Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: ynlxBUVw20DtlTqwIJUNMnNvF809ivd+69hMRu0HwZ4=
Subject key identifier: FA:2C:D1:8B:1A:D0:88:F1:C9:FF:A4:B1:D0:07:14:D7:80:BC:D7:4B
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 01A0D1FFF0539ABD65402BBF993680703452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 06:00:06 +0000
Manifest this update: Thu 24 Sep 2026 06:00:06 +0000
Manifest next update: Fri 25 Sep 2026 06:00:06 +0000
Files and hashes: 1: SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa (hash: LtM8gbZ0jSfixz/hSjfeNQJi14O3+yjoZzQHAO5Ggx8=)
2: V7G0PqLXvHbILX1LHpBG4YAR7P8.roa (hash: dlrYc64tSG90TWHPrXR+wF6FxKtROact/mSKSd7YezI=)
3: YUvBprPTRfZZcuIZT5c81ftcfmE.asa (hash: 53yTBzuypoSdIg4y84fPhABfxj/Iwufg2RICzEJXFBY=)
4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: IdTtHPALmx2ixDJf+lPBEF6YNUZysYtaeGhvjBVB3Ps=)
5: phk0DUtP9juLO6Rie2WITcEati8.roa (hash: e91L1Q+nTnPD/oJ6jV8Vk2fQsj6tkZNRhSrVTsD9WQs=)
6: ycEAE8U3GOcT-dI1EM9rShcAaZs.roa (hash: xuaS4IHUOmueIKBaxW7itaqT5M/7ix/11RW1ctyKbMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:ff:f0:53:9a:bd:65:40:2b:bf:99:36:80:70:34:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Sep 24 06:00:06 2026 GMT
Not After : Sep 25 06:00:06 2026 GMT
Subject: CN=fa2cd18b1ad088f1c9ffa4b1d00714d780bcd74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:bc:7a:56:41:ac:65:19:8c:46:23:4b:82:
c6:11:b9:35:92:00:25:26:68:ec:60:bc:b4:05:e5:
90:ba:54:12:f1:c7:e2:7a:2c:3e:39:3f:11:b5:11:
c7:82:5a:a9:d8:8d:a1:9b:3f:c0:f7:14:31:57:79:
82:84:c4:e4:03:f5:e7:7f:cc:f3:bb:98:66:3e:bf:
a4:12:30:e9:42:46:47:20:8a:27:c0:c9:9a:b2:c6:
00:7a:d4:2e:b2:37:bf:80:b6:85:cf:63:c5:a7:cd:
36:c5:e2:0f:88:17:93:87:47:53:94:ff:83:bf:04:
55:91:79:98:e3:6e:20:ae:72:57:3e:d9:5e:24:8b:
72:5d:56:4a:b3:69:ba:3f:26:c8:df:db:a3:9e:f8:
b0:03:d2:80:d7:6c:46:cd:8e:31:d7:5c:4a:02:9c:
38:0a:be:97:bc:62:0d:b6:b8:ca:1e:63:47:69:af:
53:41:ca:f7:64:a5:8b:10:9f:2f:83:6e:ec:23:4a:
af:3f:0c:3d:72:8e:85:bb:1a:56:98:e3:8d:91:65:
75:f8:65:e0:1a:74:f7:6e:72:66:2e:5f:14:c5:4e:
43:87:87:81:df:b0:93:c4:79:ed:3d:a5:5e:28:63:
72:0a:7c:db:26:67:f4:52:7e:ff:08:3b:34:d6:c2:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2C:D1:8B:1A:D0:88:F1:C9:FF:A4:B1:D0:07:14:D7:80:BC:D7:4B
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ef:2a:4c:57:04:5b:65:90:dd:9a:75:a4:33:3d:9b:c0:3e:
a7:40:2c:e1:b8:95:9b:69:08:18:3b:b6:be:f8:a5:dc:f0:bb:
cd:7d:79:0f:a9:dc:bc:00:19:b4:1d:3c:fc:32:48:5e:3a:fc:
2c:48:c7:ea:b1:24:8a:a5:8c:de:16:bb:12:cc:e7:d3:19:79:
75:cf:19:1c:5f:29:ce:6b:d8:56:db:d1:54:22:dc:ef:66:e8:
cc:a4:be:f8:3f:70:0b:c2:d0:ed:d4:35:ca:0c:f6:77:a6:0f:
1f:6a:c8:6b:97:e7:cf:f2:00:4a:1a:5c:31:84:db:70:a3:f6:
53:8d:4a:ca:f9:f2:6f:56:7a:d9:65:0a:51:97:fa:e3:f4:d0:
06:4e:8b:a9:68:a1:48:e9:54:33:d6:cc:3b:99:58:37:fe:e0:
8c:f5:cb:9f:f3:b7:7c:eb:35:cb:bd:06:01:f1:88:33:75:9a:
e8:a9:2e:61:65:09:8c:50:8b:29:4a:40:06:b5:2d:b1:27:12:
d3:de:4c:7f:6f:b5:e7:4b:81:65:50:03:6e:f6:44:42:c3:0f:
46:98:d0:5b:6b:5d:24:95:21:55:2c:e0:78:51:2a:60:a5:47:
57:ec:99:24:2e:6a:2b:cf:9b:1f:84:b2:80:f0:f8:ac:5a:a4:
7a:a9:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:17:03 2026 by rpki-client