Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: /eeGhUhAkWRXJJVXUBtORMdcHkIbF8m8wm75P9tprjY=
Subject key identifier: 84:38:D8:1C:33:F7:ED:95:13:EC:1D:D8:16:9D:38:A5:14:7C:D6:A5
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 01A0E174EB2D98BCECC27D1345ADF8C011EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 06:02:11 +0000
Manifest this update: Sun 27 Sep 2026 06:02:11 +0000
Manifest next update: Mon 28 Sep 2026 06:02:11 +0000
Files and hashes: 1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: mPRjHUJr9eoy5GYVThpxDaFeEHehgmejnoMLi6sLQes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:eb:2d:98:bc:ec:c2:7d:13:45:ad:f8:c0:11:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Sep 27 06:02:11 2026 GMT
Not After : Sep 28 06:02:11 2026 GMT
Subject: CN=8438d81c33f7ed9513ec1dd8169d38a5147cd6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:af:83:57:be:fc:29:e7:31:7d:27:77:96:
d7:f6:12:af:0d:9f:71:de:01:d4:60:fd:1f:8a:a3:
29:ce:ca:80:3c:72:b2:53:49:82:35:81:82:54:1b:
7b:7d:9d:2f:d3:45:36:fb:12:f4:97:41:03:fd:d5:
b4:e5:0f:b7:cc:54:5d:2e:67:3e:28:74:4c:f9:b1:
41:64:9a:bf:db:8f:93:0f:b3:6f:e2:fb:8c:1d:a1:
04:3a:c8:8f:5b:7e:23:4d:74:bf:b1:b3:53:83:15:
87:f5:92:9c:e9:b2:eb:f2:97:be:c8:a8:c0:47:bf:
54:94:10:9e:a6:02:3b:bc:15:e1:c9:86:69:a4:68:
3d:62:23:bb:32:9f:26:0e:1e:bf:c6:5b:a1:1b:f9:
a5:0a:e3:aa:6c:a6:f2:0a:fb:ed:42:cc:43:12:78:
82:92:71:9d:2a:00:34:60:13:c9:25:95:ba:77:30:
c4:2a:6f:dd:49:3a:83:8e:10:0a:0b:0b:99:27:2a:
75:0c:11:8a:90:8b:6f:de:05:1b:75:44:b5:56:3b:
1c:da:10:9d:1a:79:08:1a:18:b5:53:4c:e5:6c:29:
52:10:18:71:7b:bf:22:bf:3d:67:f0:22:05:1d:4e:
13:6a:c9:ab:90:6b:30:5b:06:10:86:9e:bf:39:fb:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:D8:1C:33:F7:ED:95:13:EC:1D:D8:16:9D:38:A5:14:7C:D6:A5
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b3:e2:c4:b8:fa:6f:e2:c9:35:c2:60:9b:90:58:c1:34:f5:
b6:91:1f:c6:8b:43:84:70:31:00:e9:27:c3:8f:2e:de:98:68:
45:82:de:cf:54:3f:0e:37:5f:de:38:64:33:b1:57:2e:01:3e:
da:f6:94:5e:1d:e6:d8:7e:c3:5f:09:25:a6:3a:d2:0b:27:32:
ba:93:4c:1e:d6:da:64:f7:39:43:5f:60:fe:d8:98:6a:06:07:
11:24:f9:b3:60:32:66:45:1e:05:1b:da:59:b7:0c:74:73:20:
a8:e7:d4:23:81:44:e1:b5:a1:67:7b:17:fc:1d:e5:cc:90:e6:
0d:bf:e5:15:b4:3e:52:32:24:1c:b0:fa:3a:b0:61:ec:7d:d5:
04:dc:44:6c:86:ce:b2:79:6b:18:0c:e4:de:42:dd:2c:03:7d:
d4:73:cc:db:61:e4:18:a8:80:47:20:1f:c5:25:9f:62:ff:5b:
3d:a2:99:f4:79:0e:43:d4:35:5b:de:3e:74:0f:d9:84:a2:72:
cd:01:64:9c:5d:03:1b:4e:15:5a:ba:69:6b:0d:71:82:4a:37:
fc:4f:ce:f6:44:3d:0c:d0:11:2e:62:a4:2d:72:11:ee:b7:46:
b4:b9:46:f9:b8:98:ea:03:31:42:dd:d5:2f:ca:ba:dc:a1:0b:
a0:8d:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:04:25 2026 by rpki-client