Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: qL8jM2Jv/yoerd6fcq5mks8+aTwsfbvGw5aKNWfb2BU=
Subject key identifier: FC:43:A2:60:2B:35:C7:D8:00:E5:1C:49:77:CB:11:FF:E1:71:78:8F
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 019D99991FFC5E1A2FB24BFD3816AC85047F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 0BFA
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: Ey0GpcRc2YK8tI+UAQOIRDYXcxNk0VhNYGCRTa+Dblo=)
2: l2v4PMgche6PmMtMOC23cD4fvMk.roa (hash: h7RmNWqQIkYYdlzGtKAOjEz+jTEWe9NjQLWfgzz+cDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1f:fc:5e:1a:2f:b2:4b:fd:38:16:ac:85:04:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=fc43a2602b35c7d800e51c4977cb11ffe171788f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:56:69:9e:db:4f:01:dd:c0:a4:97:05:1a:
df:69:27:3a:de:65:0a:c4:02:75:9d:aa:ad:35:84:
d2:7a:55:d4:cc:31:c5:f4:34:ab:08:65:b8:3b:8a:
5e:30:9f:55:be:f7:f0:b4:b8:cf:85:0c:77:8b:63:
dd:e9:e8:a4:5f:36:89:9e:7a:f2:3b:64:0d:33:7b:
2c:54:8e:5b:d5:e0:cc:8e:55:ef:fb:44:d7:0f:2a:
02:d2:03:25:05:dc:f7:88:b0:86:c0:5b:96:1b:12:
2c:c2:95:50:5f:4a:3c:c4:00:b9:92:3d:b4:6e:e3:
a1:30:27:07:70:ec:e2:e3:d4:d2:ed:9c:d4:dd:e6:
c1:81:0a:92:bb:b0:52:ef:c1:1b:62:3b:52:ca:c0:
23:b5:74:41:77:07:93:a9:f2:7d:ec:e5:42:6b:77:
07:0f:18:35:bf:81:55:72:b9:1e:eb:38:6f:df:a7:
15:8a:1c:e9:fd:48:51:95:32:b4:39:8b:79:f5:41:
dd:fc:49:29:51:c7:1e:55:af:f0:a6:0f:cb:39:27:
24:19:ff:f4:9d:8f:0b:a7:a6:44:0b:8e:b4:7a:f8:
68:48:d8:01:7d:d1:b1:d0:3f:6d:b1:cb:f9:7d:6d:
8d:6e:aa:8d:43:ab:5b:44:c2:fb:66:83:9d:33:25:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:43:A2:60:2B:35:C7:D8:00:E5:1C:49:77:CB:11:FF:E1:71:78:8F
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6c:2e:a0:80:7b:de:3b:bb:72:98:76:17:20:78:3e:59:76:
4f:0e:15:cf:c6:95:17:de:61:b0:5d:ae:75:f6:e2:00:b8:c1:
22:1c:fd:95:93:a0:a5:cd:94:07:1e:43:81:03:a6:8a:f4:f3:
c0:fc:22:b9:cb:27:3c:49:b3:2f:0f:a4:4a:21:b8:14:ef:f2:
a6:08:cd:4c:d2:8a:87:c3:00:21:3e:81:6c:16:5b:e5:20:b5:
d5:cf:ad:33:bf:1d:c0:af:31:00:00:d5:cd:be:42:a4:60:fc:
de:99:1e:da:57:e6:93:f1:2b:ad:b6:18:24:d0:16:5f:46:d3:
c2:bf:fe:ed:be:03:9b:a4:c5:a4:67:97:1b:8d:a0:1f:ea:22:
8e:9b:00:cd:ad:4b:76:84:d3:50:14:cb:93:6a:ae:e9:4f:fa:
77:76:ba:32:5b:36:10:c2:5d:b1:b1:dd:01:5d:07:31:96:35:
66:65:05:44:81:40:ea:de:d9:cb:74:d7:cf:26:31:09:2e:3c:
de:f2:54:7a:fe:f3:89:fe:bc:dc:aa:e6:40:53:f5:d9:2b:0c:
fb:7a:e7:f8:32:5b:bf:6d:d9:ca:83:cc:c8:96:9d:f1:fd:5d:
93:6d:92:ee:ce:a8:ff:1f:8e:3f:6b:7e:c5:18:8a:a8:4e:04:
23:e8:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:29 2026 by rpki-client