Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
File: kY-mQPg8SCrJWskFF0tSN9doN5s.mft (raw, json)
Hash identifier: gdA+D4wPqNdLPPbjJ8InaTwaXFI7+PPqWtPuBP8wbpA=
Subject key identifier: 07:1A:CC:96:AF:F8:8F:90:65:1C:AD:B3:D8:0D:43:0C:D5:BB:D4:A7
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 019F935AA9111B936B8DEEDF8E13C25694FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:20 +0000
Manifest this update: Fri 24 Jul 2026 09:00:20 +0000
Manifest next update: Sat 25 Jul 2026 09:00:20 +0000
Files and hashes: 1: 251AqFOyskaKWs66aZFawfV5z14.roa (hash: XUxs9JPcVOmTRxaAw3XtUXshA8geswAzFtASBhH4g6w=)
2: 2WVr5p2H7r2azbb2WIvSV483tPM.roa (hash: IwiB9DNZvI6+xxe/bmcy9dKCy2z4spHmBIdmUbXkKUo=)
3: LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa (hash: npyymPGB2JJn3weBX4RtZOrvbRJhsnjy2HLem4uOQMI=)
4: Vt_o83jeAXwgrEV6QfNyihxJdG0.roa (hash: Fgpr0tl2Jx7B2BNewOwkF0HNqx/3fOLm+uiSmIq6TZQ=)
5: kY-mQPg8SCrJWskFF0tSN9doN5s.crl (hash: yKlKsh60FpkC1UjyxA3mYaq1EzO3TkY/iAIqFywsgS0=)
6: k_p0G99T-kOb8IDRnsd82pe43DM.roa (hash: fAHyhB6wFFezzUaln2OnR6OxOwi0d6bOr/s4KfY2WbI=)
7: xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa (hash: zVFYnjswOeC1o9AjP9zhGvgKqOwrSI1huC/5Bh7oUPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:a9:11:1b:93:6b:8d:ee:df:8e:13:c2:56:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Jul 24 09:00:20 2026 GMT
Not After : Jul 25 09:00:20 2026 GMT
Subject: CN=071acc96aff88f90651cadb3d80d430cd5bbd4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:7f:03:dc:39:d3:bd:9b:a9:88:83:62:4e:
c3:94:0a:69:aa:ab:9c:b6:ae:63:ab:83:ce:f9:85:
22:b1:9b:82:e5:83:07:db:9e:89:80:f2:21:5e:cd:
09:19:3e:e6:c6:1b:3d:7f:bf:c1:21:82:25:4e:64:
dc:32:91:1f:a9:9b:34:27:34:37:b2:76:94:1e:dd:
c2:12:af:ba:4c:17:0f:5d:62:03:dc:6c:55:35:ca:
bf:f3:14:7a:2d:5c:41:86:e5:c5:c8:89:4b:1a:2c:
83:66:75:67:cf:f7:ac:35:6b:e7:08:7e:92:fd:1c:
74:da:fe:4f:0e:d2:93:b7:c2:ab:e0:c5:c0:5d:14:
ec:23:e0:f7:80:d3:30:0e:c5:42:73:aa:b1:2d:3a:
0a:21:ff:d9:3e:94:fe:66:d7:29:3d:34:c4:86:c2:
3b:9a:4b:e9:8a:96:f0:c0:d4:56:b6:41:a3:95:44:
ed:ca:09:fa:63:92:a5:50:56:2e:c8:62:43:32:a1:
b1:47:b8:8a:47:45:82:8a:ca:30:b8:48:22:b2:58:
59:25:04:39:95:f7:1a:68:e8:d7:d5:57:db:70:e8:
cc:09:f5:40:46:58:33:b6:b8:d6:e1:b9:c8:56:a7:
3b:25:05:b7:0e:03:8b:cf:db:8e:ff:aa:f4:c3:e0:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:CC:96:AF:F8:8F:90:65:1C:AD:B3:D8:0D:43:0C:D5:BB:D4:A7
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f6:e9:b5:30:08:a8:90:36:02:35:ee:19:f3:24:c5:05:c2:
91:4c:8d:6b:e7:37:c6:d4:a8:7e:4e:92:ce:bb:f5:a0:84:43:
3b:45:1e:40:e5:2d:cf:76:bf:34:f7:f9:ec:e1:f6:0e:39:b8:
eb:68:a5:a0:d0:3c:07:ca:63:47:c3:cb:ee:04:52:33:1b:f6:
cf:3a:cf:7d:28:4e:5f:60:72:4c:88:33:db:ac:83:d2:9d:51:
19:c6:06:e5:33:09:a5:be:96:f5:55:3f:1b:b0:a0:04:43:a2:
3d:c1:22:97:2d:52:85:3a:0d:ee:50:15:5e:40:3e:ed:20:fa:
f1:e3:f8:d9:4e:ca:18:fd:8c:aa:e7:bb:ef:5b:4d:fe:10:f6:
42:d0:3b:f2:b5:63:8f:94:a5:7e:dc:94:7b:e1:7d:4d:a2:36:
f6:23:ca:0b:b1:33:45:41:3e:48:c9:e8:af:14:10:eb:f0:bb:
06:7d:f6:a0:f2:21:69:a4:cb:3c:54:86:d5:41:9b:a1:e6:96:
39:06:70:1a:9b:3e:70:68:1c:f9:7f:83:49:11:18:2c:12:04:
72:c8:91:70:b1:84:7d:16:90:04:e9:3c:f6:ad:66:57:27:87:
57:dc:81:b7:73:06:ce:ee:0d:48:ec:af:a7:07:b1:0d:20:ea:
f6:20:bd:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWqkRG5Nrje7fjhPCVpT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOGZhNjQwZjgzYzQ4MmFjOTVhYzkwNTE3NGI1MjM3ZDc2
ODM3OWIwHhcNMjYwNzI0MDkwMDIwWhcNMjYwNzI1MDkwMDIwWjAzMTEwLwYDVQQD
EygwNzFhY2M5NmFmZjg4ZjkwNjUxY2FkYjNkODBkNDMwY2Q1YmJkNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMB/A9w5072bqYiDYk7DlAppqquc
tq5jq4PO+YUisZuC5YMH256JgPIhXs0JGT7mxhs9f7/BIYIlTmTcMpEfqZs0JzQ3
snaUHt3CEq+6TBcPXWID3GxVNcq/8xR6LVxBhuXFyIlLGiyDZnVnz/esNWvnCH6S
/Rx02v5PDtKTt8Kr4MXAXRTsI+D3gNMwDsVCc6qxLToKIf/ZPpT+ZtcpPTTEhsI7
mkvpipbwwNRWtkGjlUTtygn6Y5KlUFYuyGJDMqGxR7iKR0WCisowuEgislhZJQQ5
lfcaaOjX1VfbcOjMCfVARlgztrjW4bnIVqc7JQW3DgOLz9uO/6r0w+CDfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcazJav+I+QZRyts9gNQwzVu9SnMB8GA1UdIwQY
MBaAFJGPpkD4PEgqyVrJBRdLUjfXaDebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ktbVFQZzhTQ3JKV3NrRkYwdFNOOWRvTjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt
MWIxM2JkNDU2NmE1LzEva1ktbVFQZzhTQ3JKV3NrRkYwdFNOOWRvTjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1
LzEva1ktbVFQZzhTQ3JKV3NrRkYwdFNOOWRvTjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/bptTAI
qJA2AjXuGfMkxQXCkUyNa+c3xtSofk6Szrv1oIRDO0UeQOUtz3a/NPf57OH2Djm4
62iloNA8B8pjR8PL7gRSMxv2zzrPfShOX2ByTIgz26yD0p1RGcYG5TMJpb6W9VU/
G7CgBEOiPcEily1ShToN7lAVXkA+7SD68eP42U7KGP2Mque771tN/hD2QtA78rVj
j5SlftyUe+F9TaI29iPKC7EzRUE+SMnorxQQ6/C7Bn32oPIhaaTLPFSG1UGboeaW
OQZwGps+cGgc+X+DSREYLBIEcsiRcLGEfRaQBOk89q1mVyeHV9yBt3MGzu4NSOyv
pwexDSDq9iC9AQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:07 2026 by rpki-client