Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: bTj1JBl7DO/DU6HCccB+y45fVozAl83QlqnE0tAwOSQ=
Subject key identifier: 84:B9:F4:09:54:58:4B:17:4F:C3:CF:F0:F4:58:5B:9C:5D:1C:62:1A
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019CAAFD1ABF093F8A5C3AA879B2A646F844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0B62
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: RtahpjdSEdJJwgY+EbBvoFG9e1zuDd8V/P4RjsKrGnM=)
4: y4hgiLoZQuqwy9Ryf6xVQSqsZr4.roa (hash: N8EgNl6vfYaF1Ts0sECLbCkME6l5AEsMF8hotYpNW4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1a:bf:09:3f:8a:5c:3a:a8:79:b2:a6:46:f8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=84b9f40954584b174fc3cff0f4585b9c5d1c621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:85:7f:dc:c7:75:be:a9:4a:cf:a9:b3:d2:
6d:43:91:a7:d3:67:c4:3c:ce:27:24:f3:6a:97:4b:
0a:7c:5a:fe:e1:fc:a8:aa:bd:e4:c8:aa:eb:04:93:
b6:1f:54:b4:b1:58:3c:f5:f8:ae:b9:e2:46:e8:bc:
f0:df:87:5c:d0:e3:e5:f4:f6:d2:c3:49:d0:08:c5:
ec:a2:39:2e:82:3e:9d:9b:ae:e4:3d:6f:8c:95:17:
f0:db:ac:e3:76:47:e2:88:06:27:ac:ee:a9:6f:48:
a4:9a:07:ea:16:8e:79:1d:b2:30:55:6d:1c:6e:cd:
44:17:91:0d:a8:c0:b7:48:e9:dd:6d:f6:69:4c:b2:
04:2f:ff:29:87:a2:fb:a3:5a:f9:74:5c:65:48:d6:
e7:50:87:a8:d7:89:14:71:74:c1:ea:13:35:95:b1:
bf:01:08:fc:94:1c:2a:f0:07:1e:14:30:1c:17:15:
f1:a1:18:0c:d6:8b:6a:3d:48:89:25:fa:44:f7:ab:
24:bd:fe:96:bd:c1:cd:00:81:ec:01:70:dc:e1:48:
2a:25:d7:5a:d4:b1:21:ef:51:18:a7:ac:a4:ac:88:
03:fa:e3:a7:c2:10:24:7d:98:ed:4f:39:9e:fc:03:
f0:42:b2:5d:31:c4:41:83:11:db:90:2a:c0:6e:31:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:F4:09:54:58:4B:17:4F:C3:CF:F0:F4:58:5B:9C:5D:1C:62:1A
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1d:d0:05:3f:d9:31:10:4b:c8:24:af:43:a6:97:88:b5:1c:
af:7d:48:dc:3d:03:f4:92:ad:7d:61:9e:c5:38:cd:44:0b:aa:
ef:3b:37:a2:ff:27:7e:c0:46:52:f4:32:46:6f:29:ac:10:c1:
2b:62:69:90:74:07:f6:30:c3:1b:bb:aa:34:01:e6:d8:dd:f9:
a0:93:93:4f:5f:be:d8:89:b4:18:ea:bf:55:2c:95:ec:3c:24:
8d:c6:9f:51:ac:47:7e:f8:f7:14:29:6f:ed:6e:ce:67:61:72:
2b:76:a2:a8:78:07:ed:d6:2a:96:9c:23:33:1f:3a:67:09:fc:
91:27:d0:fc:d8:00:99:a2:51:d7:bc:53:af:1f:9b:5f:5d:c0:
46:9a:68:96:02:4f:0f:7b:8c:ec:b7:85:89:8b:2f:5d:0f:7c:
7f:7b:cb:69:27:09:ad:ed:de:ed:44:cb:48:74:f8:41:97:8a:
c1:83:68:a4:ff:1f:90:21:0e:00:c3:1c:29:14:ef:53:e9:ed:
8a:5d:34:fd:84:ad:8a:95:04:8d:8f:ca:bd:f3:15:95:6f:f9:
d6:df:7d:2e:70:88:34:bd:ad:c7:52:dc:5a:63:51:e6:cf:7e:
3a:5d:dd:01:51:4a:d6:4f:25:d0:6e:f8:10:0b:f9:db:e5:62:
19:14:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:02 2026 by rpki-client