Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
File: kY-mQPg8SCrJWskFF0tSN9doN5s.mft (raw, json)
Hash identifier: WZIIliJtmA2I5YixmvYxI8m4SD2KIW/H2vI/GuhrVPI=
Subject key identifier: DB:D5:5B:39:FD:A4:7E:A8:B8:9E:71:9D:B8:61:46:EA:51:8D:11:E9
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 019F85D764BE58780BDD33437A9FAC90AA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:53 +0000
Manifest this update: Tue 21 Jul 2026 18:01:53 +0000
Manifest next update: Wed 22 Jul 2026 18:01:53 +0000
Files and hashes: 1: 251AqFOyskaKWs66aZFawfV5z14.roa (hash: XUxs9JPcVOmTRxaAw3XtUXshA8geswAzFtASBhH4g6w=)
2: 2WVr5p2H7r2azbb2WIvSV483tPM.roa (hash: IwiB9DNZvI6+xxe/bmcy9dKCy2z4spHmBIdmUbXkKUo=)
3: LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa (hash: npyymPGB2JJn3weBX4RtZOrvbRJhsnjy2HLem4uOQMI=)
4: Vt_o83jeAXwgrEV6QfNyihxJdG0.roa (hash: Fgpr0tl2Jx7B2BNewOwkF0HNqx/3fOLm+uiSmIq6TZQ=)
5: kY-mQPg8SCrJWskFF0tSN9doN5s.crl (hash: vNYOMd0gRidwCPs3AlZjvgOIRkI+SyJlXX6fpclYdao=)
6: k_p0G99T-kOb8IDRnsd82pe43DM.roa (hash: fAHyhB6wFFezzUaln2OnR6OxOwi0d6bOr/s4KfY2WbI=)
7: xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa (hash: zVFYnjswOeC1o9AjP9zhGvgKqOwrSI1huC/5Bh7oUPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:64:be:58:78:0b:dd:33:43:7a:9f:ac:90:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Jul 21 18:01:53 2026 GMT
Not After : Jul 22 18:01:53 2026 GMT
Subject: CN=dbd55b39fda47ea8b89e719db86146ea518d11e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:d6:d1:fc:4a:17:f3:f0:6c:7d:e0:f1:53:
4e:32:bd:1e:bb:8c:45:c5:2e:e8:38:68:18:27:45:
94:23:2b:7e:d1:f3:29:15:a9:54:c8:d8:d1:db:d9:
ad:6c:e1:ec:85:b0:53:88:57:bf:cd:a5:f5:e1:31:
45:ba:ea:cc:99:3f:c7:3e:74:b8:7a:54:24:7a:29:
35:bb:53:3d:74:e0:42:67:25:a3:a0:dd:8a:3b:2b:
d0:6e:97:11:f3:cb:5e:57:69:f8:df:db:ef:bc:58:
48:09:14:6a:d6:85:ea:05:da:69:af:64:06:6f:04:
a3:c0:1b:cf:ad:4f:00:96:2b:3d:63:29:7b:16:ab:
b9:bd:26:4b:30:95:2f:fa:2e:75:19:aa:32:2e:ae:
d4:46:cb:ee:d1:fe:92:6e:b2:c0:f5:58:86:32:ac:
41:c4:fa:72:70:1a:30:1f:54:93:ce:2f:49:51:c2:
9d:b4:0d:cd:59:ac:f8:bd:ae:e0:ed:d1:65:eb:1c:
b5:e4:9c:61:b8:94:09:fc:e7:3c:42:21:26:88:33:
a4:94:af:58:22:b6:9c:6d:5c:5b:ba:cb:1e:a5:4e:
50:16:b4:94:21:5c:cc:49:f2:df:02:51:6d:d5:ba:
53:cd:74:79:34:d0:17:a9:45:3c:c3:82:26:4d:73:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:5B:39:FD:A4:7E:A8:B8:9E:71:9D:B8:61:46:EA:51:8D:11:E9
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e5:c9:3f:2a:d7:ff:8c:36:28:d3:b3:41:2a:61:68:60:14:
9f:39:d4:99:a6:1f:e7:1c:f1:43:f7:67:a0:7f:3f:e5:a8:19:
ff:13:a1:06:99:aa:3e:3a:c5:3c:b2:c2:e5:19:e6:15:34:ee:
39:c8:35:fe:d9:57:23:33:a0:7a:61:c5:e0:55:0b:cd:73:07:
8a:1b:b4:31:c8:57:70:18:51:fb:6f:f2:de:cf:78:88:1f:88:
41:4b:cb:70:e5:d0:a5:5f:c6:53:a3:10:97:47:e5:a2:55:db:
78:f2:21:aa:cb:dc:c5:22:2b:15:79:66:d4:0c:4b:59:b1:46:
33:63:79:34:4e:b8:bc:f4:58:82:36:3f:54:23:77:82:5c:4f:
cc:86:9d:41:ea:d8:76:62:81:7d:83:86:2e:04:16:d0:e1:96:
82:9d:e4:d9:b4:4c:f1:1c:08:b3:2b:89:62:dd:a0:6f:40:2d:
04:8d:3e:69:81:51:41:45:97:fa:f7:23:e1:8b:23:34:f2:83:
d8:3d:e3:56:ab:de:a3:af:e0:da:ee:9a:6b:f0:0c:6c:27:c8:
1b:cb:84:0f:e4:f4:60:c0:27:0c:98:cb:91:15:e7:ca:7e:68:
70:ae:d3:20:b6:37:0d:64:7d:2f:41:7c:48:84:9e:15:8c:24:
29:61:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:59:02 2026 by rpki-client