Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: 3/271vGqQSn/Ic5cP7xvqB3yYZmv8GnE5Ur8ttN708o=
Subject key identifier: 20:F7:E3:1A:FD:D5:F5:0B:2B:8F:5E:A5:93:7A:8C:E6:DE:D8:26:93
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 01A12B444EBEBF904A4BA1A34C8D35774727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 13B2
Signing time: Sun 11 Oct 2026 14:00:59 +0000
Manifest this update: Sun 11 Oct 2026 14:00:59 +0000
Manifest next update: Mon 12 Oct 2026 14:00:59 +0000
Files and hashes: 1: 2-XnZW4TiALtvTXUhzckTDgdFEY.roa (hash: mfFDzvxLFQpBExCKEC3//zMXveoR9qw1NyzavU+Pa/M=)
2: 24_TAE1gOjHul0shNH3vlh03qlM.roa (hash: GYBsxiKKB7QAecXqc/XnTeJ6ukkFBvU/odaR6RLYNno=)
3: Sl30k11z1TwtyMHAj_NqDrPSCvg.roa (hash: 9wZBkgJcqw68v5ewI2FJS2vHd+COBYLKeeovUBuZl+s=)
4: VEYZ2_c7HIaQOoPRXdEjuoXNq4M.roa (hash: cBePxMn2gu4hOVG4L1uDVTVupTtrFtWliRD+lUUfRvc=)
5: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: uwhu/8co1q9jmN5aNfO9qMJHvS3qgsa9zJ+3UW4iK+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:4e:be:bf:90:4a:4b:a1:a3:4c:8d:35:77:47:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Oct 11 14:00:59 2026 GMT
Not After : Oct 12 14:00:59 2026 GMT
Subject: CN=20f7e31afdd5f50b2b8f5ea5937a8ce6ded82693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:fe:a7:91:e4:6d:24:74:01:ba:ce:28:55:
6e:61:c0:fc:87:e3:72:74:94:cb:28:4f:63:2f:9d:
1f:a2:cf:c8:ac:00:f9:dc:7f:d0:70:35:e0:3b:36:
18:64:15:f2:5f:16:b1:18:12:fb:cb:85:c4:d4:b0:
cb:95:9a:ef:d8:c3:21:77:f5:10:30:04:eb:3a:29:
0b:64:99:f5:e3:bd:e2:67:fb:3a:08:97:fd:fb:ea:
4c:10:1d:03:ab:ed:a9:dc:2b:5a:3e:10:91:bc:24:
d0:06:d3:13:cd:de:3f:09:bc:8e:52:3a:10:b7:f8:
6f:76:00:f2:2b:df:d3:78:cf:c7:52:df:00:36:71:
49:25:8c:2a:28:70:9b:be:55:33:7f:d5:5a:ea:9d:
a7:42:d2:2f:e3:32:d3:7a:1e:fb:1b:7a:34:c1:0c:
0c:7d:27:8b:2d:23:fc:ad:ab:6f:3a:ff:44:e2:e9:
fa:76:66:fd:95:ab:91:52:f6:d6:d1:e5:a7:5d:a3:
06:c1:23:f2:c4:ed:f2:39:0a:f0:e9:83:f8:7a:b9:
5f:6d:cf:58:6d:af:e7:29:85:ce:01:8d:f8:b3:96:
44:03:0c:d3:b3:2a:20:43:9a:ae:2e:f8:c3:6d:a1:
bc:f2:8c:59:62:ac:88:03:80:9f:24:84:59:30:e5:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:E3:1A:FD:D5:F5:0B:2B:8F:5E:A5:93:7A:8C:E6:DE:D8:26:93
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:67:be:03:d1:92:b4:4c:f0:79:f5:15:b6:3d:44:88:f8:f2:
ca:53:98:5e:23:a1:c2:12:19:ea:03:d3:97:2f:0b:12:87:3e:
46:43:ba:b3:6a:64:cf:2f:6b:7f:01:aa:0a:e8:94:ec:f7:a7:
41:ff:df:48:79:2d:2e:b8:c2:e3:6a:80:fd:98:9c:2d:04:27:
ac:c8:ad:e3:a6:36:9f:74:60:4d:3d:f9:ee:2e:a1:29:33:07:
6d:bc:ca:bd:b4:85:00:1d:67:9a:1e:7c:00:6a:54:2d:c1:91:
5c:de:26:95:be:cf:55:26:26:94:4f:91:3e:86:4e:fb:f6:45:
a5:37:c9:fc:9c:74:d2:82:3f:d4:9e:a2:84:22:e2:40:c9:54:
4a:0c:55:aa:c2:ac:67:66:30:c8:d5:ec:ff:61:1f:c1:e0:c6:
a6:e5:d4:92:7c:dd:29:13:54:0b:92:07:0a:c5:36:bb:be:35:
63:23:99:8d:6f:b1:6b:a2:66:f4:fd:d2:69:1f:7e:22:88:a2:
22:ce:ae:37:b5:e8:c9:9d:db:d3:fc:b7:70:b0:b4:f8:32:61:
0e:11:3a:c3:c8:b0:c1:73:2b:f5:d4:a2:e7:d3:58:16:d9:31:
06:36:e9:c0:d2:1b:4a:f6:93:76:85:a0:62:2d:24:09:94:fb:
05:ca:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:49:55 2026 by rpki-client