Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: zh/mr8gJD3hbDqJ/Ly84tB38+AQpBftsiFD07D7kA/0=
Subject key identifier: 7B:E2:11:63:A6:30:01:68:75:E6:73:41:76:1E:14:C8:86:A4:7B:CD
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019D9BF58AAB44A4224836E016B1C7081BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 11D3
Signing time: Fri 17 Apr 2026 15:00:53 +0000
Manifest this update: Fri 17 Apr 2026 15:00:53 +0000
Manifest next update: Sat 18 Apr 2026 15:00:53 +0000
Files and hashes: 1: Sl30k11z1TwtyMHAj_NqDrPSCvg.roa (hash: 9wZBkgJcqw68v5ewI2FJS2vHd+COBYLKeeovUBuZl+s=)
2: VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa (hash: cBePxMn2gu4hOVG4L1uDVTVupTtrFtWliRD+lUUfRvc=)
3: XvpIxax5LoOTMUOJKo6zJ6-LPpQ.roa (hash: xd4ZIb6AXuHRZkUUIhsSqoc8RpLfQOFfY2snegwSNbM=)
4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: tg+43T2Gh0NmuKpMxJMrpbG3aSIz497SrkJ4dsIx5hc=)
5: yFKQw9R6v282y6knKQwG8g4G0J8.roa (hash: KPurzw4Q3PxPA9KAGD7n/ojlC+lby4hnngPbr1GaPCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:8a:ab:44:a4:22:48:36:e0:16:b1:c7:08:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Apr 17 15:00:53 2026 GMT
Not After : Apr 18 15:00:53 2026 GMT
Subject: CN=7be21163a630016875e67341761e14c886a47bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:1b:98:50:f8:68:bd:f4:9f:ab:5b:44:7b:
4f:c3:f2:4d:6a:cf:6f:2b:0e:a8:9c:72:32:91:56:
4a:a5:d0:4d:8d:a1:07:97:6d:eb:f6:04:5a:62:21:
b2:0e:00:ad:55:77:29:8a:08:a7:51:54:1b:e6:90:
f4:b6:66:6c:ac:5a:f3:68:72:07:84:84:08:40:f2:
58:7d:10:49:19:00:50:a9:11:d1:f6:9b:cc:87:81:
84:0e:de:02:08:fb:77:18:4b:6f:dd:04:5a:2b:90:
10:af:68:29:fd:16:aa:97:ef:92:46:e9:8f:12:57:
88:74:4c:08:4b:0b:7e:b9:1b:87:00:86:d3:77:12:
36:33:98:78:b4:ff:a3:aa:bb:bf:53:72:26:4d:e9:
17:61:24:c5:39:57:f6:5c:34:7b:3e:cd:e9:78:00:
e6:0a:78:9b:fd:06:15:85:94:1c:76:02:25:b4:d5:
87:a2:f8:08:0b:c6:3f:e5:36:9a:14:d3:c3:96:49:
5f:dc:c9:01:0d:af:39:5f:46:39:bb:3b:64:6f:60:
7a:55:1f:7d:ad:5b:8c:7f:77:82:38:3d:49:b4:39:
78:3f:57:22:5e:6e:55:b2:0e:22:9d:e3:75:33:36:
80:28:ee:89:13:35:9b:27:6b:7c:7e:87:68:38:b1:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:11:63:A6:30:01:68:75:E6:73:41:76:1E:14:C8:86:A4:7B:CD
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f8:40:e9:b6:49:38:83:36:c1:00:86:39:f6:6b:cc:7b:fc:
7d:5d:5a:56:d2:3d:fd:e3:e5:4e:44:33:ac:b2:90:03:3b:4a:
be:a5:29:2d:9d:4b:4d:21:ad:77:06:54:3b:1f:a2:f5:03:12:
47:79:3f:f8:c7:89:bc:bb:7a:d6:d9:94:9f:4e:f1:21:c0:c6:
8f:1d:3d:8b:f8:ad:c0:14:80:2f:75:79:b9:03:82:41:9f:60:
92:e6:24:6c:ab:ea:c7:72:f7:ce:6f:6d:77:44:5c:56:6d:60:
c2:8b:33:c8:50:e6:ba:39:d3:95:11:8e:4a:79:e0:af:c3:e8:
0f:4d:90:ca:12:5b:a2:21:fc:cc:dc:58:eb:95:78:05:e2:3b:
b8:87:58:c2:19:9a:7c:53:30:ff:e8:5d:c7:d6:10:bf:f3:9d:
bb:a8:71:74:a8:14:62:4b:6c:a3:20:3e:bf:44:7d:20:c3:3e:
af:d9:ea:36:61:d0:8d:6a:e4:71:ac:3d:39:e5:41:c6:80:f9:
58:b7:c5:96:bb:75:ff:d4:1c:fa:3b:a0:ae:6b:e6:6c:66:23:
dc:d1:d1:7b:9c:8d:e5:11:42:8c:9a:1c:55:36:a6:a7:8d:09:
ae:c6:c7:f0:f5:54:a2:12:28:1b:da:85:26:57:ba:34:2e:37:
c0:2f:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:27 2026 by rpki-client