Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier: BN8eOAJvf5CHayBHPXjkJqs/hFSk/KoExm8wODyAeSs=
Subject key identifier: A1:5F:0A:51:86:79:A5:5C:68:BC:B2:F8:9C:9A:57:83:01:DA:59:F5
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01A12730B35D973525CC05A14D1D3044FF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number: 1294
Signing time: Sat 10 Oct 2026 19:01:05 +0000
Manifest this update: Sat 10 Oct 2026 19:01:05 +0000
Manifest next update: Sun 11 Oct 2026 19:01:05 +0000
Files and hashes: 1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
5: JZY_foOujAs2S8oyUiHgzJmfQdc.roa (hash: DgfisKHYgXWyrC09kLGXsPVkL/aoRfMRq+KSAiwmCN4=)
6: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: z7moDUKuvBHD/iqQHhMymIWNxtFQR1StajIA1oy5oeA=)
7: fEVKCWfXS81UhHXs6FzXRgVVlS0.roa (hash: DYXjiwoD9ieXBJq5p3EJXuBIjNeNxc0egoZ1sUSDsuY=)
8: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:30:b3:5d:97:35:25:cc:05:a1:4d:1d:30:44:ff:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Oct 10 19:01:05 2026 GMT
Not After : Oct 11 19:01:05 2026 GMT
Subject: CN=a15f0a518679a55c68bcb2f89c9a578301da59f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:f1:6f:06:0d:10:fa:b2:c0:46:62:ae:5b:
05:52:21:32:54:ff:a3:67:4b:53:f4:da:a6:c9:c7:
e9:aa:c1:63:36:4a:90:15:8c:2e:d0:a1:91:e7:e1:
53:69:29:a6:2b:8a:67:a8:6b:4d:ef:70:12:cb:21:
2f:a3:11:1f:e8:e3:f6:7d:27:d1:0a:ce:72:64:07:
32:13:71:dc:33:ab:65:ce:51:2f:d5:19:6b:9e:cb:
44:b7:a7:77:4d:1c:6a:9b:08:96:c7:3d:6b:38:3a:
93:9f:e8:1a:a6:fe:1f:f5:d8:25:20:40:04:df:eb:
ac:ca:c3:46:80:5e:9c:4c:17:93:0e:2b:01:28:de:
8f:ed:74:1c:4b:70:a0:99:85:53:b3:83:3e:f4:e4:
5d:ec:f9:2c:ad:2a:0f:f7:4e:8b:39:45:a5:c7:f3:
e4:5c:4b:b8:fe:86:e7:88:a3:14:de:db:08:8a:87:
af:51:50:f0:ab:ef:d2:9b:36:67:8e:b4:8d:77:ee:
a9:9b:50:7d:fc:20:69:89:59:80:a0:96:a8:9f:87:
1e:b4:e3:95:15:21:ab:79:b0:c3:ce:08:47:9b:53:
8d:50:aa:98:69:6d:92:28:00:bc:8b:b3:70:b6:93:
e9:df:42:71:90:a3:78:be:5a:f5:d5:b5:30:97:b3:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5F:0A:51:86:79:A5:5C:68:BC:B2:F8:9C:9A:57:83:01:DA:59:F5
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0e:15:56:a2:8e:37:16:3c:29:27:a9:b0:bc:79:09:9e:35:
9d:17:ff:17:1b:34:87:2a:fb:6c:74:bf:29:67:ca:72:f2:4c:
75:76:eb:24:d8:95:8d:2e:3c:13:87:0d:c4:25:72:57:29:c4:
6f:40:8a:db:e2:9c:bd:55:cc:ec:63:b5:45:a1:65:11:a4:e0:
8f:0c:8f:1e:a5:4e:5e:b5:1d:cb:45:d1:58:a7:6b:3e:bc:33:
a8:f5:27:33:48:2c:e4:8d:a4:2f:4a:06:72:a1:21:e6:c4:a6:
17:cd:ec:3f:9c:45:6c:3a:61:ac:fa:c4:5e:ef:8c:e3:9a:ee:
45:56:39:34:dd:1e:83:ed:16:ee:7b:e1:04:77:f6:72:f0:41:
0e:4f:a1:f3:66:5b:01:bd:2c:ba:ef:19:cb:18:41:2d:e3:33:
c9:3d:ae:1c:52:62:9d:f4:66:f5:a3:ed:51:04:fe:54:89:91:
e9:83:7a:3c:8f:13:1b:74:09:46:28:5a:9f:06:6a:80:26:6c:
dc:18:70:99:9e:cf:fb:34:a0:c5:9c:86:6f:0e:74:5e:14:97:
1e:a4:68:2e:bc:f6:d1:8d:3c:0b:0d:66:e1:82:27:d9:d4:80:
de:0c:cc:7f:83:bc:e5:93:5c:29:0c:35:d6:f1:60:38:32:77:
8a:05:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:22:26 2026 by rpki-client