Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: 4WjQdtttwMejy2ayN9INgGMDqSeRtUQM+gHFEW0iOeA=
Subject key identifier: C1:4B:54:41:B5:8A:CA:AA:B9:1C:AF:4B:DF:55:16:73:79:04:2A:11
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 01A0CFA450D97BAE88F52D3B96809F8D098F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 0857
Signing time: Wed 23 Sep 2026 19:00:47 +0000
Manifest this update: Wed 23 Sep 2026 19:00:47 +0000
Manifest next update: Thu 24 Sep 2026 19:00:47 +0000
Files and hashes: 1: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: HjJon1DCe/TkykI/38BtXHStwwI9PxXO/JCIy8ESIUs=)
2: oBsXlgaTo3-EPPeDa4scyzOeaJE.roa (hash: hroC3QsTYG+lCo4/5W7hPkpTUCXhcAtLqDy7A6IH+oQ=)
3: vUdfXnwcRDPW7e3X7ofFMJYqkDk.roa (hash: 4hcskGjMuomfYGEOrtlmJrd0tV2p1HAsJ5FOV+HnCFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:50:d9:7b:ae:88:f5:2d:3b:96:80:9f:8d:09:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Sep 23 19:00:47 2026 GMT
Not After : Sep 24 19:00:47 2026 GMT
Subject: CN=c14b5441b58acaaab91caf4bdf55167379042a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:8b:87:98:2b:a6:7c:66:b8:07:13:11:26:
4c:7c:a3:58:ba:62:0c:62:ca:b8:67:61:dd:71:b2:
e5:47:d8:71:3d:8b:ed:fd:d7:6f:e9:a6:7d:6d:20:
79:c6:76:fe:ea:18:b7:df:f8:c8:37:a2:1d:ca:73:
75:8a:9c:dc:31:eb:f3:b8:ad:4a:d0:04:c5:64:67:
ff:22:52:14:35:21:a0:e8:ad:10:48:e7:78:09:2f:
b9:12:a6:ba:b6:29:22:17:ce:9d:85:7e:b6:62:5a:
83:c7:cf:d9:75:ff:d0:65:51:12:17:b6:75:3a:f3:
5e:ae:57:e6:a4:9a:95:a2:1d:1c:10:ec:b3:49:df:
6a:ca:95:5f:e1:a3:c0:63:6c:53:76:91:af:51:f2:
24:7b:82:91:88:84:b4:a8:8a:26:a5:63:2d:fe:83:
5e:61:a6:f3:17:a4:cb:dd:ff:93:74:fb:af:3e:4b:
19:49:16:f7:fe:0d:ef:31:a4:ed:51:1d:2e:d3:ab:
42:df:cb:1c:0f:d6:34:63:cb:56:5d:db:37:94:ee:
f5:0c:46:3e:1b:6b:61:9f:72:08:aa:cb:38:74:1c:
dd:10:07:8c:77:1b:bf:27:b0:14:62:92:4a:a2:36:
c1:4a:30:56:f7:09:bd:98:4c:37:8a:d1:72:97:a4:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4B:54:41:B5:8A:CA:AA:B9:1C:AF:4B:DF:55:16:73:79:04:2A:11
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c4:6e:1e:88:de:f9:88:6b:76:7b:cc:ba:64:58:bd:c9:aa:
81:56:2f:22:a3:3b:de:67:22:57:e9:48:60:fd:61:dd:2b:31:
9b:6e:00:28:44:60:cb:7f:87:7a:9f:c4:22:36:6d:10:04:ac:
bf:f2:b3:e5:de:6d:4a:e7:4d:a6:0f:ec:26:27:ae:2c:11:d8:
68:3d:45:dd:39:73:5b:8f:aa:56:b1:1f:d0:45:e3:6b:72:3e:
40:f0:42:1b:b4:6a:a2:c8:c9:93:82:ec:af:ff:cb:28:4d:bd:
13:9a:51:6f:fc:b4:b6:d1:58:2e:d9:03:10:9f:39:c4:5e:0e:
3a:e9:b6:68:43:ef:c9:27:57:2f:69:d2:a2:18:fe:c3:47:be:
b0:58:64:24:a5:db:bb:ae:cd:3b:7a:4b:70:11:26:4d:04:e4:
8c:01:5d:3e:74:98:3b:4a:55:ff:50:92:e4:aa:be:cc:58:74:
dc:0b:c4:1e:cc:9f:ff:d4:3d:dd:0a:52:22:d3:a7:9e:dc:ca:
13:46:b1:39:c1:28:97:3f:fa:18:0b:c0:4c:10:96:fb:e8:56:
1a:2c:a7:2c:0f:21:36:a0:61:b7:85:51:45:24:87:21:eb:e7:
3d:3b:60:1b:ce:ec:4b:b3:fd:1f:de:44:0c:4a:d1:9c:30:f5:
38:4e:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:30:55 2026 by rpki-client