Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: Fvx57Yb39SJvEwtphiUS3Azw7NXjB1bKfXqXurTSlI8=
Subject key identifier: 4E:4E:A7:93:45:07:F2:67:39:37:2A:85:94:91:A0:EF:92:8B:DA:A6
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 01A177A7B83266381A89AD25CC59BC55A339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 08AE
Signing time: Mon 26 Oct 2026 10:00:42 +0000
Manifest this update: Mon 26 Oct 2026 10:00:42 +0000
Manifest next update: Tue 27 Oct 2026 10:00:42 +0000
Files and hashes: 1: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: tnJ00o/jfrUGGn9E4kIRLVd/d7bOTVYm3g51VTIiHHw=)
2: oBsXlgaTo3-EPPeDa4scyzOeaJE.roa (hash: hroC3QsTYG+lCo4/5W7hPkpTUCXhcAtLqDy7A6IH+oQ=)
3: vUdfXnwcRDPW7e3X7ofFMJYqkDk.roa (hash: 4hcskGjMuomfYGEOrtlmJrd0tV2p1HAsJ5FOV+HnCFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:b8:32:66:38:1a:89:ad:25:cc:59:bc:55:a3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Oct 26 10:00:42 2026 GMT
Not After : Oct 27 10:00:42 2026 GMT
Subject: CN=4e4ea7934507f26739372a859491a0ef928bdaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:92:93:db:51:2b:b3:4e:66:8f:88:54:d2:
21:fc:20:03:9c:bf:87:71:59:7a:fd:4c:ac:c5:4a:
59:49:cb:ab:63:e2:fe:da:6a:df:29:ae:72:05:83:
93:2d:56:ca:f1:e0:fc:cc:69:c5:ff:10:a4:a3:f1:
f6:b3:6c:ff:2b:e9:11:bf:6a:27:26:d6:5f:e7:e0:
ac:15:43:71:b2:8e:8d:3f:87:df:cd:53:5b:d2:d9:
19:2e:c5:73:fe:0f:6f:59:47:89:d2:f1:8e:b9:2c:
15:fb:29:b5:01:35:ee:39:55:2c:cd:10:c0:8a:99:
de:bc:df:12:17:2a:38:a2:8d:aa:5a:36:12:d8:1d:
06:c8:13:a1:4a:f6:86:39:ed:c9:8b:cf:d3:b7:be:
9b:41:a8:e5:3d:4c:d8:18:f3:58:36:24:71:ce:cd:
1a:f7:32:36:14:47:96:c6:a6:3f:f5:d8:3f:b2:b3:
d7:4a:ca:4e:7b:a5:89:50:d5:5c:c7:4e:9e:11:d5:
79:2c:8c:58:ae:a4:fc:33:14:22:b3:46:a0:fd:e4:
e8:74:62:34:08:2b:e5:ca:41:f0:9a:cc:89:bb:58:
01:13:b3:86:92:29:7d:77:f1:bd:3e:01:91:45:c1:
f4:a4:8c:99:fd:67:70:b6:16:fe:c4:26:6d:1f:1d:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4E:A7:93:45:07:F2:67:39:37:2A:85:94:91:A0:EF:92:8B:DA:A6
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6e:fb:18:ef:94:cb:d6:be:35:39:0a:b0:8f:90:d3:02:af:
2d:4c:49:c1:a7:b3:46:c6:88:80:c8:e8:47:97:cf:0d:8a:b6:
90:94:51:f6:48:ce:92:f8:61:6b:cd:ad:4d:1b:2d:79:cc:84:
64:d3:0a:44:b4:3a:ff:6a:30:ea:c0:43:89:31:8a:56:63:ed:
03:e5:51:8f:fb:de:a8:08:fe:74:66:2c:8f:51:5c:ef:91:ca:
37:60:c5:d0:d5:5b:cc:61:a0:0e:93:6c:11:54:b4:04:d2:5a:
c1:a1:81:3b:06:da:31:f8:87:90:2a:fa:c2:72:16:59:f1:31:
1c:d1:24:e8:27:d3:6d:16:59:97:51:12:62:e5:aa:c4:92:33:
03:1e:84:d2:39:07:a1:e9:1b:91:dd:a4:d6:f0:0e:90:4c:a5:
2d:0f:c5:66:73:b3:76:78:01:e8:e0:03:56:64:ac:db:f6:46:
6e:19:1c:63:17:b2:be:7c:9b:ba:bd:d7:5c:e2:2f:f8:db:82:
41:1f:c1:64:3b:d0:00:d9:2b:34:60:76:98:cd:ee:84:8e:c8:
e6:4c:47:e6:2a:f1:cd:36:db:f9:87:26:95:cc:0c:f4:9b:46:
17:83:92:79:b1:66:56:e7:2a:8b:a7:d4:ae:b6:a4:0c:7e:3e:
77:32:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:08:15 2026 by rpki-client