Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: A31wqIfFWRSj+fHWcrNd2bcp1Ntfjap6KKLsJ68gL4M=
Subject key identifier: 2B:47:2C:C4:38:55:D9:E2:B6:29:31:63:CA:FD:D8:FB:6D:A3:85:90
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019CC7BE4C1F3BF7A63A592ABC487901D36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0D77
Signing time: Sat 07 Mar 2026 10:01:03 +0000
Manifest this update: Sat 07 Mar 2026 10:01:03 +0000
Manifest next update: Sun 08 Mar 2026 10:01:03 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: gRnYP2BdDFJLpd6b5co3XtJqhiXFW2KOOaoSOtLAaMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:4c:1f:3b:f7:a6:3a:59:2a:bc:48:79:01:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Mar 7 10:01:03 2026 GMT
Not After : Mar 8 10:01:03 2026 GMT
Subject: CN=2b472cc43855d9e2b6293163cafdd8fb6da38590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:db:25:ad:c8:16:6e:c7:8a:5e:f5:9c:79:
bd:93:af:a4:c7:94:ab:86:d1:67:c7:15:1a:cc:b5:
15:6b:c5:04:0d:03:cc:94:24:61:9e:0d:1f:c4:58:
b8:1d:da:8b:33:d1:43:16:8f:42:84:d8:b4:c9:61:
b0:43:16:5e:9f:99:17:24:9e:c2:be:e0:ac:73:37:
59:d9:4d:ae:fd:39:6a:cc:10:c6:9d:d2:59:21:13:
e2:82:db:34:04:bf:1f:10:e8:b0:2a:51:63:61:cb:
58:79:17:b9:f7:59:6f:43:04:a2:a8:e7:cf:7a:e8:
84:17:69:df:a8:0d:99:d4:b4:02:50:1a:37:e6:2f:
02:3d:bc:c8:a2:c4:04:2f:8c:31:ed:11:c8:6a:2c:
dd:73:02:ac:20:8f:03:c9:2d:18:68:d0:c1:3e:c4:
68:56:c3:a7:58:10:b9:34:60:79:1a:02:ba:ee:34:
0f:34:72:ab:af:49:ec:f4:c4:44:2d:74:98:39:36:
8d:0a:9f:41:2e:55:51:b2:0e:78:ec:0d:8c:f1:b0:
a5:43:33:db:34:68:61:d6:a4:08:28:2b:af:9f:f6:
fa:d9:a0:f6:b3:a3:80:7d:d0:18:59:ab:ea:79:3a:
93:e5:cb:cb:ed:4c:e7:8a:62:81:25:12:57:fa:67:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:2C:C4:38:55:D9:E2:B6:29:31:63:CA:FD:D8:FB:6D:A3:85:90
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:7c:01:2a:56:9c:a0:ac:08:13:14:36:85:18:de:71:d7:
57:8e:34:6d:d9:47:c8:df:47:6c:51:92:c2:7f:67:70:c4:cd:
da:2d:8e:77:73:82:b6:c6:a4:d5:ea:38:7a:b8:e5:fb:9a:36:
34:32:15:a3:63:9d:a5:3e:d9:77:a7:51:a7:f5:29:60:fa:c1:
47:51:ff:98:3d:62:d6:0c:93:07:c6:d0:44:68:d4:40:25:05:
cf:77:4c:47:fd:4c:d0:f7:ae:25:0e:1c:6f:96:77:3c:7e:a2:
8e:b9:eb:1d:20:5b:a3:f6:1a:d5:3e:56:fe:9c:69:a7:3a:0b:
b1:19:09:f9:76:fa:1b:c8:61:7e:a3:2f:d2:77:ef:65:75:1d:
6b:a3:25:ef:df:f5:13:b7:26:9e:09:ba:68:11:ee:e8:68:ed:
0e:e0:9c:6a:63:5b:60:a0:02:d4:40:ee:6d:43:3e:19:d1:02:
df:19:b0:32:57:93:ec:1e:3a:13:81:ba:23:04:6f:61:a5:26:
87:14:13:da:94:8a:21:9f:c3:8c:c5:78:6e:60:11:80:57:37:
2f:e7:0e:45:34:43:15:e0:fc:dc:b6:62:49:cd:9d:bb:22:28:
8d:3d:86:ce:26:08:53:2f:b2:d2:8f:2e:ec:a4:30:84:f4:f2:
a7:00:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:43:59 2026 by rpki-client