Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier: cDYz90eskeEskGi9zV6UKVIVrw9nBI/bCvxYKjBFv88=
Subject key identifier: AE:03:12:E9:1F:CC:96:03:1D:B9:05:31:DC:32:BA:69:E9:3B:66:42
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial: 019DA30A80E1E225D7FD8DA0C63A154DBFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number: 0913
Signing time: Sun 19 Apr 2026 00:01:07 +0000
Manifest this update: Sun 19 Apr 2026 00:01:07 +0000
Manifest next update: Mon 20 Apr 2026 00:01:07 +0000
Files and hashes: 1: MXA3c8QX3g7YwiQOnrLTeGWh5fs.roa (hash: E7jF1me4KBNOx1U7XGJgq5UdFci6SFszrBrpba8pjPc=)
2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: IsS1dAEjm0GGaePeHa9RA+YeUQzITBWz5Y1LeHQQ3w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:80:e1:e2:25:d7:fd:8d:a0:c6:3a:15:4d:bf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Validity
Not Before: Apr 19 00:01:07 2026 GMT
Not After : Apr 20 00:01:07 2026 GMT
Subject: CN=ae0312e91fcc96031db90531dc32ba69e93b6642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:61:62:1d:4f:28:3e:29:1d:61:05:f5:33:
5d:5b:e6:2e:db:03:90:bb:72:d9:7d:15:a5:da:c9:
e1:4e:a2:6e:c1:43:f4:16:b9:3e:de:0f:d8:71:9b:
c4:3d:f2:78:d6:d7:48:e9:80:64:1c:b7:a8:aa:5e:
e1:90:79:9c:b1:f8:d7:09:ea:ae:12:7f:d3:e6:90:
7a:af:d3:cf:26:95:04:fd:b2:05:cd:c7:8a:bf:df:
d5:2f:e6:e2:aa:b0:ee:cb:3e:eb:6b:97:f1:d6:23:
79:04:1b:23:24:bb:0d:cb:91:f9:ad:a5:98:40:57:
bd:8a:76:1d:82:53:7c:76:68:2b:2e:57:6b:ff:c3:
f8:5d:e9:81:8f:28:aa:58:36:db:2e:f6:b7:b8:f5:
66:64:18:60:62:80:0b:e7:56:83:d3:dd:00:02:77:
60:b0:22:36:12:13:3c:20:42:9e:4a:c9:0f:1b:3d:
d3:4d:7d:1f:d6:c2:05:68:67:8a:6e:1b:94:8f:92:
d1:1a:6c:12:b7:96:5a:f3:bd:40:c2:13:95:c3:f4:
07:5b:79:02:0b:34:0d:7b:1c:33:8f:ba:18:14:73:
53:49:a9:60:51:fe:06:6b:ab:f7:24:ab:cb:00:60:
dd:0c:52:57:d3:9c:59:05:78:63:d2:77:a3:6e:a5:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:12:E9:1F:CC:96:03:1D:B9:05:31:DC:32:BA:69:E9:3B:66:42
X509v3 Authority Key Identifier:
keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:61:4f:35:51:ad:e7:10:bf:1c:8e:62:e0:fc:91:7e:43:5e:
ce:43:2a:dd:e6:64:8c:14:87:5d:ce:fc:31:b3:c6:0d:3e:73:
e1:17:6b:ef:00:73:d5:90:9d:1f:0a:79:ac:af:c9:8d:6a:fd:
a2:80:77:db:e8:75:b0:d4:fd:74:2c:ce:4a:8f:d0:73:ad:97:
94:bf:96:3c:98:87:76:10:ec:c1:46:f6:1b:38:4f:07:32:33:
25:6c:5e:45:72:c3:f0:e9:e8:a1:fb:2d:fb:d3:f4:5f:db:9d:
84:3c:18:20:98:28:d5:34:17:79:97:c8:80:bb:ac:4e:e0:89:
a1:a1:5a:9e:a9:2f:63:52:0a:95:e4:5e:e9:2b:63:72:6e:8e:
98:62:c4:2d:f4:54:a6:b9:cf:9a:e9:11:91:0a:9a:74:a3:46:
cc:68:2f:19:a0:6a:47:9f:1d:24:92:7e:83:9c:70:a1:f1:9b:
fc:7e:e5:3f:45:f0:7e:67:ae:8f:5f:8a:6f:35:4b:43:35:58:
60:12:2f:7d:55:65:4c:91:17:9c:e6:6e:ed:f7:c5:c2:5f:8d:
d6:67:e8:be:c5:25:11:ca:14:7b:83:86:7a:08:16:85:c9:16:
be:4a:99:9d:4c:50:7a:36:98:a7:1b:31:7e:aa:77:f5:a8:10:
ec:24:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:58 2026 by rpki-client