
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: GSeWtobLUhK+9nd+DSU8aauQQGhhRSUlX8jbFXmio44=
Subject key identifier: D9:4D:23:0A:F8:7F:42:69:76:CD:4B:D8:51:D1:B5:C3:CC:5B:C9:FC
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019EBF5AD47C1127260C58CA9A4AD75203DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 0445
Signing time: Sat 13 Jun 2026 05:01:01 +0000
Manifest this update: Sat 13 Jun 2026 05:01:01 +0000
Manifest next update: Sun 14 Jun 2026 05:01:01 +0000
Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: ofrquiaJZCjbKj0tCepikSWBi2u1rL788fEaNmMOKkc=)
2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:d4:7c:11:27:26:0c:58:ca:9a:4a:d7:52:03:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Jun 13 05:01:01 2026 GMT
Not After : Jun 14 05:01:01 2026 GMT
Subject: CN=d94d230af87f426976cd4bd851d1b5c3cc5bc9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:ab:5a:82:9f:0a:b6:a8:fe:cb:20:af:8f:
0a:b7:9a:dd:2f:56:91:79:02:29:13:e3:33:a7:95:
71:ea:2c:07:26:1b:af:d1:15:ac:0a:33:4e:00:20:
db:8d:37:e0:14:1a:51:2c:a1:f0:dd:e6:08:95:e6:
97:fc:96:96:76:a5:6d:3e:1a:76:6e:ba:4a:7a:34:
32:d8:e6:8c:0f:68:aa:80:95:f4:f6:57:c2:24:26:
5c:df:f2:03:d4:be:4b:29:6f:86:38:fe:7d:0b:1d:
5d:50:92:1c:65:ba:06:f9:10:9c:b4:d4:02:37:73:
b1:8a:a5:64:74:f2:36:1c:fe:59:5b:02:d6:a8:09:
b1:63:17:cd:21:84:80:0c:b4:05:7c:02:5e:1d:cd:
c3:d8:51:da:c4:5f:bf:b7:f5:ab:2b:78:25:bb:2c:
79:9d:d9:2e:ab:c4:89:ca:64:b9:fa:9b:d0:d2:8d:
6a:73:0f:77:31:53:37:b7:4d:07:95:0b:c3:89:52:
e5:6c:84:55:32:47:2e:e8:24:d8:f7:ff:46:db:00:
27:39:04:ab:f0:41:65:c1:c3:4d:92:3c:07:f9:81:
a9:68:15:bf:98:1a:39:00:a2:30:26:40:a5:76:70:
89:87:b5:8c:41:95:95:56:88:74:09:88:0c:c2:5c:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4D:23:0A:F8:7F:42:69:76:CD:4B:D8:51:D1:B5:C3:CC:5B:C9:FC
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b0:d2:07:46:3b:d6:6d:21:8f:3e:29:18:6e:af:dc:ca:31:
4b:46:cc:b8:7b:9e:9d:7d:34:25:5f:48:de:a0:11:57:76:3f:
90:33:ed:a4:c0:2d:59:a9:87:2b:ec:84:16:44:f7:dd:60:c7:
d0:ee:fc:18:53:29:f1:aa:ac:d2:bc:88:04:12:a7:f7:61:06:
44:01:02:ab:5e:2a:09:aa:a5:65:68:15:7d:6d:35:fb:ec:05:
d6:83:47:01:07:e9:74:46:e3:52:f6:5a:a5:06:18:cf:02:ad:
d4:a2:ac:f5:e6:12:b4:69:86:f1:a6:2d:31:6b:44:d6:f1:a7:
e6:d1:cc:33:df:50:05:5d:cf:81:df:bc:31:2e:89:2d:30:29:
0f:84:87:4f:79:1f:cc:1b:cc:3f:eb:10:4a:ab:a8:21:e9:d8:
5b:c3:6b:91:fa:07:99:9a:b4:bc:d0:5a:cb:f5:fd:83:73:2c:
69:66:b4:89:00:74:cb:2b:c3:6c:53:27:f3:48:2b:10:de:64:
4e:89:67:38:30:07:8b:d2:e1:13:1d:38:ed:80:e1:73:6a:c6:
d0:5d:04:96:7b:74:c0:18:27:66:e1:53:86:6f:36:64:6c:6e:
bd:47:72:db:a2:31:df:b2:b1:53:07:63:b3:94:4f:f4:a8:17:
ef:9f:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:36 2026 by rpki-client