Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: iG+PTin0f7aoAr0rXXcg4MMUPHWjs0Mf/8Z0i5x9k1Y=
Subject key identifier: 58:43:4A:BF:5E:A7:D1:A2:6B:5C:F4:B0:FA:33:13:36:32:61:9A:64
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 019D37C0D0524368B682C2635F2C594C5F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:16 +0000
Manifest this update: Sun 29 Mar 2026 04:01:16 +0000
Manifest next update: Mon 30 Mar 2026 04:01:16 +0000
Files and hashes: 1: DWxK7O4df_W8HA4KXmkc0bNeZRc.roa (hash: BoTdjcLNvInLjrHcqKbP+Q4OyLKz1VsHHG2lylnjHaU=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: CAd74eJwMGcx5Bs7UoI0VxOwSqyVGuLoYZRVlUnE0dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d0:52:43:68:b6:82:c2:63:5f:2c:59:4c:5f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Mar 29 04:01:16 2026 GMT
Not After : Mar 30 04:01:16 2026 GMT
Subject: CN=58434abf5ea7d1a26b5cf4b0fa33133632619a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:ef:1c:a7:b2:73:87:80:9e:4f:67:6d:5a:
02:6c:92:5c:84:f5:3d:34:a3:64:b6:03:51:77:0b:
09:b3:ae:13:0c:04:18:08:54:7e:55:24:85:54:bc:
4f:12:0d:96:63:de:e6:3e:9e:cd:fc:af:93:9c:39:
8f:f1:48:c1:43:5d:54:32:8c:b5:01:ed:de:73:77:
0f:2d:9d:24:9d:26:72:28:36:31:7f:bb:79:1f:1c:
aa:e0:c5:da:ff:5a:fb:2d:36:d6:62:7d:01:36:7d:
b0:46:cb:48:99:dd:07:70:1c:97:19:aa:f5:93:95:
dd:30:38:86:5c:80:19:3b:23:98:44:c9:f2:6e:85:
e4:23:85:35:ba:ce:e5:e1:80:47:67:16:8f:f5:b5:
94:6e:4a:8e:7b:34:f8:8e:45:3c:c8:e7:af:41:00:
07:bd:d0:f1:e5:51:30:62:ac:1a:d1:94:e1:d8:29:
38:79:db:b8:5e:39:e7:80:ac:2e:f8:04:d6:1b:6e:
88:35:cf:db:7d:04:e2:b6:20:33:f4:87:cd:d4:ab:
b8:3b:b0:52:bc:6c:3d:97:7a:32:ec:a7:e0:30:25:
1d:34:03:0d:63:32:0d:12:80:f3:f8:63:f4:46:c7:
35:57:d0:58:d3:d6:9f:ef:c9:36:05:08:58:a7:d6:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:4A:BF:5E:A7:D1:A2:6B:5C:F4:B0:FA:33:13:36:32:61:9A:64
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:38:2e:a3:f4:8d:d2:57:13:5f:3b:eb:ee:74:e3:dd:87:9b:
3a:73:94:65:0b:af:67:ca:e9:c5:3e:87:de:9b:4a:6e:c1:98:
b5:5c:bf:fe:a9:ae:66:84:f1:44:0d:75:36:e0:32:3e:c9:0d:
e4:89:32:01:6d:6e:2f:23:94:c6:14:5c:5d:3c:c0:11:58:e4:
ae:48:79:4b:6b:c9:2b:ac:01:dc:8e:a1:ba:b3:34:30:5e:f7:
e1:d6:2a:9f:b0:8d:53:ad:e7:2e:88:66:28:3d:7d:ee:f7:1d:
79:72:79:16:31:0f:70:98:30:36:57:f4:f2:e2:ae:66:7a:4d:
cf:60:76:00:0a:20:d7:dc:e5:ec:68:96:28:b3:05:2f:ff:d3:
f1:1b:bb:d0:be:f0:6f:29:37:17:50:86:5c:ab:6c:6a:2b:b8:
7e:b0:ff:ff:b0:d0:97:bd:44:2b:57:93:07:3f:3a:35:e1:ac:
74:29:3b:ac:e7:13:ca:ef:91:f3:1a:f8:9c:33:e6:39:db:be:
d2:d2:de:7c:ad:67:77:7c:6f:14:5a:fd:99:a3:42:49:db:80:
3a:97:6d:1e:ef:de:2b:49:26:9e:00:76:cc:16:cc:b2:e3:38:
c5:9a:fa:a5:f5:66:d9:b0:e9:b2:75:55:9d:3b:b8:02:4b:a2:
43:bc:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:26 2026 by rpki-client