Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: y/b6a5Ta8fxgHvgD/0m564apAmw4X9+Kr/ctUzuThjk=
Subject key identifier: CF:F1:63:C4:EE:2C:DD:31:69:76:2E:00:51:FD:F3:71:CB:93:DD:CE
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 01A0F26785C1BC6C66AD584BFE926D659F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 0869
Signing time: Wed 30 Sep 2026 13:01:05 +0000
Manifest this update: Wed 30 Sep 2026 13:01:05 +0000
Manifest next update: Thu 01 Oct 2026 13:01:05 +0000
Files and hashes: 1: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: MJjyHXA0/Y+B7t19QqnSEVNjpgAGIJHZN6WTiwi8ZgM=)
2: oBsXlgaTo3-EPPeDa4scyzOeaJE.roa (hash: hroC3QsTYG+lCo4/5W7hPkpTUCXhcAtLqDy7A6IH+oQ=)
3: vUdfXnwcRDPW7e3X7ofFMJYqkDk.roa (hash: 4hcskGjMuomfYGEOrtlmJrd0tV2p1HAsJ5FOV+HnCFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:67:85:c1:bc:6c:66:ad:58:4b:fe:92:6d:65:9f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Sep 30 13:01:05 2026 GMT
Not After : Oct 1 13:01:05 2026 GMT
Subject: CN=cff163c4ee2cdd3169762e0051fdf371cb93ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:aa:82:bf:a0:b5:ae:14:11:4e:6f:b4:71:
b2:00:8c:ab:5e:f8:d8:9a:42:35:64:2d:d2:cd:ad:
70:db:ce:aa:84:d3:02:ae:8e:40:63:58:13:70:88:
d6:ff:a8:3b:44:cb:45:ec:32:fc:44:fc:2c:75:df:
8e:0d:cb:ed:85:a0:7b:b2:4b:77:99:9e:b0:b3:ad:
d7:24:c9:44:db:eb:a4:22:a8:e5:16:54:4c:d4:99:
5c:62:bb:4d:06:71:61:e9:25:53:1a:8d:68:7d:62:
a7:20:0b:5d:87:54:50:13:46:d6:d5:27:de:f2:f7:
c7:cb:6c:02:ef:f3:23:2e:a9:7b:87:40:ae:f9:9d:
9e:68:38:05:30:d8:f4:e3:d6:fa:e2:49:e1:c1:cf:
d9:21:d9:cf:a4:f9:0d:e9:56:a7:bc:29:f4:80:68:
f7:ec:38:b4:e4:b4:53:75:c3:99:a8:7f:1d:25:b1:
86:c9:1e:8a:ca:4c:fc:fe:66:05:63:50:14:39:b9:
b2:d2:f1:04:db:73:43:63:06:bb:39:7a:54:bf:bb:
b4:c5:af:e8:7a:1a:50:26:e0:01:f5:08:84:1c:e9:
8d:2a:ae:bf:53:0f:e9:51:5f:8e:f3:b7:d7:90:83:
82:59:5a:eb:88:23:14:3c:89:6f:fa:db:f8:c6:b8:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:63:C4:EE:2C:DD:31:69:76:2E:00:51:FD:F3:71:CB:93:DD:CE
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:39:25:ce:f1:2f:02:eb:ff:ce:5d:93:55:30:92:7a:dd:bb:
25:34:4a:55:41:38:7f:da:ea:d9:0a:5f:3e:fe:1a:04:1f:14:
51:a2:97:c5:83:4e:d2:66:74:af:b7:70:48:54:c4:6a:65:16:
ca:d4:70:68:48:61:49:f7:6d:ae:b3:f5:8d:53:0a:36:7b:48:
22:ad:ba:72:ff:c0:4b:62:72:cf:f1:8c:e4:f5:80:c1:d5:00:
48:a4:c0:d3:1e:e2:96:44:c1:68:8c:ff:e6:b9:ba:75:83:2b:
02:09:92:7f:b1:7c:94:04:f8:5b:ad:49:eb:35:dc:81:55:1d:
0b:bb:5b:a0:98:7d:46:87:42:f5:db:37:97:25:08:80:fe:8a:
9c:df:b6:5e:e9:95:98:66:5b:05:7e:e4:26:b9:10:ad:c2:0a:
16:10:ee:34:ae:a4:8f:21:ab:06:df:de:45:2f:a0:4a:f6:84:
49:80:c9:00:66:98:58:33:97:f2:9e:ad:50:8e:cd:e2:f3:41:
eb:e8:5e:ae:37:9d:4d:a2:08:21:7a:5d:70:e9:73:fc:f4:3e:
b5:72:b9:dd:24:f3:c5:1a:f2:b2:09:a5:76:1e:4f:84:27:9a:
f1:7b:90:0b:b6:02:2e:a2:47:1c:93:18:d5:fa:0c:ae:58:9a:
8a:cd:2c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDyZ4XBvGxmrVhL/pJtZZ9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODVjYzQzZDgwNmEyMWI2MzMzMDIxOWViNjM4YmIxYmE0
OWFlODAwHhcNMjYwOTMwMTMwMTA1WhcNMjYxMDAxMTMwMTA1WjAzMTEwLwYDVQQD
EyhjZmYxNjNjNGVlMmNkZDMxNjk3NjJlMDA1MWZkZjM3MWNiOTNkZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD6qgr+gta4UEU5vtHGyAIyrXvjY
mkI1ZC3Sza1w286qhNMCro5AY1gTcIjW/6g7RMtF7DL8RPwsdd+ODcvthaB7skt3
mZ6ws63XJMlE2+ukIqjlFlRM1JlcYrtNBnFh6SVTGo1ofWKnIAtdh1RQE0bW1Sfe
8vfHy2wC7/MjLql7h0Cu+Z2eaDgFMNj049b64knhwc/ZIdnPpPkN6VanvCn0gGj3
7Di05LRTdcOZqH8dJbGGyR6Kykz8/mYFY1AUObmy0vEE23NDYwa7OXpUv7u0xa/o
ehpQJuAB9QiEHOmNKq6/Uw/pUV+O87fXkIOCWVrriCMUPIlv+tv4xrgvgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/xY8TuLN0xaXYuAFH983HLk93OMB8GA1UdIwQY
MBaAFCmFzEPYBqIbYzMCGetji7G6Sa6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mM2ZlZjQtNDVkYS00YjQzLTk4YzIt
NGRmODg0MGVmYjE3LzEvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9mM2ZlZjQtNDVkYS00YjQzLTk4YzItNGRmODg0MGVmYjE3
LzEvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTklzvEv
Auv/zl2TVTCSet27JTRKVUE4f9rq2QpfPv4aBB8UUaKXxYNO0mZ0r7dwSFTEamUW
ytRwaEhhSfdtrrP1jVMKNntIIq26cv/AS2Jyz/GM5PWAwdUASKTA0x7ilkTBaIz/
5rm6dYMrAgmSf7F8lAT4W61J6zXcgVUdC7tboJh9RodC9ds3lyUIgP6KnN+2XumV
mGZbBX7kJrkQrcIKFhDuNK6kjyGrBt/eRS+gSvaESYDJAGaYWDOX8p6tUI7N4vNB
6+herjedTaIIIXpdcOlz/PQ+tXK53STzxRrysgmldh5PhCea8XuQC7YCLqJHHJMY
1foMrliais0s8g==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:13:43 2026 by rpki-client