Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: yBhzZEBldu+9C9M5+vJC/9qnuXwMcMxQjjPCogOS1RY=
Subject key identifier: 65:68:C2:69:46:D2:31:6D:02:6E:AA:6C:86:B4:99:34:32:78:BE:B2
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019A530802E1754879EE31451BAD662F0449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 01FA
Signing time: Wed 05 Nov 2025 08:00:25 +0000
Manifest this update: Wed 05 Nov 2025 08:00:25 +0000
Manifest next update: Thu 06 Nov 2025 08:00:25 +0000
Files and hashes: 1: EJij4b5tXcMHreEwXaDPFHiUPSY.roa (hash: 1zvQlqg1XnwbTr3tDDEsxM/UclGY5wHW7JBqKQIRxus=)
2: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: YTEw8TU8yx/vf4gB2fMFgW3kHTOHizh7Bt3dV20Njdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:02:e1:75:48:79:ee:31:45:1b:ad:66:2f:04:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Nov 5 08:00:25 2025 GMT
Not After : Nov 6 08:00:25 2025 GMT
Subject: CN=6568c26946d2316d026eaa6c86b499343278beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:b2:aa:53:6e:a8:40:ac:12:2d:c8:b5:78:
f3:08:da:94:f8:44:bd:1f:33:e3:65:96:2b:47:a6:
76:56:8f:62:01:4b:a1:b7:42:f9:ca:76:3a:4a:41:
44:a8:74:f2:73:09:1e:96:30:a1:c1:5b:9d:4c:b7:
95:9c:1a:f5:43:ee:e2:fa:c3:3f:64:bc:07:ca:bc:
1d:b9:bd:41:1f:ba:21:ac:a0:5a:9c:52:21:53:8c:
60:38:62:03:92:59:03:b1:86:ee:ef:22:1f:06:74:
51:a0:75:2f:3e:89:d2:a6:c9:db:4b:19:e1:ef:d9:
e8:60:41:68:9e:dc:0e:56:55:36:bc:9e:fd:22:41:
21:0e:86:70:68:c7:b6:8e:d2:5d:d8:ac:89:a3:ef:
e9:51:04:e6:55:5b:be:e4:21:74:73:2a:e4:92:5f:
95:17:77:3f:8f:00:91:72:cb:f5:a1:db:2f:68:87:
11:f9:5a:18:bb:0b:bc:0c:86:8f:e0:e9:44:16:7c:
08:3b:e3:38:49:5d:da:5f:63:d9:3a:bd:65:56:c8:
eb:bc:5d:bd:f6:43:16:f7:b9:ce:69:ae:58:64:88:
be:2b:eb:e5:68:73:98:c0:11:b0:6a:80:b5:78:53:
7b:31:2a:1a:7d:ba:fc:f9:3d:24:a0:58:49:40:26:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:C2:69:46:D2:31:6D:02:6E:AA:6C:86:B4:99:34:32:78:BE:B2
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ac:3e:d3:8d:6c:5b:f3:e7:85:c9:40:35:2e:fe:84:fb:ed:
96:60:11:1f:bd:fa:0a:d5:2a:c1:dd:60:f8:77:f1:fe:4c:40:
17:0d:57:83:05:f5:79:23:ef:64:11:f1:6c:d4:5c:66:57:a1:
33:f7:57:a2:6b:d7:0f:f9:6b:f0:1e:29:df:2e:ec:cf:6b:07:
95:38:1c:e0:2e:ec:06:26:50:64:fa:56:0f:61:54:ce:f1:f3:
e7:ed:91:24:0e:f6:f0:d4:29:10:ba:c5:ee:1d:b7:e5:36:25:
af:1f:d8:4b:4a:96:10:8e:90:3b:58:57:f0:c1:d1:85:66:ad:
3d:0a:4c:97:54:06:b4:ec:a8:d0:ed:f4:27:fc:ce:86:89:7a:
91:f9:2c:c8:7c:08:d9:44:9f:cc:d4:2b:d0:65:c3:e7:40:a5:
24:a2:ec:43:89:3d:77:2f:e3:9b:ca:b6:e0:87:93:2f:4b:a4:
6c:77:f9:9c:96:d8:77:79:24:4f:fe:f7:b2:56:a5:f2:de:7f:
9f:37:ad:0e:ac:12:83:a8:9f:f0:cd:5a:2a:a1:d6:1e:25:56:
b6:d2:25:c4:0f:a0:a0:ee:42:bb:2e:bb:ac:0d:eb:4d:cb:3f:
8a:fb:23:41:67:61:28:c9:ba:05:4b:d0:bc:ab:39:e3:3b:27:
47:1f:54:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCALhdUh57jFFG61mLwRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2
NmM3YTUwHhcNMjUxMTA1MDgwMDI1WhcNMjUxMTA2MDgwMDI1WjAzMTEwLwYDVQQD
Eyg2NTY4YzI2OTQ2ZDIzMTZkMDI2ZWFhNmM4NmI0OTkzNDMyNzhiZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z+yqlNuqECsEi3ItXjzCNqU+ES9
HzPjZZYrR6Z2Vo9iAUuht0L5ynY6SkFEqHTycwkeljChwVudTLeVnBr1Q+7i+sM/
ZLwHyrwdub1BH7ohrKBanFIhU4xgOGIDklkDsYbu7yIfBnRRoHUvPonSpsnbSxnh
79noYEFontwOVlU2vJ79IkEhDoZwaMe2jtJd2KyJo+/pUQTmVVu+5CF0cyrkkl+V
F3c/jwCRcsv1odsvaIcR+VoYuwu8DIaP4OlEFnwIO+M4SV3aX2PZOr1lVsjrvF29
9kMW97nOaa5YZIi+K+vlaHOYwBGwaoC1eFN7MSoafbr8+T0koFhJQCYSoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVowmlG0jFtAm6qbIa0mTQyeL6yMB8GA1UdIwQY
MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt
ZDk3YTU0Y2IzOWUxLzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx
LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6w+041s
W/PnhclANS7+hPvtlmARH736CtUqwd1g+Hfx/kxAFw1XgwX1eSPvZBHxbNRcZleh
M/dXomvXD/lr8B4p3y7sz2sHlTgc4C7sBiZQZPpWD2FUzvHz5+2RJA728NQpELrF
7h235TYlrx/YS0qWEI6QO1hX8MHRhWatPQpMl1QGtOyo0O30J/zOhol6kfksyHwI
2USfzNQr0GXD50ClJKLsQ4k9dy/jm8q24IeTL0ukbHf5nJbYd3kkT/73slal8t5/
nzetDqwSg6if8M1aKqHWHiVWttIlxA+goO5Cuy67rA3rTcs/ivsjQWdhKMm6BUvQ
vKs54zsnRx9UeQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:13 2025 by rpki-client