Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: c5Krg+7ALkP0AJATxymjh0YD0XuuTqMMNkTH3Iwzf+U=
Subject key identifier: BB:17:BA:04:7E:65:A3:E6:3C:97:11:0D:FB:BB:A1:6B:15:CD:25:FE
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 019CC606C648163563B36BBE3CC7E0665C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0B70
Signing time: Sat 07 Mar 2026 02:00:58 +0000
Manifest this update: Sat 07 Mar 2026 02:00:58 +0000
Manifest next update: Sun 08 Mar 2026 02:00:58 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: xlWG1JZ5SIz0Zj11uCrcANTRORPijzxoRdyekHNXJMA=)
4: y4hgiLoZQuqwy9Ryf6xVQSqsZr4.roa (hash: N8EgNl6vfYaF1Ts0sECLbCkME6l5AEsMF8hotYpNW4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:06:c6:48:16:35:63:b3:6b:be:3c:c7:e0:66:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Mar 7 02:00:58 2026 GMT
Not After : Mar 8 02:00:58 2026 GMT
Subject: CN=bb17ba047e65a3e63c97110dfbbba16b15cd25fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:ed:1c:c5:b3:2a:70:96:53:f1:e9:8f:45:
12:15:34:fd:13:a3:fe:72:a9:52:ab:f4:c1:a8:e7:
01:b1:6d:52:96:d1:4d:4e:59:b1:90:a7:40:a1:cc:
a6:b2:33:4d:ce:28:69:a1:13:45:04:6a:bc:3c:10:
cb:3d:cd:ec:86:aa:62:b8:3e:c3:b7:83:6c:f3:77:
e2:04:46:97:33:83:42:5b:e1:7f:95:65:4b:e6:3e:
c9:74:af:f5:b1:4f:2a:3a:b3:1e:88:ab:bf:ff:f0:
36:9d:ca:13:27:dd:0d:66:35:c6:f9:f4:fb:d9:0d:
9a:8d:2f:cc:c4:5d:15:41:47:64:82:a1:7d:c5:3a:
cd:6c:e6:b2:af:75:ef:b6:15:69:1c:1c:e3:0e:3b:
7c:ba:6c:f5:bf:e4:01:d6:d0:0a:3b:35:c6:b7:0b:
6d:13:6a:7c:80:da:0d:a7:eb:ea:61:0c:23:3a:4c:
26:2c:d8:61:7c:8d:39:e0:9b:af:3d:56:34:6c:54:
94:91:96:99:c5:b1:06:bd:11:89:50:9c:fe:ae:0e:
7b:64:79:bf:e8:a1:56:62:7a:fd:64:97:b9:65:a1:
b6:2b:8d:af:d5:b3:18:cb:ce:53:ef:1c:13:fa:3b:
89:96:2a:b7:2c:8d:2f:df:c4:3c:5d:2f:95:78:65:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:BA:04:7E:65:A3:E6:3C:97:11:0D:FB:BB:A1:6B:15:CD:25:FE
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b2:d3:98:35:52:f4:ff:a2:7d:f4:84:3c:bb:d9:18:6f:5e:
02:46:3c:85:a2:43:33:3f:4c:52:e4:e7:99:f3:00:61:9f:2f:
3c:59:90:a8:9a:41:76:4c:cb:ff:27:7a:5b:3f:3a:70:40:e5:
d8:3b:7d:07:cb:dd:f8:d3:5b:75:c0:f5:d5:9b:e0:45:e0:47:
1d:4c:3f:4f:25:b2:a0:6e:97:15:6c:80:60:89:2c:60:ec:7b:
6d:74:bb:1f:4b:db:fb:26:a0:84:23:ba:be:31:57:6e:b1:ac:
d4:21:01:d9:80:8a:06:8d:94:41:2b:b9:96:21:51:5d:a9:6d:
0d:44:97:6e:94:dc:c0:5e:fa:6d:fe:3a:91:d4:06:e8:0b:56:
68:0c:26:33:f4:31:8e:0b:fb:80:2d:80:4e:9c:d4:e8:1c:88:
6b:81:64:22:ab:cb:0e:37:74:c7:27:b9:e9:ad:4e:26:14:68:
32:d8:9d:61:c5:61:be:9e:10:70:b4:ac:3a:bc:54:ba:89:bf:
ce:5f:de:e8:ff:4e:90:40:af:b8:2f:19:ad:5b:e5:1b:f7:87:
9c:63:f0:31:e1:7d:95:88:42:e7:5e:43:8b:f3:79:1d:5f:c4:
1b:11:c3:9a:3e:b2:0d:f4:b8:88:bc:7f:34:32:0d:19:96:62:
97:47:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:09 2026 by rpki-client