Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: h/6GLDLjp8CKNBm5+V2ZgtwUTTengf9H968z3WuGO88=
Subject key identifier: A4:C6:4E:98:83:70:62:48:BA:26:0E:21:02:5A:D9:A8:B3:3A:ED:72
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019CAAC669FA8447135EAFBAFE2361C36B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0D68
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: WwcSY0iErML3quqkGXmLG+la4gggFnJ2WGTWJPFa7bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:69:fa:84:47:13:5e:af:ba:fe:23:61:c3:6b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=a4c64e9883706248ba260e21025ad9a8b33aed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:29:bf:12:72:88:bf:17:98:3b:7c:af:28:
43:3b:a2:ac:2f:d1:59:fd:ce:62:25:b5:44:f1:6b:
92:e6:e1:fc:0d:48:9a:2c:9c:3d:a5:68:54:ba:7c:
9e:c9:83:bc:45:10:cb:51:f8:1c:2d:cd:fc:af:cd:
13:d3:7f:a9:90:be:f8:d3:60:a6:55:67:6f:e8:85:
85:89:8e:f4:27:21:2e:8b:cc:21:b9:ca:17:27:04:
69:30:62:c6:0a:09:ca:15:0d:d9:fd:2b:9d:f8:26:
8e:c2:f3:11:58:bf:eb:e5:b8:5c:5c:8d:cb:c0:18:
d2:0d:1a:cd:8c:05:14:8a:c0:48:3a:12:b2:98:2f:
3c:a4:fc:0d:f3:8e:bb:f8:0c:a1:4d:a0:23:9e:23:
f9:2f:9b:5d:9d:2f:a7:27:1e:81:a1:6f:dc:6b:46:
00:60:29:84:bd:29:f1:a3:ee:be:0d:f7:f7:dd:9a:
35:20:90:fc:ad:3f:cf:d5:7e:4d:7a:42:c7:99:5f:
25:06:21:59:fd:a5:eb:6f:ab:2a:d1:6f:52:0f:1e:
64:e4:a5:a7:0e:ca:13:c8:c9:04:25:45:0c:d3:03:
c4:48:2f:dc:cf:f6:03:66:ab:8d:e9:26:63:19:ee:
9a:70:f1:10:f2:bf:9d:c2:10:f4:1e:09:45:e8:8a:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C6:4E:98:83:70:62:48:BA:26:0E:21:02:5A:D9:A8:B3:3A:ED:72
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b9:db:c3:cf:28:b8:00:c4:c2:d8:22:ae:fc:e4:8a:27:0d:
cd:d5:d9:4e:ab:22:56:95:e3:e8:46:27:37:b7:f1:61:a4:f3:
34:c4:eb:cc:fa:f8:cc:00:fc:02:ce:43:a9:b6:43:fa:e8:24:
88:0f:8f:7f:89:a5:82:b6:15:6a:46:a5:90:1b:38:59:20:1e:
d2:9e:c2:01:cd:d5:4b:6b:92:51:84:3a:81:6d:9c:09:24:a9:
70:1d:e2:fe:a6:40:58:77:48:8b:41:15:84:be:24:7d:2b:14:
ee:a2:b9:50:e0:4a:8b:3d:26:fa:65:d7:03:7e:c0:bf:64:9b:
80:6c:4d:e2:00:d6:6c:d8:06:c8:7c:fe:36:97:27:fb:f6:ef:
18:71:50:8e:63:04:ce:3a:97:3a:a4:a9:0d:bc:4d:ea:8b:d0:
d8:20:fb:3a:43:5d:21:ff:9e:d9:90:99:ad:67:80:d3:fd:0f:
48:1a:8f:6a:30:81:33:3f:22:28:8a:b3:b8:e3:da:8f:51:e3:
6a:14:71:a9:46:4e:9e:09:3c:96:5d:fc:9b:85:18:76:e9:ea:
b0:d4:ca:e8:1d:b1:a6:a1:6f:17:13:f0:84:ba:11:ca:cb:c9:
ef:bb:af:59:74:35:25:6f:53:a2:60:98:d1:b0:7e:67:b7:cb:
97:d2:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:13 2026 by rpki-client