Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: T4NXKVW7hjdB+orxw2y/wL6YErrANHJ4r1EHylLarxg=
Subject key identifier: 60:F6:9C:EE:36:FC:B5:3E:36:7B:E1:C7:86:CE:25:D1:EF:CC:6C:DA
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 01A0D200A0FF467DB0C22E9BAA25683A9E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 06:00:51 +0000
Manifest this update: Thu 24 Sep 2026 06:00:51 +0000
Manifest next update: Fri 25 Sep 2026 06:00:51 +0000
Files and hashes: 1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: PGX2MGgdmu3qcKsVvFTIO7lnQH7/qcFuTedDhKLSq6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:a0:ff:46:7d:b0:c2:2e:9b:aa:25:68:3a:9e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Sep 24 06:00:51 2026 GMT
Not After : Sep 25 06:00:51 2026 GMT
Subject: CN=60f69cee36fcb53e367be1c786ce25d1efcc6cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2c:5e:fd:11:07:d5:27:97:14:5b:d4:15:9a:
ac:6c:ea:d3:65:63:33:27:9d:17:f2:41:c4:3a:c4:
12:cf:9b:41:51:d9:71:30:e7:21:d3:07:4f:c4:65:
f4:d5:b5:0d:24:1f:89:87:93:25:4a:a4:85:6f:b4:
b9:c3:a3:72:48:20:ed:f6:8a:44:c1:22:6b:e4:2e:
3e:17:7f:83:f7:c8:1b:30:25:03:72:95:97:48:44:
20:9e:8f:32:6d:6b:2a:d2:6c:01:9e:25:81:fa:a9:
3b:5e:37:f8:15:45:4a:69:de:e7:f3:84:44:6f:58:
ec:47:3a:ff:ad:c1:c5:bd:80:dc:46:60:72:e0:44:
ab:53:6c:72:09:01:53:a7:3f:4e:dd:2e:07:a3:5c:
ee:65:c1:1e:19:1b:af:b9:4c:56:25:91:b3:24:0e:
c2:d5:ef:8b:16:1b:85:39:5e:9a:24:c8:d0:5f:99:
f7:70:5e:2f:7d:a1:68:b6:ca:1f:59:a3:28:d2:d4:
ae:28:9f:35:d0:6f:51:e2:85:57:1b:53:a6:86:38:
4f:64:f1:6b:74:2c:1f:7a:f2:47:c3:3b:70:17:5a:
cf:09:ed:0f:42:ae:82:c2:56:0d:34:70:70:6c:1f:
01:0d:6e:64:d8:a3:35:24:2a:0a:fd:02:4a:8b:be:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F6:9C:EE:36:FC:B5:3E:36:7B:E1:C7:86:CE:25:D1:EF:CC:6C:DA
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:21:a4:4f:cd:9d:99:89:05:49:0a:01:bb:8b:e8:6e:ee:66:
38:44:e8:63:4f:07:f0:72:b7:ca:3a:90:97:f4:2b:d7:47:d3:
71:28:90:00:97:1e:c5:4f:ce:87:e2:54:f4:6a:e1:0a:87:96:
71:9a:6c:f2:a7:04:f8:30:e5:03:f7:c6:e1:62:73:67:a2:66:
9f:25:90:9a:42:3c:f5:9d:b8:4f:83:86:77:1f:70:07:d0:8b:
fb:1a:59:01:c9:c3:75:eb:d9:5a:76:5c:7a:71:32:14:64:15:
d4:ef:b9:ed:a4:4d:2e:de:65:3f:0c:43:2d:fb:9f:df:88:0c:
52:54:8e:e4:58:78:4c:eb:55:be:02:26:b7:f9:86:19:1a:cf:
9b:42:e4:db:ad:15:07:35:a7:de:95:65:d7:46:12:c5:d7:6b:
84:59:d9:55:85:8d:43:eb:45:99:a2:f7:04:5c:1e:6f:9a:3b:
d3:9d:58:ec:56:7c:ed:18:fb:0e:c8:95:1c:f6:0e:07:70:b8:
d4:88:4f:96:45:dd:f9:65:bb:1a:23:86:5b:73:86:33:d3:c7:
eb:05:62:d9:03:a7:d1:75:78:d7:d3:4c:05:6f:ac:2b:b3:d1:
d4:78:88:ac:4e:3a:73:58:d0:7f:e5:62:7b:db:5d:fe:2e:d9:
64:c4:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:10:29 2026 by rpki-client