Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: WHveKgzng4WAoUsxzp1pN1223kRKHJAsKyMAjIgrsLE=
Subject key identifier: 54:29:AB:8E:0C:AE:AF:9B:DB:0B:23:D1:C8:CA:96:3C:EA:02:41:78
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019D9BBE6B5BBA0099E9C8433491957AF681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 03AE
Signing time: Fri 17 Apr 2026 14:00:40 +0000
Manifest this update: Fri 17 Apr 2026 14:00:40 +0000
Manifest next update: Sat 18 Apr 2026 14:00:40 +0000
Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: oJJRkc3bjr1JawNV2gqhSxMbjtLOlnpJfcB15qDnALo=)
2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:6b:5b:ba:00:99:e9:c8:43:34:91:95:7a:f6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Apr 17 14:00:40 2026 GMT
Not After : Apr 18 14:00:40 2026 GMT
Subject: CN=5429ab8e0caeaf9bdb0b23d1c8ca963cea024178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:b5:9b:4b:1d:27:f5:d7:77:44:4f:08:d2:
39:6e:26:ca:3b:17:ad:00:7d:fe:3f:d6:79:ed:87:
98:ea:bf:2b:22:67:74:3c:2f:e8:13:25:83:c7:33:
be:f0:ca:e0:7c:90:9d:eb:98:19:f2:ca:83:ec:c0:
d7:72:c9:35:cb:17:d3:48:ea:be:15:2b:51:1d:2a:
bc:f9:26:6e:c0:83:04:78:10:e8:7a:a4:ee:2d:ae:
bb:e3:90:ae:f6:ba:35:f3:40:eb:42:92:2e:10:30:
d6:6e:0d:65:46:89:79:fd:3a:0c:51:b7:87:bd:29:
20:36:08:f9:2e:c3:8f:d7:0f:b0:26:37:70:9a:47:
4c:6b:9e:4e:9b:a2:73:b9:ce:1c:f1:a6:20:4c:42:
14:7b:1b:5a:26:c7:8e:c7:99:4c:a6:cf:1c:51:75:
75:b7:6e:87:37:cf:ad:60:f7:b4:ca:6e:30:8c:b8:
42:09:06:68:8c:ec:12:4f:6f:db:34:73:e5:af:ad:
68:51:59:09:dd:7f:81:a6:40:f1:55:6b:8c:9d:d6:
66:5a:16:3e:48:95:0a:90:5c:3e:fd:ba:2f:ad:b3:
5d:8d:e6:16:70:00:86:a3:bd:d3:1a:dc:56:36:6f:
f2:63:c0:79:ed:b9:10:c1:a4:de:b6:d5:03:f2:8e:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:29:AB:8E:0C:AE:AF:9B:DB:0B:23:D1:C8:CA:96:3C:EA:02:41:78
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e4:73:b3:15:61:b5:45:da:a8:d7:28:a0:42:2d:dc:d6:1b:
d5:f3:7f:b9:b3:41:b3:a1:0c:10:1f:f1:38:b8:41:15:39:fd:
63:92:82:fc:fc:82:3b:3e:88:7d:bf:6b:6d:66:1b:eb:33:4f:
8a:af:24:ad:8b:52:a6:5e:b0:6b:b3:9c:80:b3:46:f8:4a:3f:
db:4d:7e:6d:8b:f1:98:e0:5e:f1:e0:85:ad:48:da:79:8a:1c:
c3:19:4d:4f:f6:46:9a:a7:cd:bd:52:1f:46:dd:d9:2c:7b:69:
d9:cb:5c:d7:7c:31:ea:25:36:9f:ae:37:b7:7f:3c:87:e2:7f:
a5:1c:1c:45:b0:0b:f2:9c:49:30:96:22:e7:44:5e:85:39:92:
42:59:45:53:b4:a5:12:5c:4e:27:2d:49:d0:34:16:6d:c8:a4:
60:70:57:ac:8d:14:d8:44:7f:f3:bb:59:4f:f8:0f:42:f2:ed:
ae:e0:7f:3b:5f:3b:cd:8b:0e:30:f4:97:e2:01:90:db:16:c5:
5e:bc:fc:c6:54:fc:09:e2:26:67:ee:64:e2:47:2c:52:22:ff:
24:f8:2d:67:3b:20:7c:c4:c1:c5:ac:60:d2:c1:3e:97:5b:6d:
ce:e7:1d:86:c9:cc:1a:16:84:bf:ac:1c:c8:d5:55:26:f9:42:
8f:48:3e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:27 2026 by rpki-client