Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: wymOpCQBLrf/Ax13QxA1dFEVIKPFS8SStm/kIr6znR0=
Subject key identifier: 30:57:F2:4A:9D:D9:31:12:15:99:F8:34:26:BE:3B:26:25:12:F2:BB
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 019CAA21AF02B58DD7D846BB712BE9BB970A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 0B7E
Signing time: Sun 01 Mar 2026 16:01:00 +0000
Manifest this update: Sun 01 Mar 2026 16:01:00 +0000
Manifest next update: Mon 02 Mar 2026 16:01:00 +0000
Files and hashes: 1: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: TiWhSYs3avdQLzlOylWkZMsG/jeh4Lsb/ozZ1r0zWqk=)
2: l2v4PMgche6PmMtMOC23cD4fvMk.roa (hash: h7RmNWqQIkYYdlzGtKAOjEz+jTEWe9NjQLWfgzz+cDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:af:02:b5:8d:d7:d8:46:bb:71:2b:e9:bb:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Mar 1 16:01:00 2026 GMT
Not After : Mar 2 16:01:00 2026 GMT
Subject: CN=3057f24a9dd931121599f83426be3b262512f2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:8f:b4:3c:37:c8:87:d4:d6:b4:8d:d8:48:
dc:85:4d:9f:55:ea:50:4d:c6:b1:4b:fc:e1:fb:b2:
8c:65:af:7a:e6:76:ca:92:35:fe:33:43:90:6c:1c:
fa:60:a4:ce:98:09:a8:b1:f8:62:32:ab:b7:ce:76:
9d:da:80:03:26:4c:dd:a1:b6:ac:31:24:ad:6c:89:
bc:23:c6:36:01:da:15:4e:ae:89:67:9f:7e:b0:45:
21:d0:9a:77:19:4e:05:be:61:9b:f9:31:60:2d:c7:
56:90:2a:e3:19:d6:a9:74:05:cb:79:71:50:cb:09:
81:57:8a:7f:d1:f1:e9:57:7f:5d:25:ca:81:87:f7:
da:16:8f:47:e2:3e:3b:00:7d:05:ab:99:b3:69:04:
d6:44:af:4e:f4:62:e0:3f:9c:d1:35:1e:ea:0c:95:
c5:14:83:9b:c3:d8:74:f3:56:26:68:f7:fe:0d:2b:
9d:32:59:f6:98:2a:95:c4:9d:07:52:e8:d3:ca:d0:
0c:85:73:54:a9:4b:b9:f8:db:bc:54:19:0f:3c:22:
56:cc:9d:08:4b:4e:95:8c:52:e8:49:84:39:4a:26:
91:27:63:e0:86:bd:d6:79:11:79:5f:8d:0a:50:74:
35:db:97:68:4c:4e:d9:d7:30:b1:77:9a:4a:0b:06:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:57:F2:4A:9D:D9:31:12:15:99:F8:34:26:BE:3B:26:25:12:F2:BB
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:de:5e:f7:1e:72:69:67:54:5a:e9:41:37:3a:79:90:c4:
9c:24:7b:10:ae:0f:75:9d:19:3d:c7:a8:d6:78:26:17:63:9b:
6d:4c:13:66:64:16:f3:6e:3e:7d:c1:32:0f:53:af:7b:50:d0:
e1:7c:2a:fd:26:51:9f:82:d9:da:ea:3e:f0:35:3e:26:30:09:
28:6b:4b:a4:f7:0d:e5:d9:3f:80:5a:be:0e:51:43:be:44:25:
79:88:ab:24:d1:ce:97:56:bb:0f:5a:be:d7:76:fb:c9:18:d9:
5e:d9:d5:b8:e7:5f:5b:d7:58:8c:16:db:4c:79:aa:fb:d7:5b:
2b:88:40:71:82:8a:8d:73:45:22:6a:52:64:81:eb:8f:92:40:
86:d0:bd:d8:53:84:92:6d:ad:df:13:7a:a2:17:e3:87:3d:dc:
f6:f9:7c:d7:41:66:39:c8:15:06:2d:f4:52:31:1f:91:f6:c1:
6a:d6:97:10:47:3e:a8:98:5b:5c:64:1f:8e:08:39:a5:b8:5a:
7c:a9:e7:eb:11:a3:bf:d5:40:55:9a:fb:f8:dd:82:2c:8b:b3:
2f:3a:7e:84:e7:ce:f6:d1:d7:ae:3b:b0:72:cb:dd:05:76:6e:
47:aa:21:7a:7c:d0:57:cf:01:6a:8b:6d:40:3f:7b:88:bc:e2:
07:69:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:05 2026 by rpki-client