Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: MgUOetgZDCKuC1YLIqGPcRuCYy1j72jX+vTLrFpS6I4=
Subject key identifier: 1F:F7:AF:D9:E0:63:42:04:86:8E:19:CD:B0:BA:DC:F3:E5:3E:BC:77
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 019D9962DADD78D799095813354767FEAFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:01:25 +0000
Manifest this update: Fri 17 Apr 2026 03:01:25 +0000
Manifest next update: Sat 18 Apr 2026 03:01:25 +0000
Files and hashes: 1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: R8uA0ikog5ALD+Wv5dVPEbMDy5sulNtEs66DlNP9FfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:da:dd:78:d7:99:09:58:13:35:47:67:fe:af:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Apr 17 03:01:25 2026 GMT
Not After : Apr 18 03:01:25 2026 GMT
Subject: CN=1ff7afd9e0634204868e19cdb0badcf3e53ebc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:2f:4a:3e:16:26:c5:e0:d4:4b:5f:56:5e:
dc:a7:2e:37:dc:7c:88:4d:82:16:8c:cf:65:a9:81:
9b:df:0f:2b:28:6d:93:54:02:9e:40:a2:6a:70:55:
68:c8:d9:e5:15:70:c2:3f:df:38:75:8e:1b:4f:a1:
5f:a0:a9:66:b5:2e:0c:3b:3e:74:49:08:46:42:f6:
7c:b5:b9:37:ea:cd:f3:62:07:37:01:c6:31:3b:9b:
53:d2:9c:db:22:52:e9:31:72:79:39:93:93:da:eb:
10:3e:26:82:f5:dc:f6:fd:a5:1d:cb:fb:59:e9:a2:
71:10:db:04:57:c9:54:16:a4:b1:b6:9a:ff:9a:52:
81:bd:f0:3a:c3:1a:47:77:a5:66:82:ed:a1:cc:bb:
8a:0f:ff:c0:96:50:26:39:4d:13:2a:27:5c:54:78:
0c:3d:61:ba:8b:60:c6:85:0a:21:76:7c:ff:19:e2:
57:6f:39:43:3f:5a:3e:ee:c8:21:43:ed:5f:d2:6a:
21:8e:53:a3:9c:0d:21:47:8a:b4:7f:81:05:e7:61:
a3:0d:f4:c7:b9:6a:ad:94:ba:eb:26:24:fc:31:47:
8a:56:6f:b2:cd:37:ba:ac:3a:0b:fd:db:c3:a8:52:
d5:f1:76:2c:72:30:84:7b:6b:b4:76:f1:40:ec:35:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:AF:D9:E0:63:42:04:86:8E:19:CD:B0:BA:DC:F3:E5:3E:BC:77
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:28:bd:9c:b2:f7:5b:92:ac:8a:dd:0a:f7:a3:f0:3f:2c:98:
f2:87:c6:35:a0:0a:b1:96:f8:f2:60:aa:23:b0:e1:66:97:0a:
ba:50:40:a7:28:a2:b9:98:46:2d:45:a6:36:af:37:04:7f:df:
2b:26:16:f2:9d:ee:fb:c6:f7:a2:e2:3a:0d:a5:87:01:85:15:
c3:77:1d:c8:a3:93:af:cb:2b:65:33:ec:d9:85:89:e8:58:a7:
2b:6b:bb:ca:4e:a1:d5:00:ec:54:15:80:d2:55:09:98:6f:21:
3f:75:70:d5:80:84:c4:fd:14:24:4c:5c:3b:44:24:29:dc:3a:
56:26:09:e6:1e:2f:e6:39:77:51:4d:23:3d:e7:b6:8c:e1:c4:
23:e9:d6:12:4b:5c:4b:dd:68:aa:77:77:70:06:57:87:72:25:
29:f4:0a:60:6a:e3:7c:6d:7b:6b:7d:61:1d:15:3c:45:f9:81:
5e:9e:15:5d:76:83:b9:6c:3c:78:50:4e:ae:ef:ee:e8:ba:49:
58:97:69:dd:d2:1a:c2:20:f5:d8:c8:89:4c:ed:ec:74:1e:1d:
54:27:5b:4e:39:cd:19:27:ba:39:d5:a0:6f:83:9f:6d:72:86:
59:b5:b6:d8:2e:a7:98:5d:15:7b:b8:de:07:e3:5c:ef:03:61:
fe:97:0e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYtrdeNeZCVgTNUdn/q/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODMxNmFiNGVhMTNlYmI1NDU2MGMxYTY3MDQyZDQ3ZTk2
NmQ4MjMwHhcNMjYwNDE3MDMwMTI1WhcNMjYwNDE4MDMwMTI1WjAzMTEwLwYDVQQD
EygxZmY3YWZkOWUwNjM0MjA0ODY4ZTE5Y2RiMGJhZGNmM2U1M2ViYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7MvSj4WJsXg1EtfVl7cpy433HyI
TYIWjM9lqYGb3w8rKG2TVAKeQKJqcFVoyNnlFXDCP984dY4bT6FfoKlmtS4MOz50
SQhGQvZ8tbk36s3zYgc3AcYxO5tT0pzbIlLpMXJ5OZOT2usQPiaC9dz2/aUdy/tZ
6aJxENsEV8lUFqSxtpr/mlKBvfA6wxpHd6Vmgu2hzLuKD//AllAmOU0TKidcVHgM
PWG6i2DGhQohdnz/GeJXbzlDP1o+7sghQ+1f0mohjlOjnA0hR4q0f4EF52GjDfTH
uWqtlLrrJiT8MUeKVm+yzTe6rDoL/dvDqFLV8XYscjCEe2u0dvFA7DVg0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/3r9ngY0IEho4ZzbC63PPlPrx3MB8GA1UdIwQY
MBaAFJGDFqtOoT67VFYMGmcELUfpZtgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMt
OWUzY2QwZDlkNzdhLzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMtOWUzY2QwZDlkNzdh
LzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5ii9nLL3
W5Ksit0K96PwPyyY8ofGNaAKsZb48mCqI7DhZpcKulBApyiiuZhGLUWmNq83BH/f
KyYW8p3u+8b3ouI6DaWHAYUVw3cdyKOTr8srZTPs2YWJ6FinK2u7yk6h1QDsVBWA
0lUJmG8hP3Vw1YCExP0UJExcO0QkKdw6ViYJ5h4v5jl3UU0jPee2jOHEI+nWEktc
S91oqnd3cAZXh3IlKfQKYGrjfG17a31hHRU8RfmBXp4VXXaDuWw8eFBOru/u6LpJ
WJdp3dIawiD12MiJTO3sdB4dVCdbTjnNGSe6OdWgb4OfbXKGWbW22C6nmF0Ve7je
B+Nc7wNh/pcO4w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:29 2026 by rpki-client