Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
File: KYm1iRINOeoU_1OWO_IxV9Mkleo.mft (raw, json)
Hash identifier: a3m1O6odN7JZeMaNmJoOVQrVT8FyaB+vIA8XwcLBuIM=
Subject key identifier: C5:E5:D4:64:13:4F:35:8A:5A:B2:31:CE:5E:A4:00:5F:F4:0C:B2:BB
Authority key identifier: 29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
Certificate issuer: /CN=2989b589120d39ea14ff53963bf23157d32495ea
Certificate serial: 01A0F9B34C6AD500A6C3086D2CEB7D7233E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
Manifest number: 1A7F
Signing time: Thu 01 Oct 2026 23:01:12 +0000
Manifest this update: Thu 01 Oct 2026 23:01:12 +0000
Manifest next update: Fri 02 Oct 2026 23:01:12 +0000
Files and hashes: 1: KYm1iRINOeoU_1OWO_IxV9Mkleo.crl (hash: 5f/0gly8pt2xQfO/391vTKA3F4ghNxP2g5lFEiqXEdI=)
2: Np8PkRIzq2H-mfEgyXXHLw4xA2o.roa (hash: kCme1YTSTXAyOTkajeANzDG66nwpOp5PNkNgd2m+u9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:b3:4c:6a:d5:00:a6:c3:08:6d:2c:eb:7d:72:33:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989b589120d39ea14ff53963bf23157d32495ea
Validity
Not Before: Oct 1 23:01:12 2026 GMT
Not After : Oct 2 23:01:12 2026 GMT
Subject: CN=c5e5d464134f358a5ab231ce5ea4005ff40cb2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:4d:2d:95:58:e3:43:28:60:87:51:e7:1a:
c2:e6:4d:84:dc:88:18:ca:a6:7e:c8:54:24:86:2e:
12:63:a1:28:1a:d3:fa:da:ac:76:db:8b:03:be:8e:
25:e0:da:31:81:44:83:df:83:8d:37:8b:66:35:5d:
cb:7d:3b:7f:c1:e0:d6:41:bd:9c:2f:74:ed:d7:37:
00:91:5f:60:43:4d:bf:c0:14:c4:df:2c:cb:b4:88:
c8:86:b3:94:89:75:ed:97:23:4a:2e:0f:4c:7e:40:
91:ca:b7:68:62:a2:9c:a7:8c:ea:fc:30:e9:b0:db:
28:1f:fc:f5:e3:d9:14:da:25:62:27:a1:a9:1b:bb:
72:fb:34:89:a0:83:60:d6:ac:c1:d4:24:7c:af:b6:
2c:50:bb:6b:32:61:36:48:1e:eb:bd:81:c4:7f:67:
cd:6d:eb:40:5f:48:fc:12:c5:aa:64:f6:5c:3d:aa:
93:fa:79:f4:51:70:06:e2:b8:01:80:ab:b8:1d:c3:
7e:df:a5:4f:9a:e5:82:dc:b7:5b:7c:2a:33:8a:c4:
10:2b:9a:34:2b:a3:e9:02:67:b5:6f:f8:22:64:b7:
f4:ac:01:51:04:b2:2d:dd:d8:c9:ab:4e:0d:75:2f:
10:4d:7e:5a:ae:32:3b:b2:dc:8c:d1:f5:96:a8:e1:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:D4:64:13:4F:35:8A:5A:B2:31:CE:5E:A4:00:5F:F4:0C:B2:BB
X509v3 Authority Key Identifier:
keyid:29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7a:d6:df:d7:c1:a2:94:d2:35:d7:ca:5c:67:d3:f2:10:1b:
8e:01:ab:fb:1b:13:71:03:78:ab:60:22:36:2b:20:ba:d6:d9:
c8:c3:6c:93:7b:98:9b:c6:14:8d:ab:91:cf:cd:cb:41:7f:41:
82:64:58:fe:f7:2e:b3:58:62:1f:94:2e:5a:d2:8d:b2:3a:5d:
4d:8c:66:d9:83:f2:a9:f9:0e:74:7c:c7:58:a2:ce:79:4a:c3:
1e:a0:38:b0:be:14:1c:e6:3a:05:7f:93:46:fa:84:3d:e3:c0:
ef:1b:89:fb:97:d3:1a:07:89:45:e7:47:91:36:a4:f7:fa:6c:
69:d4:96:9b:82:ac:1c:05:6f:16:47:d4:f9:51:0b:09:73:11:
ba:97:48:76:c0:7d:10:5d:37:cb:f3:ee:9a:0d:64:79:82:99:
9b:e3:4a:cd:66:e1:99:fd:e7:0a:b7:d3:33:68:c6:95:c2:5f:
99:d2:fa:3b:70:31:55:0b:fa:d9:4c:d5:c4:65:4f:d0:1b:ce:
e0:e8:64:7f:73:87:4f:e6:b8:0e:42:cd:d7:21:4e:b6:21:0d:
50:22:07:1f:b9:99:97:c7:1b:a2:05:ee:8c:68:a1:8a:fa:e6:
dd:a9:d9:05:4b:a8:9a:eb:60:dd:91:e7:7b:aa:a0:49:cd:af:
00:25:e4:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD5s0xq1QCmwwhtLOt9cjPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODliNTg5MTIwZDM5ZWExNGZmNTM5NjNiZjIzMTU3ZDMy
NDk1ZWEwHhcNMjYxMDAxMjMwMTEyWhcNMjYxMDAyMjMwMTEyWjAzMTEwLwYDVQQD
EyhjNWU1ZDQ2NDEzNGYzNThhNWFiMjMxY2U1ZWE0MDA1ZmY0MGNiMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtflNLZVY40MoYIdR5xrC5k2E3IgY
yqZ+yFQkhi4SY6EoGtP62qx224sDvo4l4NoxgUSD34ONN4tmNV3LfTt/weDWQb2c
L3Tt1zcAkV9gQ02/wBTE3yzLtIjIhrOUiXXtlyNKLg9MfkCRyrdoYqKcp4zq/DDp
sNsoH/z149kU2iViJ6GpG7ty+zSJoINg1qzB1CR8r7YsULtrMmE2SB7rvYHEf2fN
betAX0j8EsWqZPZcPaqT+nn0UXAG4rgBgKu4HcN+36VPmuWC3LdbfCozisQQK5o0
K6PpAme1b/giZLf0rAFRBLIt3djJq04NdS8QTX5arjI7styM0fWWqOF20QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXl1GQTTzWKWrIxzl6kAF/0DLK7MB8GA1UdIwQY
MBaAFCmJtYkSDTnqFP9TljvyMVfTJJXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ltMWlSSU5PZW9VXzFPV09fSXhWOU1rbGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mMDgxNzAtOGQ5Mi00Y2ZhLWI3MzMt
ZmJkYmU1MTRkZjVhLzEvS1ltMWlSSU5PZW9VXzFPV09fSXhWOU1rbGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mMDgxNzAtOGQ5Mi00Y2ZhLWI3MzMtZmJkYmU1MTRkZjVh
LzEvS1ltMWlSSU5PZW9VXzFPV09fSXhWOU1rbGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3rW39fB
opTSNdfKXGfT8hAbjgGr+xsTcQN4q2AiNisgutbZyMNsk3uYm8YUjauRz83LQX9B
gmRY/vcus1hiH5QuWtKNsjpdTYxm2YPyqfkOdHzHWKLOeUrDHqA4sL4UHOY6BX+T
RvqEPePA7xuJ+5fTGgeJRedHkTak9/psadSWm4KsHAVvFkfU+VELCXMRupdIdsB9
EF03y/Pumg1keYKZm+NKzWbhmf3nCrfTM2jGlcJfmdL6O3AxVQv62UzVxGVP0BvO
4Ohkf3OHT+a4DkLN1yFOtiENUCIHH7mZl8cbogXujGihivrm3anZBUuomutg3ZHn
e6qgSc2vACXkPA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 08:33:53 2026 by rpki-client