Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: 1kLdtMMvY97HVTEJo8VWWESM5xRtcEhDh2QS7lSYmqM=
Subject key identifier: 09:4B:86:65:0B:64:F1:7C:80:90:58:2A:4F:0D:2A:A5:32:84:A1:A0
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 01A0E3627B42865A981E1B4F0831B3E5C11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 15:01:17 +0000
Manifest this update: Sun 27 Sep 2026 15:01:17 +0000
Manifest next update: Mon 28 Sep 2026 15:01:17 +0000
Files and hashes: 1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: 3o4EBwwc/sDuSDYbF0KYo9Fynm6EFdZRck22oojBQyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:7b:42:86:5a:98:1e:1b:4f:08:31:b3:e5:c1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Sep 27 15:01:17 2026 GMT
Not After : Sep 28 15:01:17 2026 GMT
Subject: CN=094b86650b64f17c8090582a4f0d2aa53284a1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:c0:80:1d:8f:71:ca:3f:bf:cc:c1:7d:a7:
18:24:45:5e:9b:d2:bc:88:fc:57:95:8c:a3:fd:06:
ec:88:a9:fb:49:cf:88:4c:b3:01:43:6c:59:2c:2b:
80:52:55:d7:27:85:67:37:68:da:92:c5:63:28:8f:
ee:0e:8e:19:53:6e:a8:08:e0:4e:3f:5b:85:d1:32:
97:bf:ab:aa:46:ca:eb:6a:cb:74:09:1a:24:2c:2f:
57:53:be:e9:9a:bb:1f:00:18:32:3f:48:c9:22:d7:
dd:e3:4e:a4:40:1d:82:62:3e:8d:28:00:a7:f4:2a:
ac:8a:ac:eb:8b:eb:75:33:f7:57:16:f8:95:f5:1b:
7d:ad:68:71:19:7e:c7:32:d2:ee:ea:57:0b:0a:b8:
d0:cc:80:a8:5c:b7:8a:ef:61:b1:cb:af:fe:83:51:
bc:14:28:e7:48:44:3e:95:0b:48:42:d3:0c:5f:2a:
63:2c:a8:ab:b9:73:19:ba:e2:29:58:38:44:7c:51:
d8:91:b7:1b:20:9a:f0:8e:f9:2d:13:2e:55:a6:0b:
77:cd:b4:3f:e9:58:b4:85:40:ed:95:bf:cf:6a:24:
11:cb:3f:b0:5f:1b:92:1f:27:07:97:ca:ee:b3:0c:
0d:db:78:da:ee:71:33:73:62:8d:b0:15:f8:05:0d:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:86:65:0B:64:F1:7C:80:90:58:2A:4F:0D:2A:A5:32:84:A1:A0
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:76:66:03:50:c5:9c:11:b1:f0:02:ab:ea:20:0a:2e:49:8e:
4c:56:cf:d8:63:82:39:4e:e0:72:dd:38:28:7a:71:6a:36:36:
be:34:31:67:fe:cd:d0:d6:03:57:c7:ed:15:0d:a4:54:86:42:
4f:aa:d6:b4:57:40:b0:85:35:8f:d2:f3:37:3f:4b:12:7f:46:
c2:65:11:df:94:ec:66:2d:27:5f:c7:e2:4d:05:ca:d3:08:ae:
27:3d:72:77:a6:8a:de:e8:c7:3d:17:91:1a:e3:70:81:56:d1:
c5:f2:e7:7e:98:1c:95:52:7a:9e:86:a4:95:28:8c:fd:10:e4:
c7:bb:1c:ff:00:d6:ad:40:35:6f:f5:e0:84:7c:34:5b:7a:e9:
e9:3c:fa:61:98:31:94:4f:9c:18:c4:da:a1:a5:fd:72:d3:53:
15:bc:8c:5a:58:dc:fc:e5:e9:49:ba:5d:01:1d:5b:53:69:f9:
05:17:41:78:2b:a0:d6:ee:31:e8:fc:b0:b8:4a:05:28:15:79:
e2:cc:ef:1b:e2:3a:43:c0:83:ba:f6:70:5d:ca:71:75:ad:e8:
da:1a:22:f3:46:82:dd:ff:82:0e:da:a2:8c:45:4f:fa:40:01:
83:96:e1:e7:e7:76:44:0e:bb:2e:d7:c1:ea:54:3e:29:f5:03:
cd:1b:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:33:25 2026 by rpki-client