Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: PqvE4Ma/RRpaaJ9KMV3INc5iKylYhU9QYkTPcLp0tNo=
Subject key identifier: E3:28:E2:8E:D8:03:43:24:C0:92:71:48:9B:71:B0:B4:DC:7D:C7:B5
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 01A16A59B609773A6BF1AEC2B98456193AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0DD8
Signing time: Fri 23 Oct 2026 20:00:26 +0000
Manifest this update: Fri 23 Oct 2026 20:00:26 +0000
Manifest next update: Sat 24 Oct 2026 20:00:26 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: goHT5lG0cojZPAr4yofI+/c0rNMS6j3GCn8tqyVDjuU=)
4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:59:b6:09:77:3a:6b:f1:ae:c2:b9:84:56:19:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Oct 23 20:00:26 2026 GMT
Not After : Oct 24 20:00:26 2026 GMT
Subject: CN=e328e28ed8034324c09271489b71b0b4dc7dc7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:43:73:62:37:8f:02:80:56:f5:82:ca:e0:
3b:29:e6:cf:bf:d3:ea:82:5e:44:8b:4b:c1:6d:d9:
ae:25:df:6f:ca:7d:29:e7:af:24:38:65:ac:a0:4f:
2f:06:a0:3e:6e:d4:a0:e7:a4:2d:e1:69:2d:28:2f:
b9:de:da:bc:a2:e9:38:ed:e8:8e:07:ea:b7:62:64:
c5:8e:ee:2c:03:46:91:2f:1d:99:5e:20:7d:7f:84:
05:bf:10:f1:cb:37:18:43:d7:ea:e9:ea:96:18:e2:
96:d3:e4:5c:4e:e5:68:aa:96:4b:5d:f8:5a:17:6c:
a8:a7:c5:c8:0f:a8:f0:1d:95:7d:ab:b6:c1:39:ef:
e5:88:49:9b:29:6b:90:26:f1:61:d7:20:3e:43:89:
a9:2a:e9:38:73:ca:e5:64:28:8f:13:13:2d:2c:4f:
d9:4a:82:26:ab:1d:b4:ed:47:50:85:31:84:61:a5:
a8:6d:af:7d:f9:42:67:a0:8c:74:d7:ab:93:82:c5:
ea:b1:8a:3c:f8:81:89:82:b7:07:e6:fb:8b:eb:d0:
22:14:45:29:cc:46:09:40:18:19:6b:9d:13:61:dd:
ef:03:44:9c:c3:10:d2:d8:9b:0b:f2:5d:e2:98:58:
57:78:9e:2a:45:53:ed:ac:95:a7:50:fe:fc:66:53:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:E2:8E:D8:03:43:24:C0:92:71:48:9B:71:B0:B4:DC:7D:C7:B5
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4c:22:9b:a5:55:8b:7c:25:61:8d:35:46:96:8c:61:bb:bc:
5c:6a:24:f3:f5:3e:3a:36:d4:0c:d7:7d:00:96:f3:a2:ed:9d:
fa:97:e3:2d:8a:4f:48:00:71:bf:e1:37:1d:79:d1:fb:19:56:
38:8f:3c:fa:3c:00:88:21:f6:ac:89:3f:93:4f:7e:66:6d:83:
7a:de:d8:f6:41:9b:9c:9c:f8:0d:00:d1:1d:89:c8:b7:b3:19:
27:d2:c9:9a:ea:f1:ac:85:1a:86:ea:29:40:7c:97:cb:87:58:
b9:67:ee:36:3a:a7:07:ce:bf:93:47:27:5f:e6:27:84:96:87:
4d:24:c5:a3:5c:d9:19:57:2e:93:b8:84:e8:24:87:35:97:e8:
b0:68:43:92:49:89:89:6b:d6:56:b0:e1:82:e7:9d:3e:93:07:
37:2e:64:37:3a:3d:f0:72:ce:47:0f:12:93:01:ff:57:11:09:
40:e7:3a:b3:db:68:e2:39:62:fc:56:a3:4b:16:18:0a:d0:db:
c0:7f:e9:9c:d8:03:e3:64:3b:a4:4e:26:01:ee:3a:1f:26:b8:
60:d7:12:eb:10:84:19:85:6b:0c:99:1f:f3:d8:bf:2c:6d:cc:
03:65:80:17:8b:e6:4a:42:83:00:50:23:7f:a1:06:18:d3:10:
e6:af:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:54:51 2026 by rpki-client