Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier: KfUGN2yBmd8P47IRnlpnm+VV1TX809ysliHvxJD8Q+o=
Subject key identifier: 4C:EA:B9:97:B6:0D:E6:1B:77:7C:A5:D3:D8:92:20:FC:ED:83:D2:3A
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01A117BD8C817C66E68E2104C09337BDE907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number: 128C
Signing time: Wed 07 Oct 2026 19:01:00 +0000
Manifest this update: Wed 07 Oct 2026 19:01:00 +0000
Manifest next update: Thu 08 Oct 2026 19:01:00 +0000
Files and hashes: 1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
5: JZY_foOujAs2S8oyUiHgzJmfQdc.roa (hash: DgfisKHYgXWyrC09kLGXsPVkL/aoRfMRq+KSAiwmCN4=)
6: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: LxauCLNR+PhJNtEYyGAMYAr+hWUqpBVIql+RiP/eBDA=)
7: fEVKCWfXS81UhHXs6FzXRgVVlS0.roa (hash: DYXjiwoD9ieXBJq5p3EJXuBIjNeNxc0egoZ1sUSDsuY=)
8: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:8c:81:7c:66:e6:8e:21:04:c0:93:37:bd:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Oct 7 19:01:00 2026 GMT
Not After : Oct 8 19:01:00 2026 GMT
Subject: CN=4ceab997b60de61b777ca5d3d89220fced83d23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:d5:ee:1b:58:ad:f8:63:21:b0:3b:d3:5b:
bf:fb:99:00:1f:2a:18:58:22:19:46:29:4c:6b:02:
13:7d:a1:ba:60:5a:a2:ee:31:29:b1:09:29:1b:4f:
fa:7c:65:55:e7:ac:b1:a4:e2:a9:a9:a2:9c:91:85:
ef:8c:34:38:0e:bd:de:22:87:f4:2c:3d:40:5b:75:
5b:d8:25:06:af:2e:7a:74:54:80:84:47:6f:32:d8:
b6:c0:0a:ab:14:c6:0f:00:b8:9d:34:2b:f6:07:9b:
d2:c0:fd:4a:e0:1d:25:80:fe:27:ac:7c:7e:5f:af:
5d:56:fa:68:b9:59:ec:6e:8a:a5:1e:c5:1d:54:6f:
ed:57:7a:ba:38:53:c3:7b:a7:4a:3d:9b:90:8a:fd:
c1:05:cd:b5:31:b6:2a:73:af:d5:b3:a4:f9:a7:26:
d6:e4:84:33:f1:d8:1b:3d:fc:05:ed:68:74:a3:6a:
19:ae:c5:1c:34:d1:79:32:30:e9:85:f7:8f:1e:4e:
34:94:38:bc:5b:c7:50:01:e5:0d:be:a4:5b:26:01:
af:5f:46:96:03:43:87:59:cf:c3:b5:d5:8e:4e:27:
b2:79:4c:12:2a:9b:4f:b0:88:8f:10:ae:ce:99:d1:
1f:2a:ab:61:d7:ec:a6:5e:9e:0c:28:da:a6:ea:7b:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EA:B9:97:B6:0D:E6:1B:77:7C:A5:D3:D8:92:20:FC:ED:83:D2:3A
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5e:c6:c4:01:fe:5f:c2:46:23:28:ff:3e:04:e9:fb:3f:8f:
d6:1b:41:58:85:f5:b1:bb:bb:a9:ec:77:71:08:6b:b8:6e:2f:
95:14:d5:0a:eb:93:00:76:47:a3:c9:55:9f:3b:b0:82:51:ac:
35:fe:f8:8b:14:6d:c6:f5:41:be:40:a3:77:5c:f0:6a:48:07:
22:c1:96:6d:f1:f7:43:21:d3:3e:4b:07:89:48:42:97:18:ed:
d3:2b:36:2b:e1:a2:97:68:46:82:95:ec:40:7c:17:d0:73:55:
aa:83:28:92:4b:4b:07:fb:cf:e5:e4:cb:7d:53:8a:1e:53:f6:
5f:04:83:97:d8:18:d0:d2:71:71:6f:62:f0:69:29:46:fa:a0:
66:35:e3:ea:b0:82:af:53:e5:4d:59:d8:36:7d:76:37:80:4f:
ea:8a:eb:0e:f8:22:2d:a1:7d:17:4a:ae:15:c5:e6:31:18:19:
63:42:72:91:2a:b1:37:ed:2b:34:ab:24:ee:29:28:15:76:d1:
3c:f3:37:ca:b4:4c:f2:04:40:b1:33:66:f5:3f:a8:b5:4a:32:
48:36:91:c8:ff:76:4c:d9:89:c6:cc:88:38:60:bf:fd:62:16:
b3:61:e1:47:da:57:61:ae:db:98:dc:3b:b5:a8:17:17:8a:a7:
ce:05:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:05:46 2026 by rpki-client