Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: odgonjL7S4FUOym7a5MBAHNI5/EO2ggcRGwm5fkd9dw=
Subject key identifier: CC:A9:B1:C2:15:02:D6:23:BA:E1:76:A0:6A:58:4F:6C:3A:5E:73:C8
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019E9A04A6E05CF81E3822344CF92DDE8F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0C63
Signing time: Fri 05 Jun 2026 23:00:56 +0000
Manifest this update: Fri 05 Jun 2026 23:00:56 +0000
Manifest next update: Sat 06 Jun 2026 23:00:56 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: qCl5gSTsne23pPXCwokV4EhtzA3WfQRa436v5QNcbN4=)
4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:04:a6:e0:5c:f8:1e:38:22:34:4c:f9:2d:de:8f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jun 5 23:00:56 2026 GMT
Not After : Jun 6 23:00:56 2026 GMT
Subject: CN=cca9b1c21502d623bae176a06a584f6c3a5e73c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:65:7a:0d:c1:43:e1:45:ee:05:4e:1d:f4:
4f:04:e5:5c:58:57:be:e8:64:d5:1c:a6:74:20:57:
16:5c:7c:1c:a8:cb:b4:59:e3:f0:54:4d:6c:33:73:
f7:24:a4:f0:e9:e3:c2:ee:84:f2:2c:3d:73:8a:99:
5c:db:10:1b:87:2f:ff:cd:45:44:99:38:c1:9b:3b:
e4:b1:4b:32:3f:61:b7:d9:30:0c:f9:79:f9:2f:cf:
3b:55:3e:98:39:8d:76:f9:39:e4:8e:b2:ac:3e:5e:
52:d2:75:1a:b8:6b:0e:3c:e0:8e:79:86:5f:c6:c1:
53:1e:2d:92:6a:6d:d4:f7:49:8e:91:d4:2a:19:bd:
7d:45:2d:bf:25:0e:38:ce:a4:10:07:3e:c2:63:26:
63:c1:cb:55:be:7e:08:30:4a:bc:ef:64:29:f1:34:
1c:d8:68:33:f8:77:10:6c:1c:b5:e6:5b:d1:df:fc:
00:01:82:d5:a0:13:91:9c:a8:c8:e5:4f:52:24:af:
88:f7:53:db:71:0f:8d:92:32:9d:ad:87:0a:39:b2:
d6:70:d4:33:0d:b4:e1:69:d8:03:e5:e4:c5:af:be:
c0:76:5e:5c:23:a1:2c:c5:4a:28:8e:22:af:3e:bd:
2e:1c:c9:ca:43:ae:85:ea:fa:a1:06:8b:6c:5a:30:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A9:B1:C2:15:02:D6:23:BA:E1:76:A0:6A:58:4F:6C:3A:5E:73:C8
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6c:b4:46:4d:48:d3:9f:b3:19:0f:34:26:42:ce:2a:5e:a6:
21:50:51:60:68:e9:a7:1e:ea:22:6a:ce:b7:e2:c9:a4:20:43:
f7:c9:3b:3d:20:32:17:9f:26:22:ca:86:cb:4d:f9:0c:ec:85:
8c:67:39:0a:1a:8e:1f:ad:60:db:55:97:f3:3f:56:42:69:fe:
a8:0a:60:16:ac:e7:ab:19:b6:22:00:b1:5e:e5:67:50:63:4a:
a0:c2:12:d7:85:c7:88:21:a0:af:26:03:aa:e0:df:4e:b8:75:
fd:f4:3e:2c:09:3b:ea:b5:f7:b7:4c:57:74:95:a9:d3:1c:51:
a3:dc:c6:92:9a:5c:35:2b:2f:c9:95:d0:19:5c:16:ae:b5:1f:
c9:28:9f:7b:d6:a0:71:3c:61:6e:ab:b0:46:d2:12:c6:c5:f2:
52:96:26:10:5c:b1:f3:05:62:8e:0f:2a:88:18:04:e9:d8:f2:
b2:c1:94:13:9e:d8:8e:b0:5a:36:66:cc:1f:4d:ba:a5:37:32:
ce:88:fe:49:2a:ba:32:bc:e0:ab:04:cd:7b:34:34:bb:06:f1:
f1:50:18:dd:e5:d4:98:bf:df:78:48:e3:8e:cc:9b:34:d5:30:
59:22:b6:6a:00:60:e5:f7:53:8c:90:1b:cd:b2:ab:2b:5c:aa:
ac:1c:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:59:27 2026 by rpki-client