Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: lYMLMPHTr9IUNvNIQD6k2+jWRiwuko0aHQjDAB0AHsw=
Subject key identifier: 05:31:70:2F:3D:FA:93:13:B4:D9:57:B9:6B:30:6A:F9:91:C3:D1:68
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019DAFB307EEC9292188D0EBC8EDB4B6CDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0BE9
Signing time: Tue 21 Apr 2026 11:00:38 +0000
Manifest this update: Tue 21 Apr 2026 11:00:38 +0000
Manifest next update: Wed 22 Apr 2026 11:00:38 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: fNZv5FeFyzDE3hY7JyBFoiEJYeOvhl0wkw/kz1rFMAM=)
4: y4hgiLoZQuqwy9Ryf6xVQSqsZr4.roa (hash: N8EgNl6vfYaF1Ts0sECLbCkME6l5AEsMF8hotYpNW4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:b3:07:ee:c9:29:21:88:d0:eb:c8:ed:b4:b6:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Apr 21 11:00:38 2026 GMT
Not After : Apr 22 11:00:38 2026 GMT
Subject: CN=0531702f3dfa9313b4d957b96b306af991c3d168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:56:63:0b:6a:4a:7f:1d:c0:4a:4c:07:47:
48:b0:27:61:91:18:7b:19:73:49:9d:7d:b9:b1:98:
9d:fc:92:e7:2a:92:85:7c:45:18:81:86:a4:73:07:
f7:a5:29:e5:72:e0:88:1a:92:77:a3:90:01:f2:15:
d5:c8:8f:86:ea:6e:39:cc:cf:14:a6:62:a6:14:ea:
d4:80:9d:b8:1f:12:dc:38:8e:3a:36:ce:00:d7:f4:
73:0e:db:56:4c:0f:4d:9e:b5:eb:37:9c:6f:67:d5:
ff:d9:80:34:77:1a:79:32:4d:6e:e8:23:62:d6:b2:
f1:34:5c:3b:24:6a:7d:d3:87:6b:ef:06:40:1c:0a:
b2:34:51:8a:b5:f5:f9:5f:b9:28:9a:4b:ea:49:82:
6a:f8:4f:0e:c5:59:35:68:9d:d1:26:92:57:fa:20:
3e:35:64:5d:39:fd:27:e1:91:77:2e:7b:52:f5:e6:
b2:ff:8a:aa:df:a8:37:6c:3f:36:cc:08:17:0f:5a:
95:b0:8d:6c:66:2f:9c:2b:1e:13:3a:10:35:89:ff:
0a:2c:b4:e1:18:f1:8d:4d:64:f2:10:93:4d:b5:89:
a4:30:06:eb:0b:17:8e:99:c0:50:16:68:8e:8a:d1:
d0:98:6a:52:cb:aa:87:4f:2b:d5:b2:6d:df:22:3c:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:70:2F:3D:FA:93:13:B4:D9:57:B9:6B:30:6A:F9:91:C3:D1:68
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:aa:e4:59:b0:99:de:80:7a:5a:49:c0:a0:e5:ae:1b:b8:
91:9f:05:dd:55:0f:40:e4:c2:5a:58:3a:cc:24:dd:55:e6:dd:
80:99:b5:5e:fc:29:3f:c4:ff:41:92:d2:42:24:39:6c:d4:ec:
f6:d5:e2:29:f1:37:08:12:95:b8:19:74:f2:dc:e1:77:f2:31:
51:93:3a:8b:d0:91:70:9a:d5:8f:9e:98:1e:51:8c:4d:dc:16:
d1:c1:d4:eb:21:69:12:f8:b9:df:34:72:40:d1:0c:de:62:2f:
cc:f0:d2:77:86:85:7c:1f:87:23:84:d3:83:43:3b:2b:3a:7e:
eb:8b:26:e8:e3:90:6f:ba:7d:a8:a5:00:52:22:be:8e:eb:56:
35:65:cd:44:5b:55:96:53:a6:4f:ae:4c:21:a9:0c:24:09:c0:
f3:54:a1:40:30:a1:98:c4:3a:ad:dd:75:29:5b:0e:5d:64:8f:
16:6b:27:44:d4:56:3d:c5:61:1c:ef:b2:0a:ff:27:24:f5:54:
91:d7:ed:a4:f4:cf:f3:43:29:62:b0:7c:28:a3:8c:d5:22:cb:
b1:f9:f2:b9:2e:77:74:45:1b:3b:fb:a6:61:97:34:7f:70:95:
4f:f1:e4:47:63:6a:18:2a:24:11:33:b4:e3:74:81:f9:02:8e:
27:35:4f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:07:47 2026 by rpki-client