Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: /wqH3iAYnngtIjRoYZVtBFso3aHtPdvCJ2ayiiYuD9g=
Subject key identifier: 2E:8C:58:CC:A6:57:99:FB:47:9F:50:C1:6F:63:35:65:B2:93:89:3E
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 01A06C82BF200D67781B8ADD5D24FF804425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0F5A
Signing time: Fri 04 Sep 2026 13:01:42 +0000
Manifest this update: Fri 04 Sep 2026 13:01:42 +0000
Manifest next update: Sat 05 Sep 2026 13:01:42 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: MiH9OIQe6TBVe0pxooJtCZhAWt+cLao8HLeyMcfAUnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:82:bf:20:0d:67:78:1b:8a:dd:5d:24:ff:80:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Sep 4 13:01:42 2026 GMT
Not After : Sep 5 13:01:42 2026 GMT
Subject: CN=2e8c58cca65799fb479f50c16f633565b293893e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:24:ee:08:86:ef:fb:c6:0c:b5:19:87:df:
37:86:22:f6:7c:47:7f:11:f7:b8:9c:8e:09:21:21:
3f:05:b4:45:8b:f4:34:ef:55:d3:c5:d4:03:54:22:
76:fa:b4:2c:dd:dd:8b:48:8c:d5:72:fe:d0:3a:aa:
0f:73:77:ec:cd:5d:ac:46:e7:cb:76:b1:c9:d2:80:
47:98:bf:54:cd:5e:47:77:b7:de:67:72:b2:6b:eb:
54:93:d0:b4:8c:3b:93:65:ad:ca:b8:24:e8:d0:6e:
48:b7:5e:f0:42:a5:fb:b1:95:80:fe:11:fd:72:31:
88:9f:5f:32:7b:ff:53:f4:ef:7f:84:6f:81:55:f6:
98:07:36:f0:7a:4a:d3:4d:69:b2:22:2b:80:b6:4c:
49:e7:bc:e6:9e:1b:21:5e:b8:88:88:84:e5:49:39:
5b:62:24:97:59:ab:cd:5b:91:b1:2a:d9:88:84:ee:
1d:ca:3f:f7:22:7f:29:2d:ad:98:d3:d9:4b:1c:74:
d9:15:56:69:b1:84:26:ec:a8:9f:47:14:f0:61:9a:
a6:72:0f:12:d5:5f:4f:1d:e2:ab:50:bc:9d:23:cf:
c3:52:30:22:df:0e:d6:e2:26:68:61:ec:05:08:74:
12:14:c5:8d:de:ea:45:27:59:00:ac:f0:96:6f:26:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:58:CC:A6:57:99:FB:47:9F:50:C1:6F:63:35:65:B2:93:89:3E
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9d:23:0e:44:31:6b:da:cc:30:bf:6f:8a:c1:52:9f:d5:ef:
ef:76:af:3e:e2:3f:c0:16:b7:bc:d7:b9:89:e1:cc:fa:f0:d0:
4e:2f:0d:72:90:6d:18:fb:25:dc:85:ca:cd:3a:eb:3b:84:dc:
db:08:70:ce:53:e2:6f:1b:7d:31:85:d4:a3:47:f4:c2:55:d9:
11:79:c1:36:4b:4c:c2:ed:ba:5e:70:22:3a:85:c7:fd:8d:9f:
2e:e2:d3:81:c7:aa:4c:a7:63:cb:a5:28:7f:a6:8c:f5:fd:fa:
f5:44:2f:42:1c:2c:12:bd:15:25:8b:c6:c9:89:c8:b8:d2:eb:
c9:61:0b:d1:23:76:e2:8c:f5:59:63:a8:45:1a:d5:44:7a:b4:
4c:51:94:ba:b4:24:9a:d6:f9:34:0f:f1:c3:f1:42:06:15:a8:
d0:74:a3:7e:68:71:80:73:b9:05:e8:b5:dd:fb:f7:a0:a1:e5:
63:6a:18:cf:9a:1c:96:4a:37:0d:6e:75:36:86:5c:67:b7:9c:
a5:72:d0:c0:b3:76:6e:eb:71:1c:1e:b8:d6:03:4e:fa:78:a4:
35:42:67:63:e3:f9:bb:b6:a5:7a:78:e4:2a:64:2c:ad:81:24:
5c:06:59:c3:2a:c1:cb:64:95:b8:5a:c7:29:e3:7c:83:69:ed:
c5:21:a5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:39 2026 by rpki-client