Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: MjzB2RZqBznoT5Ycy06zHm7h/+nY0TuHAv1s1KOtZl8=
Subject key identifier: 92:BE:53:2C:D2:77:79:BC:00:87:9B:97:69:CC:0E:5F:A0:01:DC:89
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 019CABD965DEAA8DFF1DD052ECC227F625F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: YOCU2MlE3R8NHUQ/I6i2ebVswOF+G4168b1QE5nOpdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:65:de:aa:8d:ff:1d:d0:52:ec:c2:27:f6:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=92be532cd27779bc00879b9769cc0e5fa001dc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:85:34:ae:bc:38:41:c7:23:ea:c4:71:9a:
a1:af:ee:8c:a5:e8:4b:74:dd:20:0e:be:2c:1e:c7:
c6:e3:06:8b:db:46:b6:02:3f:c7:d7:ba:cf:84:68:
ae:e8:1e:cb:3f:5a:29:78:dd:3b:bc:f3:94:fa:ff:
83:14:65:36:df:58:fd:2e:18:7d:88:91:15:19:2b:
e3:fa:23:78:54:5f:1f:4a:c2:c5:89:3d:f3:ef:b5:
d3:9c:d4:fd:89:97:aa:74:aa:a4:22:2b:cc:47:29:
4e:1a:29:f4:6b:04:1d:e4:79:64:37:20:fd:29:71:
1b:c7:84:33:ce:a4:61:8e:fd:ef:da:9b:0d:57:1a:
5a:ab:d8:0a:e0:3d:1a:e3:1d:eb:c3:ca:4d:e2:39:
46:1d:e2:73:d5:9c:88:a7:2d:0e:33:d4:b2:9e:52:
16:37:3b:08:46:34:c8:51:26:97:fa:6e:14:71:dc:
9b:44:ff:7f:8e:ca:ae:7e:d2:ac:04:ba:78:3d:c1:
a3:d7:02:ad:70:ed:5d:fa:cd:a8:a7:bb:42:88:dc:
47:f2:5a:f9:3e:39:d5:c1:c5:76:02:1f:53:48:64:
6e:f4:60:55:3f:0d:f3:52:76:a9:44:7d:74:ec:85:
e2:af:bf:59:5d:16:89:f2:3d:5f:5a:38:d0:9c:4f:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:53:2C:D2:77:79:BC:00:87:9B:97:69:CC:0E:5F:A0:01:DC:89
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a8:f7:02:17:22:a0:84:e3:81:8d:14:44:1c:5d:0d:cf:47:
4f:c6:7d:38:08:34:6b:29:2e:be:88:d5:64:ad:71:87:ba:93:
f4:2d:e3:5f:6d:e1:d3:5d:a6:bb:88:e0:4e:3e:29:96:46:e7:
06:99:21:1c:0f:cf:31:cc:ea:c7:f0:f0:e0:f6:af:1e:fd:2f:
8c:ff:13:ef:0b:aa:cc:52:e1:18:a5:e8:6f:67:06:4e:06:31:
5e:bc:d9:57:d7:43:77:8a:38:92:ed:fd:53:78:11:5f:71:75:
8e:bd:d4:c3:f5:dc:c3:ad:56:5d:89:3b:9c:bf:75:bf:e6:72:
9f:c8:0f:0c:99:a5:72:17:4d:42:5e:f8:50:af:0a:8f:44:67:
c7:b0:c8:b6:98:7c:2a:03:f2:b7:ab:69:5d:f3:fc:8f:fa:81:
1f:48:f1:b5:9e:95:b0:4c:c1:12:ad:45:b3:4f:6d:a4:d5:31:
ad:e8:57:3f:7e:93:7e:ad:8e:e8:31:c4:39:3d:16:8c:1d:18:
ee:63:d4:0d:11:9c:77:f6:2e:eb:4c:45:13:e9:a8:b3:fe:0b:
33:c3:58:dc:b9:28:6a:32:5d:41:5f:07:70:e1:90:5e:2f:ff:
df:ce:d4:31:37:b6:33:47:fd:08:ce:d5:66:08:cf:47:49:53:
4c:1b:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:22 2026 by rpki-client