Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File: KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier: q9Luivebp6JlBH9YbQ6s5J0GP2LbGq6JyjVexEN1KPw=
Subject key identifier: F8:CC:6E:09:85:C6:FD:55:19:37:F8:80:FF:AD:E0:03:CB:EE:28:F7
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01A0208C25FDE29D7D7BBFF59661DE3C8F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number: 120C
Signing time: Thu 20 Aug 2026 19:00:50 +0000
Manifest this update: Thu 20 Aug 2026 19:00:50 +0000
Manifest next update: Fri 21 Aug 2026 19:00:50 +0000
Files and hashes: 1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
5: JZY_foOujAs2S8oyUiHgzJmfQdc.roa (hash: DgfisKHYgXWyrC09kLGXsPVkL/aoRfMRq+KSAiwmCN4=)
6: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: AKt2M59wIhl4dXUfrLa43jgVNFdKr+FUDoLw+kg42K4=)
7: fEVKCWfXS81UhHXs6FzXRgVVlS0.roa (hash: DYXjiwoD9ieXBJq5p3EJXuBIjNeNxc0egoZ1sUSDsuY=)
8: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:8c:25:fd:e2:9d:7d:7b:bf:f5:96:61:de:3c:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Aug 20 19:00:50 2026 GMT
Not After : Aug 21 19:00:50 2026 GMT
Subject: CN=f8cc6e0985c6fd551937f880ffade003cbee28f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:93:bd:1b:50:06:0a:56:ed:97:94:f5:ec:
65:21:e2:42:37:20:b3:c5:ed:76:d0:2a:41:7f:76:
75:f2:bf:ba:10:eb:93:4c:65:90:48:b8:8f:f8:8d:
5e:ff:2f:1b:17:41:c6:00:30:25:70:40:6d:e1:b2:
7b:e0:75:58:50:99:44:06:e1:b3:19:47:d4:98:ed:
cf:26:82:48:21:fa:73:f4:c0:e2:36:ec:df:8e:c7:
29:ad:c5:2d:1c:d3:ab:c9:29:7e:5a:49:fb:ed:31:
9b:35:df:d4:8b:af:b3:55:cd:97:1a:24:e3:68:b2:
ae:33:e8:fd:50:5a:69:68:83:db:e7:c6:43:f0:ee:
4b:f1:c8:8d:02:d2:50:f7:b9:d8:3a:ff:49:76:a0:
8d:13:20:e1:a0:07:03:e5:c1:3d:8b:4e:27:cb:4a:
c6:fd:a6:ba:72:32:4a:5f:4d:6f:0d:b8:46:94:08:
b8:4e:74:24:7e:7b:a5:ae:59:97:99:50:eb:69:82:
8c:3c:6a:0b:8b:e3:fd:b0:12:c9:d5:67:46:f1:cd:
b8:c4:d3:77:2d:d4:21:46:00:c1:05:c9:b4:eb:4a:
ba:8f:76:a3:a8:c4:18:22:b5:60:14:c2:c0:0b:b6:
3e:3e:d5:e2:95:c2:a1:55:56:75:54:54:ec:33:83:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CC:6E:09:85:C6:FD:55:19:37:F8:80:FF:AD:E0:03:CB:EE:28:F7
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:53:bb:3b:d4:40:db:01:70:43:64:fc:9f:fa:3a:b8:89:3e:
c1:85:31:64:f3:31:84:4f:fd:51:cf:a0:fa:ea:53:37:03:06:
c5:90:a3:ab:29:3e:88:c9:69:7b:58:e5:f0:fb:45:4f:75:8e:
a2:9b:08:ff:b6:e5:42:00:71:63:89:3c:d7:6c:04:1a:2c:00:
b4:bd:2f:df:f1:4b:8a:e2:25:ea:8b:b0:3d:86:35:5e:97:ac:
26:57:98:66:ae:47:97:83:06:86:c9:2e:9d:07:90:09:92:f0:
b4:9d:45:92:46:45:97:f4:9f:4a:83:4b:f2:61:26:08:15:33:
86:78:20:03:61:55:1a:ad:11:3c:70:bd:48:3e:b9:15:bd:8b:
4b:16:b0:6d:c7:1a:a4:b8:bd:21:bd:27:91:a2:d3:21:18:6a:
e0:cf:25:04:66:75:c6:2f:e0:5f:c5:93:ba:2b:f1:40:b2:1d:
3f:3c:94:55:9e:57:95:0d:2e:bb:e3:ec:d4:6e:6c:e6:57:76:
b2:bc:68:a6:e8:e6:0c:7b:86:42:53:1a:e8:e3:e7:d9:4f:a5:
0f:e1:5a:50:ce:5f:6f:fe:bf:ea:40:c8:98:ca:0a:46:62:78:
5c:5d:bc:f7:9b:87:0f:07:6f:d1:8b:0c:f4:3f:5f:bd:52:20:
2f:97:38:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgjCX94p19e7/1lmHePI9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl
YjliYjMwHhcNMjYwODIwMTkwMDUwWhcNMjYwODIxMTkwMDUwWjAzMTEwLwYDVQQD
EyhmOGNjNmUwOTg1YzZmZDU1MTkzN2Y4ODBmZmFkZTAwM2NiZWUyOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGTvRtQBgpW7ZeU9exlIeJCNyCz
xe120CpBf3Z18r+6EOuTTGWQSLiP+I1e/y8bF0HGADAlcEBt4bJ74HVYUJlEBuGz
GUfUmO3PJoJIIfpz9MDiNuzfjscprcUtHNOrySl+Wkn77TGbNd/Ui6+zVc2XGiTj
aLKuM+j9UFppaIPb58ZD8O5L8ciNAtJQ97nYOv9JdqCNEyDhoAcD5cE9i04ny0rG
/aa6cjJKX01vDbhGlAi4TnQkfnulrlmXmVDraYKMPGoLi+P9sBLJ1WdG8c24xNN3
LdQhRgDBBcm060q6j3ajqMQYIrVgFMLAC7Y+PtXilcKhVVZ1VFTsM4PBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjMbgmFxv1VGTf4gP+t4APL7ij3MB8GA1UdIwQY
MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt
MTQ3MDJhNGQyNjYwLzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw
LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVO7O9RA
2wFwQ2T8n/o6uIk+wYUxZPMxhE/9Uc+g+upTNwMGxZCjqyk+iMlpe1jl8PtFT3WO
opsI/7blQgBxY4k812wEGiwAtL0v3/FLiuIl6ouwPYY1XpesJleYZq5Hl4MGhsku
nQeQCZLwtJ1FkkZFl/SfSoNL8mEmCBUzhnggA2FVGq0RPHC9SD65Fb2LSxawbcca
pLi9Ib0nkaLTIRhq4M8lBGZ1xi/gX8WTuivxQLIdPzyUVZ5XlQ0uu+Ps1G5s5ld2
srxopujmDHuGQlMa6OPn2U+lD+FaUM5fb/6/6kDImMoKRmJ4XF2895uHDwdv0YsM
9D9fvVIgL5c4Jw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:57 2026 by rpki-client