Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: tVchmUWSNwbA5VYPzeVxB2nU3yAjxT/lQHX0zp9NXx0=
Subject key identifier: 03:87:E9:E1:A9:4B:39:BC:DC:25:B8:AC:C2:50:90:02:E3:F8:85:79
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 01A16F4978FA1BC661B3516EE3624D1B1154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0FE0
Signing time: Sat 24 Oct 2026 19:00:48 +0000
Manifest this update: Sat 24 Oct 2026 19:00:48 +0000
Manifest next update: Sun 25 Oct 2026 19:00:48 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: BOAWJL70Co/KjPRKlZecIXU+0eP8136f+yLKof+xlH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:78:fa:1b:c6:61:b3:51:6e:e3:62:4d:1b:11:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Oct 24 19:00:48 2026 GMT
Not After : Oct 25 19:00:48 2026 GMT
Subject: CN=0387e9e1a94b39bcdc25b8acc2509002e3f88579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:d6:09:24:65:40:da:45:0b:5e:08:98:b0:
68:14:72:04:a7:33:72:b9:d3:82:c7:f9:2f:be:a7:
74:9e:37:f2:87:02:21:ec:ef:36:06:19:4c:44:dd:
48:61:92:77:04:d3:44:a1:7c:b6:d0:94:46:39:d5:
c2:6b:ca:8e:3b:a0:a3:9b:4e:cc:6d:cc:e4:06:97:
13:ab:86:78:2b:0e:4f:2e:e2:c5:30:0a:97:e4:f1:
74:2f:d3:b3:f8:0e:0d:94:e5:5d:b1:23:6a:e4:f8:
98:53:f6:f9:eb:02:da:9a:59:43:f4:3a:51:91:22:
b6:ef:41:24:81:00:a9:8e:59:de:d1:de:64:e8:2f:
75:92:3b:fc:1e:42:2e:f0:ea:32:d9:b2:55:48:d6:
f9:02:b8:db:5c:af:02:97:75:e2:40:5e:48:f1:c1:
5f:69:35:f1:c5:40:57:1a:dd:1f:85:88:50:a6:0d:
7c:8e:6c:e1:7d:ba:26:cf:9b:2f:27:51:7e:b8:0a:
26:4f:4b:3c:93:6d:f2:d6:8f:69:c4:2b:d0:06:30:
a8:2d:06:9e:a0:0b:14:a2:24:92:44:e8:86:f1:53:
71:cc:d8:db:44:49:59:a5:38:d4:09:05:fa:7d:39:
cf:0c:75:4e:8a:fd:82:f8:e9:f1:85:81:a0:84:d0:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:87:E9:E1:A9:4B:39:BC:DC:25:B8:AC:C2:50:90:02:E3:F8:85:79
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9f:56:ad:0d:9f:5a:e3:5a:d7:a1:93:2f:b7:dc:a3:31:37:
00:1c:8a:2f:e0:92:4e:48:69:ec:2d:e8:73:77:77:a0:97:55:
29:be:00:15:a6:d5:b9:a1:bd:16:89:eb:06:92:92:bc:c5:e0:
8f:a0:f3:3f:5b:b3:6f:c0:58:cb:9a:54:59:7c:07:57:02:99:
19:2c:0e:a0:5f:85:0c:a2:99:aa:77:4f:ec:ad:d8:f9:a5:41:
67:c8:d6:19:2b:19:6a:d9:cf:4e:21:2d:ad:1b:61:53:20:b4:
91:e6:e0:1d:b0:01:11:b4:ed:8b:51:30:b0:d2:95:1f:68:09:
19:f3:7b:f2:53:87:74:b3:ae:b6:a2:e0:a5:44:ab:d1:d2:09:
50:06:c8:61:f6:49:89:6c:54:6f:62:7a:ae:cd:a1:f5:1b:77:
c3:98:cc:38:b2:07:59:c5:49:65:01:48:d8:68:ff:96:6f:04:
55:6c:46:2e:31:09:e5:d7:c1:78:24:73:07:bc:00:bc:46:e1:
7c:95:0a:b5:92:df:4b:85:68:52:55:01:df:29:ba:af:fa:49:
a9:cb:aa:01:be:b3:b5:65:e5:56:be:1e:9f:ed:ee:85:67:a2:
0a:79:26:8c:e9:92:a7:6b:0b:50:df:5a:c4:ab:e6:2f:40:da:
ad:ba:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:20:57 2026 by rpki-client