Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: cxQxj0PHV94RqX3AEfA/Kvl4qguv8VmgO4xDRkbhGYs=
Subject key identifier: 06:2A:6F:DB:05:9F:06:DC:25:D5:A8:EA:FC:76:F2:87:B7:0C:C5:D1
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019DAF7D19B122A784613EAC85D006695662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0DEF
Signing time: Tue 21 Apr 2026 10:01:44 +0000
Manifest this update: Tue 21 Apr 2026 10:01:44 +0000
Manifest next update: Wed 22 Apr 2026 10:01:44 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: +45P2au1tq/2FfUwOoeUAejZCd55XZTpJbmCBb56wl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:7d:19:b1:22:a7:84:61:3e:ac:85:d0:06:69:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Apr 21 10:01:44 2026 GMT
Not After : Apr 22 10:01:44 2026 GMT
Subject: CN=062a6fdb059f06dc25d5a8eafc76f287b70cc5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:ae:44:41:05:a1:2e:36:6c:ed:26:31:23:
40:5c:fa:60:09:88:20:a1:e7:8b:9c:92:ae:7b:9a:
65:f0:b8:b1:e7:de:6e:53:b6:f2:75:24:95:2d:9a:
2a:91:22:1f:c8:a0:7b:93:77:87:00:5c:29:f3:0d:
95:e6:fd:e9:8c:ff:f5:bd:92:74:d6:55:c4:39:f2:
fc:f0:38:48:50:28:85:0e:5c:9a:10:cb:3f:5d:30:
11:20:0f:8f:b0:c5:da:82:df:9b:84:b1:ef:4c:11:
ef:95:c9:d8:25:3f:1b:7a:b4:29:bb:84:4a:98:d7:
12:27:d5:da:27:e0:31:7a:d6:2b:f7:c6:e1:a0:72:
d0:35:ac:a7:b5:5c:33:a1:e2:c6:1e:9b:fa:75:ae:
2f:a7:e7:ef:6d:86:31:26:a3:57:30:e3:db:0a:8d:
05:43:37:7e:32:2d:07:a2:36:81:be:eb:92:d1:44:
55:89:d3:6a:60:f2:1f:f1:5b:4e:3d:4a:c3:ab:f1:
76:23:2c:a5:38:5c:1f:1d:54:8c:5c:d8:58:d5:de:
d0:f7:cd:43:45:47:87:47:d7:a9:d8:1e:fe:7a:bf:
74:84:49:76:fb:6f:db:36:5c:fa:ce:e4:eb:48:07:
89:8b:18:6b:e5:a9:49:2d:2c:e4:c9:7e:e2:2e:d5:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2A:6F:DB:05:9F:06:DC:25:D5:A8:EA:FC:76:F2:87:B7:0C:C5:D1
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:e1:05:35:0a:0e:01:21:82:d5:ce:14:c7:8d:e9:84:eb:
e1:e3:7f:97:7f:da:a3:53:12:79:92:86:1e:ac:88:39:41:04:
58:6d:b0:7a:0d:71:02:68:41:85:de:bd:64:25:9d:d2:7b:b9:
2b:15:e7:29:6a:da:52:3e:6f:ae:0a:46:3e:09:3c:73:66:1d:
f3:ac:04:da:64:7c:42:ff:2a:31:23:24:9f:3b:24:97:16:09:
41:24:f0:d8:a9:94:1b:cf:94:c4:38:ce:00:54:b9:6a:46:02:
02:62:45:38:6f:bd:35:3e:32:29:47:d7:99:30:6b:29:5d:81:
a4:eb:db:71:8e:a9:95:82:ad:d4:fa:31:97:bf:b8:a2:12:62:
d0:4e:aa:01:5e:25:cd:b9:57:b9:73:06:51:01:0e:32:ca:e1:
df:1e:e2:af:50:b9:e6:8c:dd:74:e7:10:b0:7f:dc:a7:7e:58:
b9:40:0c:d8:3b:b1:6b:2d:5a:5c:07:09:48:2b:76:4a:23:37:
3b:b4:f3:22:3e:62:76:f7:f7:e2:60:ed:59:7c:d1:de:5b:12:
9c:0f:6f:12:23:42:3b:ee:dd:81:32:38:2b:19:9d:f7:e7:4c:
fe:8e:df:e4:f2:47:b7:25:b4:13:f5:6a:47:a1:a9:dc:e2:b0:
55:f2:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:06:41 2026 by rpki-client