Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
File: kY-mQPg8SCrJWskFF0tSN9doN5s.mft (raw, json)
Hash identifier: DHkLjIek2S2oAg+unXTlLfXZmiPwHCEOTICEH7t5eho=
Subject key identifier: 91:8A:4B:71:4F:AF:55:25:5A:5C:0C:09:23:E6:9B:58:E5:B4:EC:43
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 01A0C859087CE35BAF2B6CFE451CB0E709F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:13 +0000
Manifest this update: Tue 22 Sep 2026 09:01:13 +0000
Manifest next update: Wed 23 Sep 2026 09:01:13 +0000
Files and hashes: 1: 251AqFOyskaKWs66aZFawfV5z14.roa (hash: XUxs9JPcVOmTRxaAw3XtUXshA8geswAzFtASBhH4g6w=)
2: 2WVr5p2H7r2azbb2WIvSV483tPM.roa (hash: IwiB9DNZvI6+xxe/bmcy9dKCy2z4spHmBIdmUbXkKUo=)
3: LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa (hash: npyymPGB2JJn3weBX4RtZOrvbRJhsnjy2HLem4uOQMI=)
4: Vt_o83jeAXwgrEV6QfNyihxJdG0.roa (hash: Fgpr0tl2Jx7B2BNewOwkF0HNqx/3fOLm+uiSmIq6TZQ=)
5: kY-mQPg8SCrJWskFF0tSN9doN5s.crl (hash: fdecKzW7RzFNuosShSIBWLc/DLTZVHGQsO+PevKxmdI=)
6: k_p0G99T-kOb8IDRnsd82pe43DM.roa (hash: fAHyhB6wFFezzUaln2OnR6OxOwi0d6bOr/s4KfY2WbI=)
7: xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa (hash: zVFYnjswOeC1o9AjP9zhGvgKqOwrSI1huC/5Bh7oUPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:08:7c:e3:5b:af:2b:6c:fe:45:1c:b0:e7:09:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Sep 22 09:01:13 2026 GMT
Not After : Sep 23 09:01:13 2026 GMT
Subject: CN=918a4b714faf55255a5c0c0923e69b58e5b4ec43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:5f:a0:72:b9:ce:0c:4b:06:2f:8c:9a:b5:
0c:41:4e:b9:76:47:0d:f0:08:a7:a5:c8:a8:a4:ba:
42:89:4e:2d:df:42:bc:23:9d:be:15:fd:ed:50:df:
98:f9:9b:f0:07:fe:8c:b9:2b:bd:d7:0c:b2:ad:b0:
51:ea:bd:0b:60:29:69:00:a5:26:3c:40:ec:2b:c8:
96:d9:67:c3:46:57:22:9b:f7:df:34:5a:f4:fa:46:
aa:51:86:7f:85:9f:da:83:dd:d6:fb:f6:a5:03:fd:
ad:3f:42:9e:43:ce:61:2e:de:41:cf:6d:21:95:c8:
36:43:a9:58:ed:26:f1:f2:73:45:2f:0d:d3:c3:45:
59:b9:f3:94:23:b8:16:81:41:98:a4:a4:39:67:72:
e9:ac:f9:1f:64:c7:ad:cf:07:51:72:8c:93:79:0b:
23:20:1d:6e:f4:34:48:22:a4:02:39:18:b0:3f:58:
55:e0:c9:36:9d:c6:14:e6:81:e7:44:d2:a6:d9:e3:
0c:dd:42:73:86:78:88:63:ee:c4:35:8a:b5:ee:cd:
82:1f:2b:3e:49:21:d8:34:84:e6:74:9d:72:bb:05:
18:43:55:c2:9b:2c:76:ba:54:de:41:dc:45:02:7d:
a2:ee:83:5d:34:e3:28:01:5b:61:aa:11:45:a0:e8:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8A:4B:71:4F:AF:55:25:5A:5C:0C:09:23:E6:9B:58:E5:B4:EC:43
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ee:01:ec:13:19:9c:92:e7:9c:8a:7e:9f:84:7b:fa:73:99:
ce:ca:2a:88:05:c5:05:db:6a:24:d7:93:51:eb:5d:82:c2:ba:
fb:cb:f5:3d:a5:30:89:d9:71:b6:a0:3d:50:14:78:d3:eb:ec:
8f:67:23:9c:4a:05:ce:2f:b6:a1:6d:28:49:48:16:d1:73:94:
ed:40:3d:23:e2:fc:43:e7:70:ca:50:33:43:ef:66:4a:a6:9b:
6d:fd:d8:3e:84:37:c0:1f:9d:1c:16:0a:a9:aa:cf:2f:b9:a1:
0b:ec:1a:b2:9c:89:a5:de:db:18:d3:7b:33:82:63:56:c7:30:
11:47:f5:c2:62:55:79:25:5e:de:b9:47:a3:52:e8:8f:53:94:
77:2c:db:35:35:d1:12:d1:c2:52:eb:f4:e6:86:80:4e:6f:c9:
42:62:85:31:d2:76:b7:88:c2:dd:9a:6f:8a:77:21:57:6e:61:
a3:1b:e0:44:b8:46:43:9a:70:20:a5:ff:4a:b0:24:dd:e7:e5:
a2:55:a5:ba:9e:cd:f7:11:8e:c3:39:3e:14:53:a8:1d:d6:ac:
d9:cd:ee:f3:f4:92:8f:21:5b:2e:dc:3b:03:8c:53:73:d3:0c:
8f:a8:1c:50:c6:6f:2e:cc:64:2c:04:19:7c:d1:df:3a:2b:ec:
bb:a0:80:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWQh841uvK2z+RRyw5wn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOGZhNjQwZjgzYzQ4MmFjOTVhYzkwNTE3NGI1MjM3ZDc2
ODM3OWIwHhcNMjYwOTIyMDkwMTEzWhcNMjYwOTIzMDkwMTEzWjAzMTEwLwYDVQQD
Eyg5MThhNGI3MTRmYWY1NTI1NWE1YzBjMDkyM2U2OWI1OGU1YjRlYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqtfoHK5zgxLBi+MmrUMQU65dkcN
8AinpciopLpCiU4t30K8I52+Ff3tUN+Y+ZvwB/6MuSu91wyyrbBR6r0LYClpAKUm
PEDsK8iW2WfDRlcim/ffNFr0+kaqUYZ/hZ/ag93W+/alA/2tP0KeQ85hLt5Bz20h
lcg2Q6lY7Sbx8nNFLw3Tw0VZufOUI7gWgUGYpKQ5Z3LprPkfZMetzwdRcoyTeQsj
IB1u9DRIIqQCORiwP1hV4Mk2ncYU5oHnRNKm2eMM3UJzhniIY+7ENYq17s2CHys+
SSHYNITmdJ1yuwUYQ1XCmyx2ulTeQdxFAn2i7oNdNOMoAVthqhFFoOjbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGKS3FPr1UlWlwMCSPmm1jltOxDMB8GA1UdIwQY
MBaAFJGPpkD4PEgqyVrJBRdLUjfXaDebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ktbVFQZzhTQ3JKV3NrRkYwdFNOOWRvTjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt
MWIxM2JkNDU2NmE1LzEva1ktbVFQZzhTQ3JKV3NrRkYwdFNOOWRvTjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1
LzEva1ktbVFQZzhTQ3JKV3NrRkYwdFNOOWRvTjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYe4B7BMZ
nJLnnIp+n4R7+nOZzsoqiAXFBdtqJNeTUetdgsK6+8v1PaUwidlxtqA9UBR40+vs
j2cjnEoFzi+2oW0oSUgW0XOU7UA9I+L8Q+dwylAzQ+9mSqabbf3YPoQ3wB+dHBYK
qarPL7mhC+waspyJpd7bGNN7M4JjVscwEUf1wmJVeSVe3rlHo1Loj1OUdyzbNTXR
EtHCUuv05oaATm/JQmKFMdJ2t4jC3ZpvinchV25hoxvgRLhGQ5pwIKX/SrAk3efl
olWlup7N9xGOwzk+FFOoHdas2c3u8/SSjyFbLtw7A4xTc9MMj6gcUMZvLsxkLAQZ
fNHfOivsu6CAOA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:34:26 2026 by rpki-client