Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: Uzd4MKrcgg1TU3JydnLXnRhEsgtrK/jzHwGhc/QTqFQ=
Subject key identifier: 8D:7A:89:6B:56:17:B5:13:F3:71:E7:43:7A:72:8F:A5:66:3C:2E:4C
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 019FAD89274E47C06B81C0D7AB1C9B837624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 07BF
Signing time: Wed 29 Jul 2026 11:01:14 +0000
Manifest this update: Wed 29 Jul 2026 11:01:14 +0000
Manifest next update: Thu 30 Jul 2026 11:01:14 +0000
Files and hashes: 1: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: u/v3ppzPBTjEi/gburxLYuFBvmScHPkQmXru5K0mtcY=)
2: ZS3grquCf_l1OKXIoqEGRKP0J6M.roa (hash: 2PBPag/zPM22x9IohJ6q0TulDZRbeQTFCvgCnuCjnz0=)
3: vUdfXnwcRDPW7e3X7ofFMJYqkDk.roa (hash: 4hcskGjMuomfYGEOrtlmJrd0tV2p1HAsJ5FOV+HnCFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:89:27:4e:47:c0:6b:81:c0:d7:ab:1c:9b:83:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Jul 29 11:01:14 2026 GMT
Not After : Jul 30 11:01:14 2026 GMT
Subject: CN=8d7a896b5617b513f371e7437a728fa5663c2e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:ac:fc:e3:82:33:5f:b9:b5:93:26:29:2c:
05:a1:db:f6:bc:82:52:ae:02:be:70:e2:ad:02:ea:
54:af:31:dc:e9:41:13:53:cc:6d:14:e1:6d:7e:fb:
4a:44:ec:c5:78:51:f4:d0:9c:c9:d0:59:dc:b4:51:
62:7f:86:1e:6a:91:48:02:c9:16:05:4e:4b:48:d9:
ca:e2:ff:38:cd:23:f3:f3:72:c2:3c:f3:c2:9e:5f:
f6:82:f8:03:ab:01:42:63:d8:08:c0:1d:41:d1:96:
e7:ac:1d:30:61:c5:b2:ea:be:cf:79:6e:0b:04:e1:
71:b6:74:cf:6d:47:07:47:bc:94:79:0c:b9:af:48:
71:2e:2e:3e:4f:69:d4:05:67:2d:ed:1b:87:77:b1:
1c:30:8c:1e:34:b7:87:f5:67:5c:04:06:b3:ce:34:
77:01:44:b2:bc:c6:f1:7c:5b:01:22:cd:78:30:d0:
a4:b7:22:b4:84:f5:95:2a:2f:8e:ad:bc:68:e3:34:
79:af:cf:b4:42:b2:c9:c2:ad:d2:fc:85:c2:fb:99:
79:22:f5:ea:ed:c5:76:6e:08:ea:a7:9c:80:33:19:
e8:21:88:df:4c:59:fe:51:d4:27:3c:d9:45:37:b2:
6b:f1:e7:10:81:cc:79:d9:75:9c:dd:dc:99:98:55:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7A:89:6B:56:17:B5:13:F3:71:E7:43:7A:72:8F:A5:66:3C:2E:4C
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6c:5f:df:14:9a:ff:de:d4:7d:9e:d1:30:88:38:b9:a3:61:
ac:1d:fc:ba:f3:8f:12:4a:04:0b:a2:1e:9a:ac:6d:b5:6a:f4:
63:e1:df:73:7c:08:a9:4e:65:ec:dd:6a:ad:e2:a9:05:85:6b:
47:a5:cd:ed:ad:bf:a2:8c:7f:69:cf:c0:8b:29:ff:55:b2:3c:
42:2c:a5:20:0d:d3:db:d4:dc:fd:47:57:a3:b9:a5:6c:a5:d4:
27:8c:d9:3e:cf:35:4d:d6:c2:79:01:55:2a:77:53:f5:65:56:
57:70:ae:14:f7:76:54:69:a1:41:7c:22:33:21:c7:38:9d:2d:
c1:6e:1c:ca:71:a5:08:dc:0e:96:80:8b:1a:4e:51:2e:d4:01:
7d:27:5a:a4:1e:d8:85:3e:d1:dd:bd:c0:be:7e:c3:e8:69:4c:
ae:4d:5d:5e:28:e8:6e:b8:5f:b0:11:3c:b1:0d:d7:39:04:29:
7d:02:c4:1f:7c:59:4e:1e:c6:78:6f:9f:0e:22:0f:87:9a:70:
5a:76:c2:c8:47:00:fb:eb:49:da:69:46:76:7c:ce:f2:90:01:
7e:2c:f6:32:9c:1f:a1:4a:23:bb:8b:fa:3a:e3:c5:1e:d7:ec:
c5:96:40:c3:b7:a2:5c:67:c2:18:0e:99:af:73:39:a5:e3:4a:
4e:a2:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:54:47 2026 by rpki-client