Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: kYFKZU4oX89+9STBbEO9GAdEFFN73vguxSw7DMTvkA4=
Subject key identifier: 0D:FC:17:43:27:B2:CC:66:E6:83:88:E2:46:D9:01:43:32:C5:80:CA
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 01A0C632CAF67A5395DDB533EBCFC474D583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0D83
Signing time: Mon 21 Sep 2026 23:00:12 +0000
Manifest this update: Mon 21 Sep 2026 23:00:12 +0000
Manifest next update: Tue 22 Sep 2026 23:00:12 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: g/chkoUXO4+uRg9HIeVeIiOsPTpi5S8ZflzIN1/Wh9U=)
4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:ca:f6:7a:53:95:dd:b5:33:eb:cf:c4:74:d5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Sep 21 23:00:12 2026 GMT
Not After : Sep 22 23:00:12 2026 GMT
Subject: CN=0dfc174327b2cc66e68388e246d9014332c580ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:97:4b:17:d0:1b:3b:c0:b1:ae:27:d9:b8:
e3:2f:d9:4e:92:10:e9:29:4d:cb:ca:96:06:9f:c1:
52:7d:9b:3c:07:09:3a:e4:e5:a4:84:1b:07:7f:21:
27:1c:38:80:d5:53:d2:e0:8d:09:14:bf:76:7b:aa:
a6:e7:b2:42:5b:6e:05:72:2d:19:ed:93:e1:ae:4a:
45:07:1c:68:84:c9:66:8a:62:12:dc:fd:f9:d5:81:
ab:ba:98:cc:78:45:b9:8e:49:51:cd:08:ab:64:26:
3f:54:68:27:ec:ff:55:d3:15:20:55:2b:02:53:f4:
2a:c9:25:12:8b:81:b1:50:0b:1f:ac:b9:06:76:eb:
eb:97:4d:38:48:4c:e6:3e:93:af:ff:81:27:c7:4f:
d1:bb:57:c2:25:f4:67:fc:96:ac:14:96:72:b0:47:
85:d4:05:d3:06:dc:b4:a8:41:a1:4c:eb:a6:d8:73:
63:a3:c6:4f:66:bb:5c:57:83:bd:6e:4a:68:40:10:
4b:12:25:28:04:8c:05:9f:a0:ef:6c:1c:d4:af:c0:
c5:86:e9:a3:61:f9:f7:d4:90:22:38:4e:93:7b:08:
49:11:f4:3e:13:4c:f0:52:8e:36:2a:49:d7:13:78:
af:44:24:8e:92:70:4c:73:2b:01:e7:fb:ec:aa:34:
38:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:17:43:27:B2:CC:66:E6:83:88:E2:46:D9:01:43:32:C5:80:CA
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b6:72:71:14:32:71:4c:55:f9:47:bd:ae:fe:f1:66:4d:38:
f7:90:f6:d9:3f:20:77:5d:4e:22:ee:7e:f2:a9:16:89:5c:25:
9e:60:42:c2:c0:94:cb:9e:a6:2b:70:68:33:2b:94:ab:fa:f5:
42:28:9c:0a:e1:61:bd:82:b6:3a:29:3e:61:60:6c:d6:1f:29:
89:28:da:e2:51:1c:1d:79:78:2a:0a:72:ba:32:14:27:e2:e5:
83:17:a2:7a:ad:b6:23:e9:f6:dc:f2:76:b5:74:f8:0e:bf:b0:
29:3b:b7:b7:bd:42:da:c1:bb:c5:c4:fc:a0:ed:bb:5e:51:64:
97:4a:66:58:94:94:83:48:e6:21:18:e3:89:29:42:d3:51:fd:
df:12:89:33:ee:23:a2:6a:10:db:17:ad:dc:36:f4:f6:09:79:
2b:06:1a:95:fc:9c:bb:bf:cc:cd:10:b9:a4:f5:fb:ef:4e:fc:
01:d1:ad:d7:f9:91:69:1e:de:ac:31:1f:7c:09:24:54:6b:3c:
10:c8:fc:89:78:eb:e4:c2:6b:f0:f8:f7:6d:49:e6:cb:55:28:
13:f0:60:a9:98:be:ca:fb:48:ec:7f:cb:eb:1f:14:4b:d9:b1:
eb:eb:d1:d5:d3:2f:8f:25:56:0e:68:ab:9d:48:6f:81:40:33:
85:9a:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:28:03 2026 by rpki-client