
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
File: kY-mQPg8SCrJWskFF0tSN9doN5s.mft (raw, json)
Hash identifier: /QzUHn/0EeUEc4hHv3Ei/3ghffuDcx9Gs1L9qg+tTb4=
Subject key identifier: 90:71:2B:20:CF:2F:6C:5B:0B:DF:F5:C6:C5:1F:56:89:73:3D:8B:19
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 01A0D3F05D433F414ACA60671AF5A7B8AA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:20 +0000
Manifest this update: Thu 24 Sep 2026 15:02:20 +0000
Manifest next update: Fri 25 Sep 2026 15:02:20 +0000
Files and hashes: 1: 251AqFOyskaKWs66aZFawfV5z14.roa (hash: XUxs9JPcVOmTRxaAw3XtUXshA8geswAzFtASBhH4g6w=)
2: 2WVr5p2H7r2azbb2WIvSV483tPM.roa (hash: IwiB9DNZvI6+xxe/bmcy9dKCy2z4spHmBIdmUbXkKUo=)
3: LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa (hash: npyymPGB2JJn3weBX4RtZOrvbRJhsnjy2HLem4uOQMI=)
4: Vt_o83jeAXwgrEV6QfNyihxJdG0.roa (hash: Fgpr0tl2Jx7B2BNewOwkF0HNqx/3fOLm+uiSmIq6TZQ=)
5: kY-mQPg8SCrJWskFF0tSN9doN5s.crl (hash: wnExNrzzvV2ObAKAMqFCHNzV2nBwLoWQ2PhUxAPIsKk=)
6: k_p0G99T-kOb8IDRnsd82pe43DM.roa (hash: fAHyhB6wFFezzUaln2OnR6OxOwi0d6bOr/s4KfY2WbI=)
7: xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa (hash: zVFYnjswOeC1o9AjP9zhGvgKqOwrSI1huC/5Bh7oUPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:5d:43:3f:41:4a:ca:60:67:1a:f5:a7:b8:aa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Sep 24 15:02:20 2026 GMT
Not After : Sep 25 15:02:20 2026 GMT
Subject: CN=90712b20cf2f6c5b0bdff5c6c51f5689733d8b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:11:60:28:6e:35:1b:f6:c5:41:6c:55:98:
e2:75:aa:78:e3:c6:bc:35:fa:74:26:9e:68:82:3c:
2d:ef:43:d0:7b:bc:2f:71:fa:ef:ab:09:1d:67:f8:
69:6c:3a:c1:70:8a:af:01:f4:f3:b9:30:8f:e7:ac:
69:90:9a:b1:cf:3f:f6:83:7d:5b:da:7f:33:6e:e4:
41:85:37:84:b6:70:70:19:d2:bf:34:6c:d5:9e:be:
64:f8:19:6f:ee:24:b8:9b:6e:8d:8c:b0:e2:d1:77:
22:f3:a0:6b:cf:6e:45:75:b5:0b:9e:62:e1:4b:5d:
bb:3d:ce:b0:4a:39:62:be:2c:0d:85:17:6c:e5:2d:
76:b1:93:0a:f2:d0:60:b8:05:6c:22:83:8f:8f:5d:
a2:f5:8f:0d:50:9a:e6:92:45:d2:f0:99:51:35:0f:
03:e7:0f:fc:1c:3d:17:eb:05:71:28:d8:97:e2:61:
18:f7:c7:d6:b8:f6:56:10:aa:95:80:f9:49:10:28:
85:96:92:7e:9e:66:b6:b4:13:92:49:1d:e2:1f:a2:
24:1a:16:1a:57:56:4e:e5:e2:d8:cb:4a:b4:e4:5f:
3b:1c:a8:bf:c4:58:49:30:e4:d3:0d:a9:b8:10:09:
a9:b4:9f:96:33:cd:c1:f6:5f:5d:e2:8e:fa:4d:6e:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:2B:20:CF:2F:6C:5B:0B:DF:F5:C6:C5:1F:56:89:73:3D:8B:19
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:48:42:55:13:cb:8e:9e:02:6a:18:77:9e:99:a5:1f:ce:fa:
7a:5f:8e:14:93:94:e5:e0:72:8c:53:3e:d8:19:3d:2a:32:fe:
3f:1e:e0:00:92:e4:77:a3:9c:eb:bb:2b:c2:c4:43:7a:54:94:
0e:c1:b7:8d:b0:0b:23:28:26:60:d3:0b:3a:63:0f:71:c1:be:
41:20:16:83:34:04:81:0b:b4:e5:0b:50:be:ca:98:4d:fb:8b:
6e:9a:c9:3f:44:c3:40:0c:36:91:3e:09:cb:ee:29:f1:78:aa:
ce:88:07:ea:e0:a9:c1:58:1c:93:42:7a:0d:23:e0:51:34:fa:
bd:82:70:f5:f0:3a:45:62:d0:35:e1:ab:fc:e0:3c:8c:8d:54:
57:46:83:86:4e:a8:b9:c7:86:e1:0e:67:c1:ed:90:5d:a2:ab:
99:09:f6:9b:11:a3:ed:fe:bd:f9:06:5a:11:1e:ba:ac:92:16:
73:a0:d7:2c:f1:cd:5b:e6:45:83:6b:25:e6:82:86:90:4e:94:
5c:5d:c3:82:71:41:b0:02:c7:52:a4:c5:ae:e6:b3:f1:db:2d:
87:cc:c1:de:42:4c:f2:57:91:a1:e9:05:a8:c8:62:d1:ce:ae:
f7:81:8e:2b:11:9f:33:26:10:92:c1:15:07:76:5a:9a:4e:88:
63:a0:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:32:59 2026 by rpki-client