Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: zSVRWHscneBHzMJ7HrZpQCYIySlSXagghuKbFyi/AEo=
Subject key identifier: 43:C8:40:6B:8F:89:59:36:BB:BE:15:5E:D0:BF:AF:8C:66:6A:F5:50
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 019D2960B11A13E71589719FCA47EAA177C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:01:35 +0000
Manifest this update: Thu 26 Mar 2026 09:01:35 +0000
Manifest next update: Fri 27 Mar 2026 09:01:35 +0000
Files and hashes: 1: SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa (hash: LtM8gbZ0jSfixz/hSjfeNQJi14O3+yjoZzQHAO5Ggx8=)
2: V7G0PqLXvHbILX1LHpBG4YAR7P8.roa (hash: dlrYc64tSG90TWHPrXR+wF6FxKtROact/mSKSd7YezI=)
3: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: CZdBnQ/YvloWOBVI+b7DiBVoLajpPYsnRzoxBSscl7U=)
4: phk0DUtP9juLO6Rie2WITcEati8.roa (hash: e91L1Q+nTnPD/oJ6jV8Vk2fQsj6tkZNRhSrVTsD9WQs=)
5: ycEAE8U3GOcT-dI1EM9rShcAaZs.roa (hash: xuaS4IHUOmueIKBaxW7itaqT5M/7ix/11RW1ctyKbMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b1:1a:13:e7:15:89:71:9f:ca:47:ea:a1:77:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Mar 26 09:01:35 2026 GMT
Not After : Mar 27 09:01:35 2026 GMT
Subject: CN=43c8406b8f895936bbbe155ed0bfaf8c666af550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:dc:94:c5:58:b2:25:b0:f5:ba:ce:46:2d:
ea:2a:22:27:48:92:2a:12:7e:2d:50:d5:e5:e6:87:
40:e7:2a:70:42:58:7b:7f:73:aa:eb:94:3b:74:12:
e1:a1:b7:e6:7e:66:d3:e7:05:b0:8a:36:37:13:09:
d9:c4:ae:b9:01:26:01:d3:ba:41:2b:05:14:ea:8c:
2b:66:6d:fa:ee:01:f0:9d:e7:74:14:29:d3:04:a8:
be:a6:11:94:0d:c4:67:69:c5:0f:1d:fb:90:ca:d2:
1c:84:98:1a:b0:a3:27:fc:5d:19:89:6e:92:d4:db:
78:78:be:b3:48:8c:36:ae:fe:b4:94:03:73:34:23:
44:ff:38:16:ac:27:b0:3c:42:59:22:8e:61:dd:4a:
64:20:ee:ec:bc:b9:e0:7c:18:95:7a:97:b5:62:a8:
00:44:ed:c6:a4:f6:60:eb:2c:72:09:ed:4a:e5:c5:
af:ad:f6:b5:4b:1a:a8:f8:aa:11:4b:d1:fa:95:56:
ab:39:1e:f8:93:e0:a4:65:b6:ed:9c:93:08:03:0a:
fb:61:9a:5e:ac:75:dd:22:dd:07:e0:bc:13:8c:5d:
12:0c:7f:be:4e:7d:44:c3:f0:a3:89:c3:1c:da:ee:
f8:2e:02:6b:a8:c5:db:b5:ca:95:d3:37:b4:4a:48:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:40:6B:8F:89:59:36:BB:BE:15:5E:D0:BF:AF:8C:66:6A:F5:50
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3e:e6:ad:c6:6d:2e:d3:14:98:3a:d2:fa:d9:13:e9:b4:b7:
ac:c3:89:50:fd:1c:9b:48:5c:a2:b0:4d:a1:73:54:f6:bd:20:
ad:76:97:ea:c7:09:7e:86:ed:99:49:ae:e2:64:dd:63:6c:ea:
43:d7:98:7f:a3:ac:8b:a7:39:2d:cf:ad:a7:98:a6:e5:32:2a:
45:f9:3b:a0:1a:6a:5b:19:20:96:08:8b:7e:dc:22:d8:fc:23:
ae:8d:97:a6:38:fa:40:c0:65:49:12:2a:a4:6e:8f:4e:52:91:
dc:37:ad:c9:7b:1e:96:18:eb:70:95:15:f4:c5:68:e4:85:6c:
6c:04:1c:9b:5c:3f:55:b6:c5:f6:65:de:77:cb:f1:3f:ee:09:
a5:cd:b7:00:72:27:0f:3b:66:8b:74:e2:0f:2c:7d:25:9d:e8:
43:8b:87:2f:c0:6e:9d:5d:60:79:85:67:cb:63:16:da:af:96:
4e:21:9e:33:5d:27:8d:d6:75:ea:d4:7b:52:35:dd:d5:b7:ab:
f6:ee:31:68:48:38:66:50:9d:f0:e5:4d:82:03:1d:8f:bd:7e:
1d:2a:fe:fc:82:3e:4e:2f:f6:7a:ea:38:21:bf:e9:52:d6:28:
de:03:2c:f9:50:0a:a1:51:71:57:4e:d3:70:f2:bd:81:08:0f:
1e:bd:89:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYLEaE+cViXGfykfqoXfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOGVmODIzYmIwNDFlYTNhYzdjODkzNmM3NTBiNjAxODEz
N2UyY2QwHhcNMjYwMzI2MDkwMTM1WhcNMjYwMzI3MDkwMTM1WjAzMTEwLwYDVQQD
Eyg0M2M4NDA2YjhmODk1OTM2YmJiZTE1NWVkMGJmYWY4YzY2NmFmNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5bclMVYsiWw9brORi3qKiInSJIq
En4tUNXl5odA5ypwQlh7f3Oq65Q7dBLhobfmfmbT5wWwijY3EwnZxK65ASYB07pB
KwUU6owrZm367gHwned0FCnTBKi+phGUDcRnacUPHfuQytIchJgasKMn/F0ZiW6S
1Nt4eL6zSIw2rv60lANzNCNE/zgWrCewPEJZIo5h3UpkIO7svLngfBiVepe1YqgA
RO3GpPZg6yxyCe1K5cWvrfa1Sxqo+KoRS9H6lVarOR74k+CkZbbtnJMIAwr7YZpe
rHXdIt0H4LwTjF0SDH++Tn1Ew/CjicMc2u74LgJrqMXbtcqV0ze0SkhxhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPIQGuPiVk2u74VXtC/r4xmavVQMB8GA1UdIwQY
MBaAFJGO+CO7BB6jrHyJNsdQtgGBN+LNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMt
NjUyOTc1MWIyYjAxLzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMtNjUyOTc1MWIyYjAx
LzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAED7mrcZt
LtMUmDrS+tkT6bS3rMOJUP0cm0hcorBNoXNU9r0grXaX6scJfobtmUmu4mTdY2zq
Q9eYf6Osi6c5Lc+tp5im5TIqRfk7oBpqWxkglgiLftwi2Pwjro2Xpjj6QMBlSRIq
pG6PTlKR3DetyXselhjrcJUV9MVo5IVsbAQcm1w/VbbF9mXed8vxP+4Jpc23AHIn
Dztmi3TiDyx9JZ3oQ4uHL8BunV1geYVny2MW2q+WTiGeM10njdZ16tR7UjXd1ber
9u4xaEg4ZlCd8OVNggMdj71+HSr+/II+Ti/2euo4Ib/pUtYo3gMs+VAKoVFxV07T
cPK9gQgPHr2JAw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:30 2026 by rpki-client