Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: aMVo+VmHRXwElrKlyo9Lsw/DZBOSO2Sh+M3h8Scqk9Q=
Subject key identifier: CE:9D:21:87:25:96:E6:95:22:55:84:60:AB:32:AE:3A:9E:92:79:6A
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019CAE6BE707F2C710EFD5A68F4518E602A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 1158
Signing time: Mon 02 Mar 2026 12:00:32 +0000
Manifest this update: Mon 02 Mar 2026 12:00:32 +0000
Manifest next update: Tue 03 Mar 2026 12:00:32 +0000
Files and hashes: 1: Sl30k11z1TwtyMHAj_NqDrPSCvg.roa (hash: 9wZBkgJcqw68v5ewI2FJS2vHd+COBYLKeeovUBuZl+s=)
2: VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa (hash: cBePxMn2gu4hOVG4L1uDVTVupTtrFtWliRD+lUUfRvc=)
3: XvpIxax5LoOTMUOJKo6zJ6-LPpQ.roa (hash: xd4ZIb6AXuHRZkUUIhsSqoc8RpLfQOFfY2snegwSNbM=)
4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: LnBW2f1+wCaJorcJPoKaVMfzL4gnjHVEAlW6SdTV1bY=)
5: yFKQw9R6v282y6knKQwG8g4G0J8.roa (hash: KPurzw4Q3PxPA9KAGD7n/ojlC+lby4hnngPbr1GaPCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:e7:07:f2:c7:10:ef:d5:a6:8f:45:18:e6:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Mar 2 12:00:32 2026 GMT
Not After : Mar 3 12:00:32 2026 GMT
Subject: CN=ce9d21872596e69522558460ab32ae3a9e92796a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:1d:21:6e:2e:5f:35:98:06:27:45:5e:76:
71:f3:eb:83:c0:9a:3f:de:d7:ff:43:6d:07:d4:a9:
ae:62:3c:a4:6d:a4:20:2a:f1:f5:4f:98:0d:fd:16:
d1:bc:00:d7:09:25:34:46:53:e9:01:ac:2d:0d:19:
aa:55:6c:05:02:67:3a:1c:d6:5b:9f:39:09:2d:f2:
8e:77:36:41:10:ce:19:75:41:37:51:41:85:30:3c:
bc:e6:fa:c9:42:10:46:f6:f9:4b:a7:ec:43:70:4d:
ea:9c:48:78:02:e7:fc:bc:b8:98:22:54:0a:1b:ca:
42:e1:66:ba:03:25:83:7a:8f:92:95:ce:51:d1:c2:
1c:03:d9:a2:39:b7:b1:14:a8:b8:15:c3:38:5a:6c:
7a:f3:16:3b:da:18:4c:40:46:a2:ce:74:a6:57:32:
50:35:fc:60:1e:2d:91:90:00:d7:42:9f:cf:25:8c:
08:03:b2:1b:49:60:8e:2f:af:c5:18:36:21:2e:f7:
b5:c7:9a:d7:f1:78:e6:1b:a5:d1:1b:61:87:db:c9:
1a:64:80:aa:b1:61:cb:13:16:f0:36:48:81:78:85:
a5:65:f2:2b:39:e2:0c:ca:ab:8e:f5:1f:b5:d1:46:
16:2e:1f:ba:ce:f9:4c:5c:28:0d:2b:98:10:f3:36:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9D:21:87:25:96:E6:95:22:55:84:60:AB:32:AE:3A:9E:92:79:6A
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:11:b0:49:a0:38:22:99:9b:4b:f8:e2:50:90:39:5c:7f:f0:
24:76:69:98:87:e2:bc:4d:62:b7:a6:1c:d9:65:54:18:1d:6e:
30:01:7e:6c:79:76:8a:19:c0:c4:10:3b:f8:4e:af:b7:35:37:
46:bf:02:f1:39:a8:0c:31:1f:18:25:61:5b:52:91:f7:ce:89:
75:e2:9a:ac:0c:93:43:42:cd:48:96:ef:63:6b:60:56:de:18:
4a:04:17:c0:45:55:be:f1:17:8a:08:b5:5d:e2:96:29:23:24:
cc:87:3e:a1:f8:c7:c8:12:d9:cb:9e:65:ca:67:3a:5b:33:3c:
85:5a:0a:5a:24:d3:2e:94:58:41:87:91:2b:a6:3e:09:c8:2a:
27:79:a2:44:a7:2f:ff:61:04:58:ed:f7:f6:59:71:94:0f:21:
b8:ca:41:29:d2:01:8a:2a:f4:78:60:74:c2:4f:ee:51:95:ed:
41:8b:28:63:1f:3c:ff:66:e9:84:26:d7:a3:03:6d:a2:eb:0b:
1f:9c:7a:ce:2b:98:46:fb:28:eb:50:5c:9b:06:7c:a1:ea:f2:
87:53:e4:d2:63:fc:ad:c8:18:68:e7:38:14:02:b1:25:3e:b4:
52:8c:ad:6e:bd:f7:6b:e3:3a:09:53:37:4c:08:3d:79:37:c1:
ef:8d:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:06 2026 by rpki-client