Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: Og1CeDcKUaY/vFICb8ALu0saZ6LzdCajk9pYS2jKa3Y=
Subject key identifier: 4F:E1:E7:07:07:E6:38:C2:DC:66:60:0A:13:30:A0:D7:79:1A:FF:58
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 019FA82BAD94798E34741595C4AAD97ED08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 1203
Signing time: Tue 28 Jul 2026 10:01:02 +0000
Manifest this update: Tue 28 Jul 2026 10:01:02 +0000
Manifest next update: Wed 29 Jul 2026 10:01:02 +0000
Files and hashes: 1: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: i13ErqB3EMJjQe+eKoXCvCOMRUeKfR2KgwIKW+UIVhs=)
3: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
4: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:ad:94:79:8e:34:74:15:95:c4:aa:d9:7e:d0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jul 28 10:01:02 2026 GMT
Not After : Jul 29 10:01:02 2026 GMT
Subject: CN=4fe1e70707e638c2dc66600a1330a0d7791aff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7a:16:12:8b:57:31:8d:fc:62:14:d0:43:9f:
4f:bd:48:95:29:d9:fb:dd:04:3f:ba:60:4d:86:b2:
db:eb:42:18:05:40:11:1e:d6:7d:ad:48:60:85:e9:
23:13:80:9d:01:d0:6b:5e:87:e7:60:19:a6:56:94:
05:e3:5f:4c:ca:d4:8a:79:af:f8:b6:bb:1b:21:38:
04:8e:22:12:74:e2:42:8f:70:6e:f1:ff:35:66:4d:
80:e0:38:ac:72:be:f7:f2:84:e6:2c:bd:ec:1d:52:
4b:24:e4:85:2b:55:0d:71:0f:fd:84:6d:a4:ca:8e:
f8:93:88:a9:12:84:4a:13:de:00:c9:88:4f:28:2b:
36:6d:bb:aa:43:a4:21:2b:83:7b:9f:dc:85:f3:13:
86:20:73:df:a3:91:f7:13:f7:98:a8:8c:7d:8c:7f:
bb:26:fe:ff:58:17:03:b2:9e:6f:86:64:f4:03:c8:
02:d3:e6:a2:71:53:90:60:37:92:2d:38:8e:a6:15:
fa:50:ad:7a:e7:6b:6d:0c:50:9d:b1:0a:9a:f9:03:
18:01:de:e8:3c:90:10:b7:1c:9f:c8:bd:e4:85:81:
7c:ae:72:cc:9c:0b:80:0e:67:20:03:fa:8a:bb:35:
20:64:7a:d8:c6:71:e9:fc:ab:d3:d5:50:5b:d0:cf:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:E7:07:07:E6:38:C2:DC:66:60:0A:13:30:A0:D7:79:1A:FF:58
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dc:27:9a:c5:5e:b2:42:e7:08:3a:fb:93:0b:09:8a:62:82:
6f:9b:49:be:f7:4a:48:53:47:af:4b:96:20:21:e5:71:a8:75:
2a:77:f5:c3:36:68:61:36:e5:a8:49:46:bd:4c:c4:5b:b7:3a:
9c:47:ba:e8:bf:c2:af:59:de:91:16:e7:1c:de:ec:9c:f7:13:
a6:d2:ae:da:20:a6:04:d5:f7:8f:76:00:2f:e4:8a:34:54:7b:
73:fc:87:66:06:f9:4c:8b:34:ac:98:92:35:d1:79:f1:d6:a3:
8d:74:05:74:54:97:1d:7d:64:a4:fd:d8:b1:96:58:2b:e9:be:
2b:94:13:3e:02:7e:d3:dc:be:f7:a7:ec:dc:8f:36:7b:bc:87:
94:1a:38:c0:90:4d:c1:e8:8d:05:8c:b2:12:84:92:af:50:bf:
f4:b5:2a:47:03:2b:04:71:1b:d0:52:99:5e:18:a0:85:37:f7:
c0:17:39:96:62:b1:80:f5:04:c8:fb:7a:a2:33:ba:7f:e6:01:
ba:5f:ca:c9:db:46:b2:c4:9a:e8:cc:87:09:61:a3:03:5c:c8:
19:e6:4b:2f:69:0b:b8:d8:5e:c5:5c:f3:a4:a0:e4:c8:ef:b7:
61:72:00:e7:c9:93:05:6e:60:8f:b1:e3:3a:13:14:6b:95:f0:
42:e2:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:49 2026 by rpki-client