Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: ACvLAzVv2kpfIbclSNRox4MBfv5H5i3AzfSvU/OYMk4=
Subject key identifier: 7E:DF:A5:17:F0:3F:45:C3:2E:C9:ED:AB:8D:45:83:7D:E6:84:CC:58
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 019D296121C7B8DA58607987AFA19BC32DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 09:02:04 +0000
Manifest this update: Thu 26 Mar 2026 09:02:04 +0000
Manifest next update: Fri 27 Mar 2026 09:02:04 +0000
Files and hashes: 1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: iBfACHV2myDJGjtU1G9TtKOJv6t6toLDK5S+YAmZCrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:21:c7:b8:da:58:60:79:87:af:a1:9b:c3:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Mar 26 09:02:04 2026 GMT
Not After : Mar 27 09:02:04 2026 GMT
Subject: CN=7edfa517f03f45c32ec9edab8d45837de684cc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:f1:78:90:b4:8e:b5:e4:fb:b8:84:64:c7:
5d:98:e6:90:c9:6b:8f:dd:19:3a:de:58:28:f9:38:
6b:f9:bd:38:1e:bf:f2:06:88:5a:c3:32:c2:b5:e8:
5a:fa:66:b2:e5:bf:99:25:48:61:1e:15:1b:2e:b0:
af:a4:f8:a6:9b:47:3a:cc:ea:ef:51:7d:03:cd:67:
7e:99:4f:f1:69:aa:df:c2:a9:89:e3:db:73:15:86:
ae:e8:d9:14:31:c9:a5:75:91:1e:96:4e:de:92:bc:
fe:d4:ef:81:b5:1c:9e:48:f8:a0:a7:e1:b3:7d:13:
b8:a5:43:4e:e2:bc:56:e9:b3:3d:aa:2e:6f:bc:c4:
78:c9:35:ad:32:eb:f9:50:8f:fa:b2:64:57:52:b9:
31:27:8a:3b:53:58:fb:cd:cd:66:3e:47:ff:95:6e:
2c:90:31:e5:d7:d6:e3:27:39:22:7b:c6:f4:f0:6c:
6c:7d:d1:34:e8:48:14:a3:59:1a:49:11:9c:8e:fb:
46:3f:a7:ef:10:54:a2:f1:20:bb:26:6e:3a:bf:31:
2d:f0:cf:3f:0c:0f:15:13:e8:09:53:a6:3f:ef:da:
d1:17:73:95:4b:c5:fe:69:ae:68:22:61:34:a9:e4:
0d:0c:f9:b7:ec:9b:35:bc:19:51:f7:bf:40:9e:dd:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DF:A5:17:F0:3F:45:C3:2E:C9:ED:AB:8D:45:83:7D:E6:84:CC:58
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:5d:86:34:48:69:30:9e:f3:1e:f7:1f:8e:c6:03:18:04:19:
57:0b:b6:15:37:de:cd:bb:be:fa:02:41:33:e0:f0:1e:cf:26:
25:c7:79:a0:cf:67:c4:49:fa:a5:1c:10:d3:78:0b:90:17:79:
eb:80:83:29:3d:ab:2f:0b:d5:32:cd:41:c8:a8:1b:09:1d:03:
7f:8b:f7:d3:2d:b5:cf:7a:8d:7f:d6:f6:07:23:35:c5:b7:99:
6e:c5:46:3a:f0:49:be:d1:c9:f1:f8:de:57:ef:13:14:e6:00:
78:bb:33:d0:fc:48:51:19:f9:d1:61:f0:1e:83:fa:2e:c0:56:
65:df:c0:d5:72:fb:60:ac:b8:37:42:7d:cf:f7:5f:83:9f:cb:
d0:29:24:4b:25:b6:1a:37:44:18:86:6c:9e:4c:05:a8:ea:01:
25:09:55:4a:b9:58:08:0b:f8:79:b0:77:bc:e0:03:9c:6a:b1:
75:72:8d:71:de:46:b4:ba:ed:0d:6d:82:27:3f:48:36:c7:b7:
fe:8a:2d:03:eb:71:10:68:3b:c8:62:45:86:48:60:23:2a:77:
1b:09:a7:e8:36:74:68:65:e3:a9:68:6b:4c:c4:cd:17:80:4a:
48:f1:f7:d4:7e:7e:26:2f:cc:4d:ed:3f:b5:9a:68:f5:30:78:
73:ec:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:18 2026 by rpki-client