Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: I77cz3FzTxFlklspqvdK7Xm5Xm3B9vK/g6JG+SSQRY8=
Subject key identifier: 70:F5:31:A0:56:F8:50:7F:32:D7:A6:BC:CA:69:61:96:5C:60:EB:38
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 019FA1F25952517916836CA891931E0169F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 07B9
Signing time: Mon 27 Jul 2026 05:00:42 +0000
Manifest this update: Mon 27 Jul 2026 05:00:42 +0000
Manifest next update: Tue 28 Jul 2026 05:00:42 +0000
Files and hashes: 1: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: 2ebFLPRVgWlJvnVfOeJ4yEou2YC5c59gk1fl4YbGGdw=)
2: ZS3grquCf_l1OKXIoqEGRKP0J6M.roa (hash: 2PBPag/zPM22x9IohJ6q0TulDZRbeQTFCvgCnuCjnz0=)
3: vUdfXnwcRDPW7e3X7ofFMJYqkDk.roa (hash: 4hcskGjMuomfYGEOrtlmJrd0tV2p1HAsJ5FOV+HnCFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:59:52:51:79:16:83:6c:a8:91:93:1e:01:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Jul 27 05:00:42 2026 GMT
Not After : Jul 28 05:00:42 2026 GMT
Subject: CN=70f531a056f8507f32d7a6bcca6961965c60eb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:02:c0:d4:51:04:a1:48:c1:aa:86:c6:51:
3b:27:b7:63:77:3d:a3:c7:57:d9:b0:4c:7f:14:a6:
6d:ef:6a:00:a3:82:b8:79:e0:33:ce:a7:03:8d:1f:
8c:37:f5:95:ba:f1:e6:20:55:26:fc:ec:02:47:cc:
a2:74:cd:05:03:fd:d1:a4:e6:60:c2:48:b3:76:af:
b2:98:13:b4:ff:d1:b6:8f:a7:f1:9a:ef:f6:24:e5:
1e:ef:36:cc:03:0c:81:83:82:76:fb:65:df:58:60:
c4:62:3d:d5:9e:99:e7:31:b9:e6:03:06:e8:7e:7a:
70:5a:ee:03:89:54:aa:76:60:36:4f:c5:4a:20:c4:
7e:71:86:54:c6:1f:d8:65:e2:3e:0b:69:f7:7e:2b:
38:b9:91:3c:ea:7f:b7:13:1d:4e:8d:d5:f7:d7:f5:
83:33:d9:fe:c8:2e:87:ee:a8:3c:e3:90:22:de:35:
11:e8:5a:8f:bc:db:3c:ff:76:99:28:c6:0e:fc:8d:
69:d8:5c:88:50:1e:8f:5f:2d:b6:bb:c5:2d:16:c4:
38:52:8e:f5:05:3d:ac:6a:e1:e7:36:d3:ad:ab:27:
6b:2e:ce:b5:7a:70:5d:ca:52:90:2b:4b:42:05:05:
b1:e2:a3:9d:8b:82:4f:84:a0:09:e3:3d:e6:e2:13:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:31:A0:56:F8:50:7F:32:D7:A6:BC:CA:69:61:96:5C:60:EB:38
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e3:ec:46:e9:a1:fe:cd:44:d6:71:44:2c:f8:08:40:26:19:
22:af:2b:da:ae:f5:4e:6c:d3:9f:49:07:80:68:5e:00:b2:80:
30:ee:ad:65:f6:bc:91:b7:98:6c:96:c4:0c:d8:43:99:32:6b:
3a:e2:2a:b4:9b:d8:18:20:b4:2b:c7:f1:f7:49:db:9f:4b:c1:
b7:1e:f7:48:1c:e6:34:a9:60:4d:6e:e9:15:3b:79:f5:ac:2f:
0b:69:a2:c4:78:dc:8c:a6:f5:a4:a8:d4:96:85:35:71:b3:d9:
ab:94:de:f7:c3:04:2d:54:ba:1b:ca:96:10:a8:c2:96:bb:60:
72:ba:f3:a0:c2:ea:1c:4f:fa:0a:d4:7a:71:d3:48:b3:af:71:
cc:2c:29:65:59:cb:65:8f:f7:85:33:99:8e:cf:6f:6c:a3:3d:
0f:7f:e7:cd:c7:d8:b3:ba:db:ae:6d:b3:ae:44:74:97:9c:db:
5b:28:f1:21:2d:12:a8:a1:e7:08:14:ba:14:6a:b1:5f:50:48:
e3:50:04:63:94:04:78:dd:52:cc:f7:a7:47:da:25:8d:f0:32:
00:b6:e4:1c:d3:58:6a:1d:86:96:46:1a:07:32:41:fc:76:69:
32:ec:61:ce:3e:81:72:97:ba:24:b3:3f:46:c4:e6:e7:81:1e:
c0:89:f6:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8llSUXkWg2yokZMeAWn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODVjYzQzZDgwNmEyMWI2MzMzMDIxOWViNjM4YmIxYmE0
OWFlODAwHhcNMjYwNzI3MDUwMDQyWhcNMjYwNzI4MDUwMDQyWjAzMTEwLwYDVQQD
Eyg3MGY1MzFhMDU2Zjg1MDdmMzJkN2E2YmNjYTY5NjE5NjVjNjBlYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi4CwNRRBKFIwaqGxlE7J7djdz2j
x1fZsEx/FKZt72oAo4K4eeAzzqcDjR+MN/WVuvHmIFUm/OwCR8yidM0FA/3RpOZg
wkizdq+ymBO0/9G2j6fxmu/2JOUe7zbMAwyBg4J2+2XfWGDEYj3VnpnnMbnmAwbo
fnpwWu4DiVSqdmA2T8VKIMR+cYZUxh/YZeI+C2n3fis4uZE86n+3Ex1OjdX31/WD
M9n+yC6H7qg845Ai3jUR6FqPvNs8/3aZKMYO/I1p2FyIUB6PXy22u8UtFsQ4Uo71
BT2sauHnNtOtqydrLs61enBdylKQK0tCBQWx4qOdi4JPhKAJ4z3m4hObjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD1MaBW+FB/MtemvMppYZZcYOs4MB8GA1UdIwQY
MBaAFCmFzEPYBqIbYzMCGetji7G6Sa6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mM2ZlZjQtNDVkYS00YjQzLTk4YzIt
NGRmODg0MGVmYjE3LzEvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9mM2ZlZjQtNDVkYS00YjQzLTk4YzItNGRmODg0MGVmYjE3
LzEvS1lYTVE5Z0dvaHRqTXdJWjYyT0xzYnBKcm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOPsRumh
/s1E1nFELPgIQCYZIq8r2q71TmzTn0kHgGheALKAMO6tZfa8kbeYbJbEDNhDmTJr
OuIqtJvYGCC0K8fx90nbn0vBtx73SBzmNKlgTW7pFTt59awvC2mixHjcjKb1pKjU
loU1cbPZq5Te98MELVS6G8qWEKjClrtgcrrzoMLqHE/6CtR6cdNIs69xzCwpZVnL
ZY/3hTOZjs9vbKM9D3/nzcfYs7rbrm2zrkR0l5zbWyjxIS0SqKHnCBS6FGqxX1BI
41AEY5QEeN1SzPenR9oljfAyALbkHNNYah2GlkYaBzJB/HZpMuxhzj6Bcpe6JLM/
RsTm54EewIn2Iw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:06 2026 by rpki-client