Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
File: KYm1iRINOeoU_1OWO_IxV9Mkleo.mft (raw, json)
Hash identifier: RPZ3J88hDaFLf4B3tZ3MwZsN5mBC5Q5I5XSAOLJy6CE=
Subject key identifier: ED:33:87:72:47:58:0B:1E:EB:11:49:46:AD:22:0D:7B:71:60:E0:A8
Authority key identifier: 29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
Certificate issuer: /CN=2989b589120d39ea14ff53963bf23157d32495ea
Certificate serial: 01A13D4A95F555BCA302B86005A104819AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 02:01:00 +0000
Manifest this update: Thu 15 Oct 2026 02:01:00 +0000
Manifest next update: Fri 16 Oct 2026 02:01:00 +0000
Files and hashes: 1: KYm1iRINOeoU_1OWO_IxV9Mkleo.crl (hash: S3cqya6GeYOZIthMHMwUNEtUJbwOUzCbNLBz+GLkWGc=)
2: Np8PkRIzq2H-mfEgyXXHLw4xA2o.roa (hash: kCme1YTSTXAyOTkajeANzDG66nwpOp5PNkNgd2m+u9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:95:f5:55:bc:a3:02:b8:60:05:a1:04:81:9a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989b589120d39ea14ff53963bf23157d32495ea
Validity
Not Before: Oct 15 02:01:00 2026 GMT
Not After : Oct 16 02:01:00 2026 GMT
Subject: CN=ed33877247580b1eeb114946ad220d7b7160e0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:be:e8:f9:1b:88:36:55:6b:25:18:c4:80:
31:de:ad:c5:f2:d9:38:13:4d:d4:a2:c8:d8:55:c9:
ad:b8:5f:7a:ae:00:de:e5:1e:49:1c:c3:a8:c8:08:
f2:bb:c9:94:5a:64:b4:96:cf:4b:8c:f7:40:0c:e5:
02:6c:a9:35:de:38:07:e5:00:ae:20:bd:63:a1:eb:
e1:e9:0e:bc:80:81:24:d5:c8:dc:cb:2b:03:5e:ae:
61:67:8c:77:26:6b:e4:59:78:90:14:df:64:79:80:
c6:26:ca:24:c1:5a:1e:c0:c6:db:0f:2c:2e:2d:47:
d0:f9:79:5b:42:e6:a3:ff:db:19:53:de:b5:6e:13:
c6:68:c5:01:dc:33:f3:96:e2:db:53:97:d9:41:70:
17:d4:a6:41:2f:cd:b1:2d:1d:3c:ab:b2:aa:97:16:
43:d9:09:1b:0f:13:4d:6b:db:88:52:94:02:43:32:
07:51:15:fe:eb:91:99:d9:bf:55:51:3f:a4:dd:3b:
dd:cd:ae:29:59:32:09:e9:18:69:98:70:08:ed:a9:
4b:c6:ae:e3:c5:7f:0f:65:23:d2:41:8b:11:46:3e:
54:54:1b:a1:0e:af:c8:db:0c:ad:63:ca:8a:22:8c:
6e:a9:19:70:b7:d7:d8:d7:9d:6a:75:c1:41:23:3f:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:87:72:47:58:0B:1E:EB:11:49:46:AD:22:0D:7B:71:60:E0:A8
X509v3 Authority Key Identifier:
keyid:29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:42:24:97:22:9c:49:5f:aa:2f:cb:77:76:c5:33:73:28:b5:
b0:54:e0:9f:25:67:2e:86:c6:4e:e7:1a:70:0b:45:bb:43:dc:
e2:92:c3:27:18:da:07:f4:68:13:81:b3:8d:f5:82:03:d0:7e:
d8:ba:cb:a1:05:c1:d1:a5:5d:d3:29:7c:a6:bb:b6:8b:a1:ae:
65:39:c2:9b:8e:cd:89:8b:b2:9c:78:32:ad:5f:56:41:76:6f:
1f:25:e4:bb:fd:16:aa:60:5b:db:6c:c5:e6:0c:c0:94:bd:09:
07:90:ec:3e:7d:79:87:98:d6:ca:4e:93:e7:b4:b3:4f:28:c4:
c0:41:59:95:b0:20:dd:71:71:d9:9a:2a:9e:3a:08:2b:ae:38:
d3:e4:89:82:9b:7a:64:52:c3:38:d5:1c:49:a7:61:f6:a9:4a:
cf:ce:42:ef:5c:87:ac:7c:78:f6:17:84:4b:f4:c7:34:34:b5:
b5:cf:ea:58:6f:07:71:22:d9:32:b5:67:0c:dd:ff:5e:3b:d8:
68:09:11:c3:5f:61:2c:80:43:4c:6f:b1:b5:b1:c7:da:36:b3:
b7:2a:2c:51:0e:0d:aa:59:29:68:2c:48:cc:5f:57:5a:46:63:
b5:92:11:93:b1:7b:89:fb:95:0b:6a:f7:2c:7a:fb:5e:b1:ca:
bc:a9:5c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:16 2026 by rpki-client