Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: hvI356geVq347d8XWlX89ddxGob43bXhtrkLYuEYuys=
Subject key identifier: 09:16:84:49:02:F4:2D:63:AD:FE:91:B6:28:70:08:5A:15:69:DD:AA
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 01A08C0CE87D4E1994F3C24E01CAD98E55D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 0834
Signing time: Thu 10 Sep 2026 16:00:51 +0000
Manifest this update: Thu 10 Sep 2026 16:00:51 +0000
Manifest next update: Fri 11 Sep 2026 16:00:51 +0000
Files and hashes: 1: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: kQ6+tstxfhvZAr4cKVTtdoUXNKxxBxQIRKwbG5uousE=)
2: oBsXlgaTo3-EPPeDa4scyzOeaJE.roa (hash: hroC3QsTYG+lCo4/5W7hPkpTUCXhcAtLqDy7A6IH+oQ=)
3: vUdfXnwcRDPW7e3X7ofFMJYqkDk.roa (hash: 4hcskGjMuomfYGEOrtlmJrd0tV2p1HAsJ5FOV+HnCFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:e8:7d:4e:19:94:f3:c2:4e:01:ca:d9:8e:55:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Sep 10 16:00:51 2026 GMT
Not After : Sep 11 16:00:51 2026 GMT
Subject: CN=0916844902f42d63adfe91b62870085a1569ddaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:c9:43:18:96:32:4b:b9:37:bf:30:27:a1:
26:c2:b3:a7:6e:b4:88:31:10:79:1b:41:52:f7:f3:
67:e2:45:29:23:51:e1:18:40:55:7b:66:49:1e:09:
4d:27:78:df:b4:bc:47:25:4e:79:d5:44:49:78:6f:
40:8c:46:3e:14:ca:19:07:ca:ed:24:54:a1:9c:12:
d7:89:42:f0:a6:ff:2c:e7:6d:d9:b5:b8:1c:0a:be:
22:0a:db:9c:ab:ee:f0:4b:73:c9:58:10:2b:9a:e3:
bb:23:94:45:bf:2c:dc:f7:09:7c:f7:6a:28:9b:17:
77:61:a6:a7:79:58:23:9f:83:8d:6c:b8:96:54:93:
69:25:67:2f:cf:cb:39:79:fb:cb:ea:8a:8c:7f:bf:
8c:96:d9:b3:2a:da:1f:fe:6a:2e:9a:7b:81:6a:c0:
ee:c4:b2:0e:a8:5b:3c:9d:d8:69:8e:95:f3:5f:76:
95:2f:48:7f:8d:24:dd:eb:6c:6b:a4:e6:f8:0a:e7:
80:60:08:a5:81:cf:a2:69:a7:a9:5f:62:6e:f1:60:
b0:65:b3:cb:7f:86:eb:bc:d4:2d:1f:70:de:b2:4b:
3c:e9:0b:90:9d:10:d3:bf:cc:cc:c2:78:0d:cb:51:
75:6b:4f:df:b8:f7:4e:7a:19:c3:5c:26:c1:40:84:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:84:49:02:F4:2D:63:AD:FE:91:B6:28:70:08:5A:15:69:DD:AA
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ef:47:28:20:b6:ff:b0:cc:e3:00:a6:b0:ee:f4:04:ea:83:
7f:74:cd:cc:82:6d:dc:41:1b:d2:1e:ac:35:73:47:be:1b:e6:
14:14:9b:b3:c8:41:41:d6:9b:0a:3d:d0:f5:cd:5a:8e:04:01:
55:bd:51:7a:a8:5a:90:72:af:ee:81:54:32:50:b3:83:49:0c:
ca:38:10:cd:3e:86:07:c1:f6:59:90:dc:3e:0e:95:4d:e4:9f:
35:b8:fb:0d:3a:29:b8:f0:8b:a5:7e:c3:f6:da:f3:74:69:44:
66:f5:2d:f4:e8:6c:0e:85:f4:4d:38:7b:47:14:67:a0:1d:ec:
a7:fb:10:04:49:de:74:e8:9e:ef:0d:d7:dc:7b:5c:bd:de:a5:
ef:a2:b7:70:26:13:4a:b0:33:06:e7:4c:19:1f:12:c8:82:29:
3e:47:e3:ce:a3:d2:9c:d1:32:48:2c:9c:87:a6:39:73:64:64:
37:f0:bc:4f:b0:50:43:c0:fe:83:f3:d2:5c:f1:d1:61:d0:fa:
30:2c:4c:d8:f0:9f:0c:af:60:c3:15:97:7a:51:d5:a1:6f:e4:
ba:fd:b2:13:0f:d6:d1:cc:fc:8c:fa:93:4e:ab:9c:bd:db:ca:
fb:75:e1:e2:ca:66:49:94:81:20:cd:ea:95:ba:f1:0d:23:e1:
ac:f7:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:21 2026 by rpki-client