Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: I5yF38OW/a73aL0N9iPox/i6GjaC4L+IEV7vithtQ4k=
Subject key identifier: E2:57:05:02:85:B0:AB:FA:CD:20:D8:E3:96:CE:41:25:61:92:19:D1
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019D37F6E67EF4C237CC66B6E06DB0C950BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 092A
Signing time: Sun 29 Mar 2026 05:00:20 +0000
Manifest this update: Sun 29 Mar 2026 05:00:20 +0000
Manifest next update: Mon 30 Mar 2026 05:00:20 +0000
Files and hashes: 1: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: 3uAOsLdD+HQaBSwKPZopML28KQhyQogR6AzOEnnhcPM=)
2: ZgpRmr9n4R_HW3fgl3MaLI7Js-k.roa (hash: q4viv2fxAfHFR/GFrBCoNhBLbbosPZIEVECgSP1MwQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e6:7e:f4:c2:37:cc:66:b6:e0:6d:b0:c9:50:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Mar 29 05:00:20 2026 GMT
Not After : Mar 30 05:00:20 2026 GMT
Subject: CN=e257050285b0abfacd20d8e396ce4125619219d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:83:3b:6e:02:eb:12:4c:06:d4:bf:90:c2:
57:bb:4d:40:ef:69:20:7c:22:e2:77:65:84:af:b6:
8d:d2:56:95:4f:ef:e9:29:52:46:c3:fb:36:6c:e2:
0f:af:0d:f9:89:a5:57:b8:ec:c3:b5:29:4a:df:5c:
c7:51:dc:77:87:75:d7:a8:fd:a6:34:4e:bc:17:89:
7d:86:47:68:c2:ed:69:a2:8e:55:f1:4f:c8:0a:9d:
5e:18:e6:ea:62:33:66:94:e7:33:b1:1d:05:a7:1a:
08:32:ad:3d:65:21:3f:f8:df:11:69:a3:1b:0d:f0:
4b:c0:bf:9b:0c:81:ab:f8:80:9c:92:4a:4f:a5:e6:
d2:9d:b1:c3:32:83:70:63:f7:39:23:f1:40:42:1d:
da:d3:36:ff:fa:8d:cf:93:35:69:f6:8f:83:de:98:
e2:dc:3b:b5:c2:86:4a:57:d2:9f:d7:ad:85:86:1d:
14:9c:4d:6d:c5:7b:57:b1:8e:b2:02:d0:29:d7:77:
b9:3e:39:20:f5:1f:15:53:1b:f6:68:69:53:63:d4:
ec:84:1c:26:81:8f:31:e7:53:bf:e9:68:d7:5b:63:
7e:f7:2a:b3:a5:eb:03:f9:a0:c5:76:21:15:d3:9d:
42:ad:cf:92:1c:78:2d:65:cb:8f:f3:b3:e6:f4:5d:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:05:02:85:B0:AB:FA:CD:20:D8:E3:96:CE:41:25:61:92:19:D1
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9e:f6:8d:3a:e3:d5:3e:3c:92:60:41:b0:f8:8a:a4:ab:bb:
46:db:ee:04:15:65:94:1b:1a:56:80:fd:8b:f8:0f:af:d7:b3:
6f:65:b1:05:75:00:23:ff:cc:32:5b:43:b7:04:02:29:99:04:
eb:7c:b6:f0:de:96:23:cc:cd:8c:d9:70:58:d3:20:19:e6:7f:
ca:59:71:a4:76:f9:35:06:9d:d2:59:07:6c:b9:c9:89:04:a3:
f0:64:80:18:e9:9b:01:3f:d5:23:ab:41:b4:8d:39:e0:da:75:
8d:f2:17:0f:eb:4f:b9:1d:c5:82:64:6c:53:16:ac:6e:24:81:
5d:6a:ad:6b:d8:ec:4a:a1:d1:1e:7e:18:53:f9:4c:5e:ae:4e:
51:a8:0e:aa:45:2d:cd:f0:e9:ee:85:1e:64:d2:09:3b:ad:74:
8c:17:fc:c4:11:78:31:b7:66:66:da:63:5d:16:fb:a5:b2:d7:
a7:00:5a:a0:7d:ee:c7:54:9a:93:8c:f3:93:fd:6e:c4:7e:bb:
2e:fc:00:3a:9f:6d:c4:92:52:96:31:98:49:1f:d4:ee:c5:ca:
2f:57:89:0b:f4:ff:61:ed:e4:47:75:aa:ba:13:c7:14:f2:0e:
a4:d1:45:eb:52:66:49:60:7f:ff:e0:83:5a:98:60:ad:a6:0b:
33:9f:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:33 2026 by rpki-client