Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: 4bsN8+vBxeYTNDxw2yVyXLtMTjlVT5XyGzQq1rFxkhY=
Subject key identifier: 3C:EA:E7:1A:06:62:2E:C4:FE:B7:E1:D5:9D:AA:8D:A7:5A:2A:94:6B
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019F84C43CB3BEFCD05D198B19C31CC5E7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0EE2
Signing time: Tue 21 Jul 2026 13:01:20 +0000
Manifest this update: Tue 21 Jul 2026 13:01:20 +0000
Manifest next update: Wed 22 Jul 2026 13:01:20 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: wNND7RmJesJbc1sbSRXLNTUEXp/k08PL6ZwBTFl4NFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:3c:b3:be:fc:d0:5d:19:8b:19:c3:1c:c5:e7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Jul 21 13:01:20 2026 GMT
Not After : Jul 22 13:01:20 2026 GMT
Subject: CN=3ceae71a06622ec4feb7e1d59daa8da75a2a946b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:c3:77:2e:6c:70:8c:ae:0c:a6:6c:84:f9:
37:40:e8:96:67:18:7a:c3:5e:4e:36:70:53:e8:d4:
56:be:02:42:9b:0c:b1:93:44:dd:9e:ae:64:1a:a1:
ab:73:06:82:d1:69:a4:02:cc:17:e5:7f:c4:58:bb:
d0:6e:e1:1b:bd:9f:b3:07:b1:2a:69:c3:75:2e:2b:
a2:f9:a8:64:33:72:d8:47:2e:b7:ed:b2:88:25:07:
37:43:16:ea:39:28:fa:d9:38:4f:6d:9f:f9:79:6f:
b6:54:cc:5b:95:f3:8b:cb:75:f8:97:e6:d2:38:07:
80:1b:2d:d5:3a:5e:da:53:52:a4:2c:8f:e6:4f:48:
ee:09:b7:ad:45:5d:2f:ee:00:2e:4f:82:a7:74:7f:
e6:be:14:b5:bc:9b:f1:57:83:ce:b9:c2:ba:b3:6a:
01:6a:7d:c0:f6:97:4b:92:08:32:81:23:29:71:23:
65:9e:75:41:9d:9e:d4:f5:1e:b7:dd:16:3b:af:d8:
1c:ea:d1:25:02:cc:4c:f6:a2:63:2d:1d:56:32:56:
38:11:c1:50:b9:a8:8f:5e:40:a3:04:91:bb:22:01:
4e:e9:24:e9:f6:21:73:e5:4f:c6:7c:2e:14:66:70:
a0:e6:55:64:7e:ef:db:7d:e2:3c:2d:1b:cf:92:ca:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:E7:1A:06:62:2E:C4:FE:B7:E1:D5:9D:AA:8D:A7:5A:2A:94:6B
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:df:ba:95:a3:b2:09:c2:78:9a:4f:8f:c8:36:04:5c:c1:8e:
d1:26:be:44:53:bb:10:72:df:af:6c:79:5c:ff:49:ed:4e:6e:
2b:ec:91:f5:de:58:93:42:96:9a:d6:12:6d:14:e8:7a:b2:6c:
c9:88:85:0a:c0:f2:eb:5d:69:af:4b:ba:aa:da:4d:48:73:e6:
f4:32:1a:cf:e9:40:02:0d:0b:d1:d4:54:0a:9d:9c:64:f6:6d:
82:76:d8:63:4d:ff:fd:e5:a3:65:c2:2f:3c:56:1a:3a:53:50:
a6:b3:8c:34:60:46:86:9d:d7:23:ed:fa:9a:42:13:88:2f:03:
06:0a:dd:37:f0:11:25:09:5e:f8:7e:8d:94:64:8c:2d:25:ae:
9f:e8:31:fa:0e:d6:3e:d1:8e:b4:d5:25:a7:69:3a:61:51:72:
4f:40:f0:6d:eb:e4:af:c3:fd:01:b0:67:2e:b5:3b:e2:90:c3:
e4:68:24:5b:6d:03:82:1e:b0:25:d1:6d:a9:b0:ce:6b:48:20:
53:ca:ea:91:86:c9:04:55:33:6e:3b:56:a8:d3:fd:3f:66:fe:
ce:ed:fd:34:07:72:59:f2:dc:60:8e:5d:f1:13:e4:43:0e:81:
e6:a8:a2:05:02:27:a6:29:6d:20:bb:80:3a:fb:6b:e3:fa:72:
b8:80:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:36:49 2026 by rpki-client