Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: TsGECp7KYa/3cGRCwPp1FQUF1ejtsqXZsIXfzQ8kvwQ=
Subject key identifier: FE:14:3B:99:90:19:C0:5F:CC:C5:CE:AF:70:51:3D:2B:B7:D3:62:3C
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019D3941A71E50AE149862988354E4AF0FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 037B
Signing time: Sun 29 Mar 2026 11:01:37 +0000
Manifest this update: Sun 29 Mar 2026 11:01:37 +0000
Manifest next update: Mon 30 Mar 2026 11:01:37 +0000
Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: Ktu50obR6HdiYPeMPF5egtNHTo7r5PM23FDSK/XoQSc=)
2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a7:1e:50:ae:14:98:62:98:83:54:e4:af:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Mar 29 11:01:37 2026 GMT
Not After : Mar 30 11:01:37 2026 GMT
Subject: CN=fe143b999019c05fccc5ceaf70513d2bb7d3623c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:8b:18:f0:c6:91:5c:4b:dd:e5:42:c1:8b:
b4:f8:f2:19:5c:ce:c1:78:fa:44:c8:46:ad:00:0d:
3f:5a:35:41:cc:95:11:18:98:eb:64:d0:29:24:e6:
13:07:a6:7b:da:1d:53:98:6e:85:15:45:62:7d:14:
5e:24:67:bd:8d:fd:75:37:aa:e2:de:43:9f:b1:48:
13:7b:1a:6a:fc:c4:ab:fa:15:86:4a:b1:4c:ac:8c:
8b:56:bb:39:9e:84:d1:79:90:09:87:9c:4e:bd:c3:
fe:f1:f7:f5:14:be:dc:9c:a8:72:80:21:44:ff:b2:
51:2d:02:34:d7:8d:2f:56:3d:03:f6:38:94:cf:e7:
e3:04:08:7a:ef:42:79:d5:24:12:db:66:8b:3b:19:
72:cf:04:27:73:53:a5:38:d6:1f:84:a9:ea:64:35:
7a:d5:81:b4:5c:b8:4d:c1:d8:99:a6:2b:1d:5f:0c:
ca:d8:32:7b:b5:8c:f7:60:4d:7b:06:27:06:45:06:
2b:bf:9a:00:6c:96:94:4f:53:25:15:02:d2:24:ea:
e4:66:09:bd:f5:af:99:bd:b8:f6:d3:b5:dc:78:58:
27:d0:2c:79:06:15:8c:40:c8:04:10:50:aa:72:0e:
e7:2d:70:28:40:af:26:d0:2b:f2:33:3f:6e:94:3e:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:3B:99:90:19:C0:5F:CC:C5:CE:AF:70:51:3D:2B:B7:D3:62:3C
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:57:4c:ec:5f:3d:ea:34:e9:32:fa:ef:c7:d5:14:21:4e:
1d:06:47:79:a9:d3:2f:d1:00:25:fc:28:7c:9b:2b:c8:ef:41:
ef:e9:b1:ed:f8:ee:e1:2f:a9:34:da:c5:14:ec:cf:c5:6e:02:
c1:6c:91:9d:ef:89:69:19:e5:68:38:64:18:88:33:9f:9d:55:
96:a3:81:53:a5:ff:59:25:60:a6:a2:ac:1b:2f:b9:87:bd:8e:
ca:e8:79:27:61:1e:96:af:c0:68:45:2f:2f:45:c6:18:76:5d:
d0:22:0e:34:fd:91:fe:69:9f:e0:41:3b:90:00:cc:37:90:9e:
5a:e9:0f:ff:a4:2d:e3:a6:7d:f9:7e:33:2d:62:15:5e:a4:f6:
71:93:8c:16:8e:6c:76:94:5a:ec:f6:c6:99:45:2e:0f:99:ed:
1d:42:ff:14:58:18:5b:eb:4b:20:9e:98:a1:7a:ac:59:3a:ff:
bf:80:5d:82:67:3d:40:86:b1:5c:ec:8c:eb:01:37:0f:d8:26:
5c:46:8e:bb:78:80:e3:83:32:97:ed:6a:8a:5e:2f:fd:a6:4e:
27:8b:f3:43:9b:2c:ef:1a:e4:c6:42:20:ad:07:be:40:3d:3a:
f9:8a:e7:a4:ab:d6:d5:11:21:c7:00:d7:1b:97:33:81:06:3e:
52:41:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:29 2026 by rpki-client