Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
File: KYm1iRINOeoU_1OWO_IxV9Mkleo.mft (raw, json)
Hash identifier: IVeKtI6d19agP/p4ePR78wVrHeqInDCIIP+SBrh25DA=
Subject key identifier: 27:D8:CF:0C:78:DC:44:FB:B7:62:44:D8:A0:B5:FF:F9:57:34:93:37
Authority key identifier: 29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
Certificate issuer: /CN=2989b589120d39ea14ff53963bf23157d32495ea
Certificate serial: 01A0292117407CCD9EB201C9315B2BB0D316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
Manifest number: 1A13
Signing time: Sat 22 Aug 2026 11:00:29 +0000
Manifest this update: Sat 22 Aug 2026 11:00:29 +0000
Manifest next update: Sun 23 Aug 2026 11:00:29 +0000
Files and hashes: 1: KYm1iRINOeoU_1OWO_IxV9Mkleo.crl (hash: QDtdv5loH0pGUeo+Zs6aBIuD1ezK9PW3BO46jX48KuE=)
2: Np8PkRIzq2H-mfEgyXXHLw4xA2o.roa (hash: kCme1YTSTXAyOTkajeANzDG66nwpOp5PNkNgd2m+u9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:21:17:40:7c:cd:9e:b2:01:c9:31:5b:2b:b0:d3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989b589120d39ea14ff53963bf23157d32495ea
Validity
Not Before: Aug 22 11:00:29 2026 GMT
Not After : Aug 23 11:00:29 2026 GMT
Subject: CN=27d8cf0c78dc44fbb76244d8a0b5fff957349337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8d:10:dd:06:8a:1e:6d:af:d3:d8:7d:8d:83:
13:7f:00:c4:71:57:60:28:f7:88:6d:01:68:44:b2:
76:85:e5:26:c3:bc:6d:e0:c9:c1:61:a7:2f:b5:2f:
a1:92:d9:fc:5c:ef:c3:ae:ea:e6:9e:97:0f:89:51:
a7:75:97:2f:89:3e:9c:f2:ef:f7:ae:2e:43:f6:ee:
01:d6:87:45:12:72:ed:f6:38:b7:cf:e8:0d:2c:64:
59:db:38:25:01:22:d5:fd:21:c3:f8:a8:ef:eb:20:
c6:ed:42:a9:42:df:f5:03:30:ff:3c:ec:b8:f6:af:
4a:c9:1e:77:38:b4:78:37:65:ff:2b:d7:4b:df:5d:
cb:a4:30:ae:6a:8d:08:0a:ba:6d:9d:72:a2:f1:09:
00:e4:37:f5:44:27:81:25:05:2b:a0:c9:d9:e6:22:
f5:7f:b5:36:8c:6d:6c:2f:77:87:1e:b5:8b:84:5c:
15:44:31:dc:a6:d9:81:15:5a:69:7d:5b:b8:ea:55:
65:e7:1f:a6:8b:1e:16:b1:58:a2:7a:53:66:f4:22:
08:c8:7b:9f:86:1d:dd:86:6a:b8:59:35:1d:b9:fb:
ce:fb:44:40:4f:c1:7e:d2:3f:4a:11:ae:08:64:49:
b5:83:8a:9a:d1:08:c1:13:bc:ef:63:8a:f5:89:2c:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:CF:0C:78:DC:44:FB:B7:62:44:D8:A0:B5:FF:F9:57:34:93:37
X509v3 Authority Key Identifier:
keyid:29:89:B5:89:12:0D:39:EA:14:FF:53:96:3B:F2:31:57:D3:24:95:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYm1iRINOeoU_1OWO_IxV9Mkleo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f08170-8d92-4cfa-b733-fbdbe514df5a/1/KYm1iRINOeoU_1OWO_IxV9Mkleo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cb:74:62:5b:d6:10:66:22:1a:6c:24:6b:48:9a:5a:dc:a0:
44:46:c6:51:3f:cb:13:4c:18:05:cf:42:b8:1a:75:be:f1:b3:
db:6e:54:ab:9a:95:e2:3b:a6:c0:59:fd:93:96:76:40:fc:04:
7d:fa:b9:3d:36:f6:79:c3:77:21:05:c4:ca:96:79:ab:a8:3d:
96:19:35:28:9e:14:6e:1b:1b:2d:91:3d:30:f5:d0:4f:07:9e:
39:66:c0:72:f5:e3:be:31:22:b0:fb:11:a0:1e:87:a2:cd:c3:
28:ec:7d:0d:d1:81:4b:44:f8:52:c3:02:e2:6b:95:fb:5a:03:
90:80:bd:d2:9a:24:35:a7:60:35:25:1f:dc:94:74:69:04:92:
23:3f:40:51:96:0f:87:0a:3c:fa:56:11:c2:bc:dd:5b:72:a5:
26:b8:59:aa:84:86:47:d2:f0:48:65:fc:8c:fc:27:51:e5:65:
8b:34:56:32:a7:a6:c2:50:70:a4:39:09:0c:d4:0c:4f:65:83:
20:17:3a:be:8a:6a:db:f4:6e:c5:6c:f7:ac:72:12:5e:11:ec:
38:90:11:64:66:a6:8b:d5:a1:51:07:2d:48:04:65:a6:20:5e:
bc:9a:af:1e:42:b2:da:2b:91:4e:37:76:64:0b:08:67:4a:2b:
ef:b3:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 12:26:18 2026 by rpki-client