Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: T+XagxKkH/yS4Im4T45xAwhTnQ6I5emEJ7SZJAeh6SA=
Subject key identifier: 93:C1:2A:31:72:18:2B:7F:6A:F7:BF:B4:08:F7:9E:61:9A:16:DC:17
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 019D389C2462447A16E011478A818FC54846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 11D1
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: suFInieFH9RVwW1Kg/Cj5UQGpvopg48xMRhxSJGrlQo=)
2: WnrfeKHjp01grMlG1UefiIjVQJ0.roa (hash: 7Bp0dsKH9K4YXSeiewZoI6Eeafpuzu2XCcfRYrCLnF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:24:62:44:7a:16:e0:11:47:8a:81:8f:c5:48:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=93c12a3172182b7f6af7bfb408f79e619a16dc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:a5:16:66:97:08:a1:63:77:11:37:5d:d8:
18:97:12:50:4f:e4:20:45:1a:dc:dd:96:54:1a:2a:
bb:66:ac:63:1d:f1:b8:de:42:07:b4:10:5b:37:35:
1f:99:df:e6:ad:ba:55:af:ac:69:97:48:51:ea:07:
a7:02:35:de:f5:87:e4:1f:8d:20:da:7b:5b:c1:e9:
d9:7e:7c:68:ba:32:70:bd:74:d5:25:3c:1f:35:cb:
c0:dd:5a:fa:e4:98:39:2a:c1:38:a0:f3:e9:11:05:
d8:f7:10:cd:1e:64:c1:57:52:89:d5:19:13:56:73:
69:57:7d:d5:fe:ca:6c:ae:17:05:ef:23:e8:01:6d:
b8:17:fd:d6:3a:9b:9f:03:7a:3a:a9:da:f4:cb:a2:
af:db:3d:64:a2:9a:a8:c4:61:d8:3c:ac:52:90:3e:
f4:37:7b:7a:54:23:0b:cf:97:f3:ce:b0:70:98:90:
41:d5:d8:b9:1a:3b:26:35:ad:ee:dc:7b:7f:08:41:
68:19:d9:2c:6f:f4:fa:dd:9e:3c:dc:d3:5f:0c:a7:
3f:56:ee:f0:5a:a1:50:d5:45:81:df:b1:8f:15:67:
17:88:0b:65:e4:1b:7b:ff:d2:a7:ab:f4:82:ad:5f:
40:43:f6:71:43:ad:4e:56:ed:96:17:3f:b6:a5:a0:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C1:2A:31:72:18:2B:7F:6A:F7:BF:B4:08:F7:9E:61:9A:16:DC:17
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:37:2f:01:35:26:33:b5:8f:aa:c1:48:67:55:56:45:12:f1:
df:d8:aa:a1:d9:cf:67:94:f7:20:4c:71:82:a6:bf:e2:a9:46:
86:7b:d9:76:18:d8:10:77:87:1d:9b:61:12:05:1b:92:3b:5d:
53:c3:12:9d:40:9c:c1:71:c8:66:50:9f:f8:35:a6:66:f0:7c:
11:43:c6:63:52:b8:b2:2b:33:5a:f0:f5:6d:b8:13:2f:c1:20:
99:d7:39:3a:ff:0a:93:ac:c6:f7:df:9d:20:c0:ec:82:5d:02:
e2:5e:5e:5f:b5:3c:08:6b:de:8a:81:dd:70:a6:cb:9d:0b:29:
ac:a7:7c:47:81:d3:c7:73:3c:b8:ad:ac:52:2b:ac:58:3d:e0:
20:b7:f8:11:82:e5:45:74:2b:68:cf:e7:8d:93:40:85:ea:5d:
d8:57:59:82:69:de:17:01:ca:b2:15:ac:d7:1f:93:5f:9b:fe:
af:90:67:c2:9c:75:65:23:16:28:8d:0e:f1:f6:50:1b:22:a5:
40:bb:77:c1:50:72:8e:14:92:c5:54:60:ba:39:f2:5d:03:5c:
a3:ea:c1:ee:07:95:65:eb:22:be:01:fd:9d:39:b3:eb:2b:f0:
7c:46:78:30:2d:2a:1b:e4:4a:5e:51:f2:5f:f7:d9:90:88:76:
42:1d:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:17 2026 by rpki-client