2026 23:01:12 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: qBTxNEcikZu0eglAEtcowo+5pjbmYYHuqeVAVPBktmY=)
2: WnrfeKHjp01grMlG1UefiIjVQJ0.roa (hash: 7Bp0dsKH9K4YXSeiewZoI6Eeafpuzu2XCcfRYrCLnF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:63:cb:3c:21:30:61:db:c3:65:a5:42:24:00:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Mar 1 23:01:12 2026 GMT
Not After : Mar 2 23:01:12 2026 GMT
Subject: CN=af1a38c13884f52a43bb51fabc6543d7ecb87c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:de:66:e5:45:d1:50:4f:93:8b:78:b4:c5:
31:79:f2:b1:10:27:2b:fd:d7:bd:e8:cb:ad:88:80:
25:64:e8:62:ad:7c:bf:83:e7:a8:0e:40:66:f7:6a:
fb:12:4d:bf:7c:61:59:21:34:69:85:7e:8e:3a:2a:
ee:ee:52:ee:af:18:95:c3:05:1b:8c:d4:cb:cd:42:
09:73:3e:f2:a2:bd:30:e8:e5:37:25:33:7e:8f:ef:
8a:30:90:68:db:dd:eb:6c:9c:f3:96:8c:bb:1a:3f:
85:03:ea:f8:f9:3e:60:31:32:44:87:3b:7a:c3:ac:
e8:a9:ef:f7:05:2f:9e:54:5d:23:a5:c8:e8:30:be:
c1:b4:25:da:55:02:b8:f1:55:bb:cf:99:ed:c3:49:
c0:4e:d5:90:65:ca:0c:ed:99:40:ef:a4:15:d1:d3:
c7:fc:f7:ab:42:73:80:92:52:86:17:72:e7:d1:31:
d4:f0:b4:a3:e8:b3:40:0d:75:6f:af:95:9f:a2:d8:
6a:41:fe:cd:bf:9e:58:f3:d1:f5:ad:c6:87:69:52:
2a:a3:71:c8:9d:d2:dd:33:03:97:ca:f3:44:c8:67:
69:12:78:42:de:1f:85:a6:9c:a3:25:6b:48:ac:43:
5a:c6:ee:85:70:16:b8:72:f4:09:c8:9c:41:d2:b6:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:38:C1:38:84:F5:2A:43:BB:51:FA:BC:65:43:D7:EC:B8:7C:7F
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8a:c3:a5:f2:fb:3c:48:7c:e5:7b:0d:fb:f8:f1:99:07:0c:
b0:f5:dd:ed:08:be:c5:20:ac:81:bf:79:5b:e4:af:b3:a9:e1:
e2:e4:80:c7:94:e5:bc:c6:df:f8:33:36:84:3c:8b:20:97:d6:
b1:42:80:8d:3a:30:7e:13:96:b0:65:5d:0e:35:91:8a:e4:df:
24:07:76:2f:ef:f7:8b:4f:32:f5:87:40:da:4c:33:e4:d6:7f:
45:14:c4:88:52:c8:00:67:ca:02:b3:95:4b:21:0e:d2:51:3b:
ac:bf:6a:12:e0:83:14:6b:1f:4a:2a:bc:47:3f:75:7e:6d:21:
79:e6:0e:11:e4:77:95:14:63:c2:86:9a:81:70:07:6e:b8:e5:
ba:31:d6:d2:8d:90:f1:e6:03:5b:71:10:10:18:95:af:a5:b5:
84:e2:bb:4d:d8:0a:67:56:5d:69:f0:11:24:57:b6:e7:7c:08:
a6:09:e5:1c:92:63:d6:b3:43:e4:fe:cd:dd:39:4f:09:c4:ef:
71:73:7e:3a:aa:b9:3c:89:f6:31:20:d5:13:6d:e2:fd:62:21:
6c:a6:ac:d9:27:83:45:b0:92:7f:df:1b:42:89:c2:e6:c2:b2:
16:25:55:c4:a7:00:1a:b0:f6:60:71:90:3f:ce:4c:df:58:78:
66:a2:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:38 2026 by rpki-client