Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: C2czr2PlH969jdTw2+JAJUzYV8P6y2xi0VNMBl3SovA=
Subject key identifier: 5F:AF:C3:14:1F:DD:B5:65:4D:0F:75:1E:C9:DA:54:04:3A:98:21:40
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019CB0243E32D6FC99353154C414F65E57D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 0334
Signing time: Mon 02 Mar 2026 20:01:30 +0000
Manifest this update: Mon 02 Mar 2026 20:01:30 +0000
Manifest next update: Tue 03 Mar 2026 20:01:30 +0000
Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: IvBAwJAnY0I3I8AY5V3Y3NtvtqJJxTOHqPoXeWaYgCA=)
2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:3e:32:d6:fc:99:35:31:54:c4:14:f6:5e:57:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Mar 2 20:01:30 2026 GMT
Not After : Mar 3 20:01:30 2026 GMT
Subject: CN=5fafc3141fddb5654d0f751ec9da54043a982140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:25:21:3d:4e:91:2c:fd:92:77:19:93:43:
7d:c1:d0:c7:9b:fc:ed:59:43:86:91:a0:03:a3:a5:
79:79:67:b1:10:7b:8d:59:7e:d1:9b:80:62:d2:2d:
75:91:d1:0d:47:aa:93:d6:59:3f:7f:ad:5b:d1:8f:
d6:73:7a:a3:d6:ef:0d:5d:1c:80:b9:c6:7f:8e:2a:
19:63:f3:6f:f1:20:6c:6d:24:70:b3:28:18:f1:d2:
86:80:f8:6e:36:92:c1:e6:81:ae:7e:02:4d:be:b4:
b6:db:e8:13:a6:10:0c:13:3b:a7:ed:63:e3:65:c1:
e4:30:09:f0:63:21:57:0f:a8:95:33:08:9b:25:50:
41:22:d0:ed:02:0d:58:33:ab:ca:25:8b:a8:d4:10:
60:a3:d0:ec:49:29:e6:db:ef:4a:91:ff:6e:d5:ec:
44:33:9f:28:7d:27:cc:ad:f2:89:a6:ed:a5:76:89:
7f:21:34:49:2b:18:6c:cf:48:8d:33:05:5f:63:7a:
6c:3c:51:25:9f:2f:cd:6b:1a:88:c1:3e:24:43:a0:
f7:1d:f4:71:ef:59:67:ed:ce:79:f3:f5:3f:4d:b5:
4c:4a:dc:bf:32:11:dd:c0:60:64:05:69:11:8f:fd:
62:6f:c6:67:ee:15:f5:68:f3:79:8d:ce:7b:1b:84:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:C3:14:1F:DD:B5:65:4D:0F:75:1E:C9:DA:54:04:3A:98:21:40
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:af:d2:a3:77:64:c7:37:0c:63:62:2c:c1:12:75:bc:c2:3e:
8c:ff:e6:3f:d6:75:08:8e:2b:ed:73:35:38:67:ec:d2:e2:b9:
fa:70:9b:51:80:fa:9f:28:40:8e:9a:e1:ea:de:1a:41:dd:d3:
26:31:41:52:7c:41:fe:75:72:70:84:14:e4:bd:b6:24:a9:0e:
ce:0c:d1:eb:37:57:3f:8e:c5:be:ef:43:32:91:7c:4d:a1:88:
f9:2e:6f:bb:04:2f:68:2f:a7:ef:bd:e2:ac:dc:45:ef:c1:e9:
ee:45:8f:69:d9:9a:cd:51:76:14:2d:2a:79:72:db:45:3c:ec:
d1:e4:ee:31:2e:bb:63:32:d4:bc:f4:29:54:53:ac:b9:2f:5d:
c9:88:ab:7e:be:b2:b4:12:96:15:b0:63:be:19:18:7a:f2:4e:
89:47:ed:e5:38:61:79:ea:36:72:76:2b:fa:e8:d0:86:1f:70:
e8:13:c0:24:c9:ec:f0:d3:dc:de:43:ee:be:fe:fa:59:86:b0:
c5:a7:a1:e9:d0:85:d0:7e:97:12:b2:99:a7:39:60:d3:f8:41:
c6:aa:75:65:ae:82:14:80:91:c8:61:32:c3:03:70:22:15:16:
01:ae:cf:17:1c:d1:86:26:d2:7d:cd:fc:0c:55:64:d7:62:51:
1e:64:e9:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywJD4y1vyZNTFUxBT2XlfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2
NmM3YTUwHhcNMjYwMzAyMjAwMTMwWhcNMjYwMzAzMjAwMTMwWjAzMTEwLwYDVQQD
Eyg1ZmFmYzMxNDFmZGRiNTY1NGQwZjc1MWVjOWRhNTQwNDNhOTgyMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynYlIT1OkSz9kncZk0N9wdDHm/zt
WUOGkaADo6V5eWexEHuNWX7Rm4Bi0i11kdENR6qT1lk/f61b0Y/Wc3qj1u8NXRyA
ucZ/jioZY/Nv8SBsbSRwsygY8dKGgPhuNpLB5oGufgJNvrS22+gTphAMEzun7WPj
ZcHkMAnwYyFXD6iVMwibJVBBItDtAg1YM6vKJYuo1BBgo9DsSSnm2+9Kkf9u1exE
M58ofSfMrfKJpu2ldol/ITRJKxhsz0iNMwVfY3psPFElny/NaxqIwT4kQ6D3HfRx
71ln7c558/U/TbVMSty/MhHdwGBkBWkRj/1ib8Zn7hX1aPN5jc57G4QrzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+vwxQf3bVlTQ91HsnaVAQ6mCFAMB8GA1UdIwQY
MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt
ZDk3YTU0Y2IzOWUxLzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx
LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK/So3dk
xzcMY2IswRJ1vMI+jP/mP9Z1CI4r7XM1OGfs0uK5+nCbUYD6nyhAjprh6t4aQd3T
JjFBUnxB/nVycIQU5L22JKkOzgzR6zdXP47Fvu9DMpF8TaGI+S5vuwQvaC+n773i
rNxF78Hp7kWPadmazVF2FC0qeXLbRTzs0eTuMS67YzLUvPQpVFOsuS9dyYirfr6y
tBKWFbBjvhkYevJOiUft5Thheeo2cnYr+ujQhh9w6BPAJMns8NPc3kPuvv76WYaw
xaeh6dCF0H6XErKZpzlg0/hBxqp1Za6CFICRyGEywwNwIhUWAa7PFxzRhibSfc38
DFVk12JRHmTpew==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:13 2026 by rpki-client