Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: t/IAIL6MANTSuXn/IW2CEojkh6mQr9MxOaawpP24D7s=
Subject key identifier: CE:57:C5:54:D7:FE:B4:6D:18:39:14:8C:34:78:8C:F4:9B:9B:08:C1
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 01A0C55754BE6858086C164287DA48B71335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0F88
Signing time: Mon 21 Sep 2026 19:00:29 +0000
Manifest this update: Mon 21 Sep 2026 19:00:29 +0000
Manifest next update: Tue 22 Sep 2026 19:00:29 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: awND/94XkmgtEXGvZ26+cv+AMzefYplvxIPEfeWrVPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:54:be:68:58:08:6c:16:42:87:da:48:b7:13:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Sep 21 19:00:29 2026 GMT
Not After : Sep 22 19:00:29 2026 GMT
Subject: CN=ce57c554d7feb46d1839148c34788cf49b9b08c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:90:2f:f7:9f:2f:8d:dd:3b:5c:f7:95:f0:
c8:ba:01:9e:a4:57:ce:c4:e8:a1:d8:67:a2:02:94:
20:bd:f2:ed:81:cb:ba:d3:bb:4c:92:63:07:60:29:
0c:93:cd:85:27:0c:f2:d2:56:0e:5e:c8:af:cf:c6:
80:6b:68:cd:59:1d:60:2d:e1:59:ab:37:93:3d:c1:
88:b2:e3:d3:a5:fb:18:4c:ee:88:5f:ad:67:79:a1:
98:50:ef:f5:32:2b:31:71:fb:36:c5:d3:64:77:b5:
09:12:e5:8e:e0:1c:1f:c4:e6:f9:5b:9e:8e:9c:98:
c0:16:3f:8d:fc:3c:af:8b:36:f0:5a:9e:81:bd:03:
37:e7:48:57:7d:2f:fc:d6:5e:22:af:1d:57:3b:1b:
f4:5c:d2:1b:f2:23:dd:85:0a:97:72:24:41:a6:7b:
61:79:56:f6:c3:7e:98:cb:32:87:e0:76:ad:25:d4:
c1:8e:2e:7e:f7:e8:cd:a3:57:2e:66:6d:c3:3f:99:
dc:ec:bc:c9:00:12:03:c1:a6:42:50:b8:6c:4e:75:
e9:d7:20:a9:2d:f5:a0:e8:51:23:d1:2d:7f:65:2d:
73:da:01:6c:d7:e9:77:d0:62:55:4f:b7:e0:05:9d:
49:ef:a2:ce:a6:0e:e5:77:26:b6:6b:2a:9f:5a:62:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:C5:54:D7:FE:B4:6D:18:39:14:8C:34:78:8C:F4:9B:9B:08:C1
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:53:d0:4b:43:6c:6c:36:6e:4f:d2:4a:4a:3a:66:36:9a:f3:
a7:89:e3:ef:d4:43:f6:b3:af:35:bc:61:7b:5e:8b:c7:a9:5d:
5d:19:50:ff:95:9c:66:5d:ab:ef:67:3e:86:99:f1:e9:76:a7:
57:92:95:a7:61:1e:85:db:68:e5:68:bb:e2:7c:72:3a:bf:53:
53:7e:4b:52:83:2c:be:8d:98:10:34:d4:c6:c3:08:a2:c7:82:
3d:78:b3:5e:bb:e7:83:b3:b7:1b:5d:71:9c:17:d9:69:b3:6a:
76:ca:f9:a6:7b:36:0a:2b:19:18:7d:d7:74:f8:32:29:c1:f3:
d4:a6:96:3c:13:13:72:b8:3f:92:a2:c2:48:20:77:85:aa:26:
d4:d1:11:c7:e3:d1:0a:f4:88:4c:1f:57:5c:ef:e6:5d:9d:2c:
7d:75:b9:f9:62:6c:82:3a:ee:9e:61:ad:8b:83:57:23:0d:78:
5d:15:72:57:64:f1:64:85:39:9a:f7:e8:c7:f6:12:1f:8b:b9:
12:87:2e:5e:a0:d1:33:88:f7:e2:93:17:1d:47:80:0d:35:66:
b0:dd:02:97:01:be:1c:15:df:00:76:13:f8:39:db:e4:9a:70:
f4:76:10:c2:b2:b6:2e:ac:f4:1e:98:b9:cc:df:81:b9:23:18:
7f:4e:2c:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV1S+aFgIbBZCh9pItxM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2
MDk5ZjUwHhcNMjYwOTIxMTkwMDI5WhcNMjYwOTIyMTkwMDI5WjAzMTEwLwYDVQQD
EyhjZTU3YzU1NGQ3ZmViNDZkMTgzOTE0OGMzNDc4OGNmNDliOWIwOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/eQL/efL43dO1z3lfDIugGepFfO
xOih2GeiApQgvfLtgcu607tMkmMHYCkMk82FJwzy0lYOXsivz8aAa2jNWR1gLeFZ
qzeTPcGIsuPTpfsYTO6IX61neaGYUO/1Misxcfs2xdNkd7UJEuWO4BwfxOb5W56O
nJjAFj+N/DyvizbwWp6BvQM350hXfS/81l4irx1XOxv0XNIb8iPdhQqXciRBpnth
eVb2w36YyzKH4HatJdTBji5+9+jNo1cuZm3DP5nc7LzJABIDwaZCULhsTnXp1yCp
LfWg6FEj0S1/ZS1z2gFs1+l30GJVT7fgBZ1J76LOpg7ldya2ayqfWmKDHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5XxVTX/rRtGDkUjDR4jPSbmwjBMB8GA1UdIwQY
MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt
OGM5ZmNiYjNlYzUyLzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy
LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1PQS0Ns
bDZuT9JKSjpmNprzp4nj79RD9rOvNbxhe16Lx6ldXRlQ/5WcZl2r72c+hpnx6Xan
V5KVp2Eehdto5Wi74nxyOr9TU35LUoMsvo2YEDTUxsMIoseCPXizXrvng7O3G11x
nBfZabNqdsr5pns2CisZGH3XdPgyKcHz1KaWPBMTcrg/kqLCSCB3haom1NERx+PR
CvSITB9XXO/mXZ0sfXW5+WJsgjrunmGti4NXIw14XRVyV2TxZIU5mvfox/YSH4u5
EocuXqDRM4j34pMXHUeADTVmsN0ClwG+HBXfAHYT+Dnb5Jpw9HYQwrK2Lqz0Hpi5
zN+BuSMYf04sCw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:21 2026 by rpki-client