Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: MUbQzWm3qkM58mFZUMLjgcjA1dLmnNa1/kDh/VVAebw=
Subject key identifier: 0E:3D:70:CB:5B:56:FE:D2:79:C5:54:18:19:F6:0D:71:2E:4D:0E:BE
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 01A177037B1C37B6251B066AB82B91D980CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0FE4
Signing time: Mon 26 Oct 2026 07:01:19 +0000
Manifest this update: Mon 26 Oct 2026 07:01:19 +0000
Manifest next update: Tue 27 Oct 2026 07:01:19 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: bQJpnHJAsGo9eASaGO/oWWs5ZV9DSBkvekWa2LmoWeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:7b:1c:37:b6:25:1b:06:6a:b8:2b:91:d9:80:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Oct 26 07:01:19 2026 GMT
Not After : Oct 27 07:01:19 2026 GMT
Subject: CN=0e3d70cb5b56fed279c5541819f60d712e4d0ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:a2:b1:3f:7e:9d:54:3c:9a:89:9a:e9:23:
6e:dd:d3:9c:7b:23:1a:8d:65:bb:57:34:bb:c3:8b:
53:c1:57:42:1f:46:78:24:bf:af:a9:fb:f8:5a:4c:
15:e3:68:ff:81:41:29:7f:94:d3:e7:57:5e:ec:1c:
5d:3e:7f:c0:c7:04:14:48:25:5e:92:71:d8:bc:34:
f9:ae:55:cb:26:c3:f0:96:15:a5:61:51:0f:78:d7:
a0:88:35:f2:e6:e3:40:18:86:1f:ba:1f:14:e2:32:
52:8b:af:b3:20:b2:a8:d2:c2:85:d2:14:a5:16:bb:
ac:23:76:8b:ed:cf:fc:d6:b1:06:7d:71:64:6b:5e:
a9:ba:19:04:ca:66:3a:f0:2b:31:08:a7:21:d2:3e:
19:cf:2b:e5:81:82:52:16:00:4d:55:20:9a:70:4c:
61:51:fa:90:c8:9a:d9:49:8a:ca:3d:b9:1f:a3:81:
85:08:2c:6e:b8:aa:63:8b:bc:6f:28:88:d4:f6:27:
f5:c3:cd:47:d8:6b:c0:5f:d8:f3:76:eb:63:2a:a9:
b8:bc:e6:0b:c6:69:ed:27:fc:9e:0f:66:d2:f2:b9:
34:0d:ac:2c:cf:61:23:8b:21:33:94:9e:6a:3e:ac:
c8:a3:ba:4f:43:6b:4f:ca:84:16:63:36:8c:33:67:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:70:CB:5B:56:FE:D2:79:C5:54:18:19:F6:0D:71:2E:4D:0E:BE
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:af:79:e5:ba:f5:1e:a2:c8:01:dc:b4:ff:25:ff:a0:9f:08:
c0:f2:a2:88:35:2f:e6:e6:17:51:81:de:4c:29:69:4d:9e:bd:
d1:65:c1:37:3a:73:ab:77:1b:10:9b:f8:ee:8f:68:68:f7:34:
b5:88:93:0c:cd:ff:96:47:67:c6:f4:3f:2c:2d:be:44:fc:58:
20:e7:ff:cb:11:78:7b:02:d2:b0:4f:7c:2b:fc:95:2c:23:25:
14:6d:bd:0a:fd:3a:7a:42:a9:cb:88:1a:ef:df:19:56:7e:13:
35:6b:1e:e5:6d:37:fa:49:d9:bc:3a:6d:a1:3c:7a:19:3d:b2:
4a:e2:ec:0f:1e:0b:b3:f5:63:8e:e4:36:69:6c:3b:d1:6d:88:
b0:36:4e:d8:40:09:78:1a:18:b9:3b:cd:76:87:3a:2f:cd:27:
39:4c:2e:d3:b5:d1:ac:71:ea:37:e7:96:44:9e:3d:82:13:32:
7e:33:b8:4f:63:58:9d:56:66:76:36:17:65:91:98:64:39:e3:
94:64:27:e8:a5:7f:f6:f9:90:93:8e:a5:6b:b3:b9:dc:fb:25:
ba:45:5e:5a:98:ac:ae:8e:95:aa:22:6d:24:1b:1d:44:6e:14:
e5:2c:19:5a:d4:2a:3a:91:d1:3c:67:88:87:91:66:d4:02:dc:
43:0e:e3:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3A3scN7YlGwZquCuR2YDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2
MDk5ZjUwHhcNMjYxMDI2MDcwMTE5WhcNMjYxMDI3MDcwMTE5WjAzMTEwLwYDVQQD
EygwZTNkNzBjYjViNTZmZWQyNzljNTU0MTgxOWY2MGQ3MTJlNGQwZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqSisT9+nVQ8moma6SNu3dOceyMa
jWW7VzS7w4tTwVdCH0Z4JL+vqfv4WkwV42j/gUEpf5TT51de7BxdPn/AxwQUSCVe
knHYvDT5rlXLJsPwlhWlYVEPeNegiDXy5uNAGIYfuh8U4jJSi6+zILKo0sKF0hSl
FrusI3aL7c/81rEGfXFka16puhkEymY68CsxCKch0j4ZzyvlgYJSFgBNVSCacExh
UfqQyJrZSYrKPbkfo4GFCCxuuKpji7xvKIjU9if1w81H2GvAX9jzdutjKqm4vOYL
xmntJ/yeD2bS8rk0Dawsz2EjiyEzlJ5qPqzIo7pPQ2tPyoQWYzaMM2cRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA49cMtbVv7SecVUGBn2DXEuTQ6+MB8GA1UdIwQY
MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt
OGM5ZmNiYjNlYzUyLzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy
LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq955br1
HqLIAdy0/yX/oJ8IwPKiiDUv5uYXUYHeTClpTZ690WXBNzpzq3cbEJv47o9oaPc0
tYiTDM3/lkdnxvQ/LC2+RPxYIOf/yxF4ewLSsE98K/yVLCMlFG29Cv06ekKpy4ga
798ZVn4TNWse5W03+knZvDptoTx6GT2ySuLsDx4Ls/VjjuQ2aWw70W2IsDZO2EAJ
eBoYuTvNdoc6L80nOUwu07XRrHHqN+eWRJ49ghMyfjO4T2NYnVZmdjYXZZGYZDnj
lGQn6KV/9vmQk46la7O53PslukVeWpisro6VqiJtJBsdRG4U5SwZWtQqOpHRPGeI
h5Fm1ALcQw7jDA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:40:49 2026 by rpki-client