Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier: pWUgcXns0XPfu0hEtavLP8kW+RAlfVNMlatqrzHPlDc=
Subject key identifier: A4:59:FB:78:CC:CA:F7:B5:89:DC:28:5B:96:30:AD:E3:D6:1A:87:47
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial: 019DCC73BE0489A7C69032F92ACAB6357D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number: 036B
Signing time: Mon 27 Apr 2026 01:00:30 +0000
Manifest this update: Mon 27 Apr 2026 01:00:30 +0000
Manifest next update: Tue 28 Apr 2026 01:00:30 +0000
Files and hashes: 1: 2gUkVkvBn7Q1vmsW6vZYesIru3E.roa (hash: 3mugJDdnEmraVaKho4WrwncKKVb68YhcTwc6RXDfj/k=)
2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: j+k+seHw7+ZDqUFt6JojSZSU5u50TL/rLap3cb7rFrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:73:be:04:89:a7:c6:90:32:f9:2a:ca:b6:35:7d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Validity
Not Before: Apr 27 01:00:30 2026 GMT
Not After : Apr 28 01:00:30 2026 GMT
Subject: CN=a459fb78cccaf7b589dc285b9630ade3d61a8747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:87:33:f2:66:20:a1:1a:b5:8a:2f:de:4a:
5d:6e:c9:a5:85:45:52:34:ce:a0:8c:27:f3:ce:01:
9d:c8:45:f2:06:a9:1f:a0:3c:f9:60:d1:f3:88:82:
62:ab:b1:b7:0c:36:63:0c:b1:c8:a3:4f:32:eb:46:
09:08:ca:51:11:44:07:24:5c:d0:0c:b0:7c:66:8f:
5c:7c:21:8c:a9:8b:22:bc:1d:a7:e1:5d:a9:93:c1:
f9:10:4b:2c:53:fd:aa:a9:a7:12:51:2a:e9:0d:3a:
fd:e4:5a:9a:a7:2a:9b:d0:2b:65:b4:46:d3:50:50:
b8:f7:23:fc:b7:32:86:f0:3e:f1:6b:e2:3f:96:21:
15:fc:22:75:0d:2a:80:84:c0:9a:dc:57:9d:dc:91:
d1:42:8f:ea:87:86:2a:a8:49:17:0c:58:1b:9b:e1:
b5:b4:e1:c3:da:15:89:3a:1f:6c:b3:73:d7:81:c6:
ae:e9:b9:04:90:aa:c7:20:7b:31:78:ab:d2:2c:b0:
d3:23:db:cf:fd:fd:cd:e6:c9:c1:b7:45:27:07:f1:
4d:8f:36:08:55:bc:27:f7:81:a5:1d:87:6d:38:f2:
5f:c7:5f:30:0f:dc:32:3e:f1:65:bb:03:5c:f3:47:
75:1a:02:cf:05:6b:0a:bd:2e:e4:46:33:9d:f8:ce:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:FB:78:CC:CA:F7:B5:89:DC:28:5B:96:30:AD:E3:D6:1A:87:47
X509v3 Authority Key Identifier:
keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:60:40:8f:ce:12:9e:06:3d:14:a8:28:5a:7a:8a:7a:a1:26:
a5:e4:a4:14:66:ab:f7:7f:92:1b:41:88:25:08:34:4f:ee:06:
8a:96:09:65:2f:dd:ba:b5:2f:62:6b:07:bc:12:27:7c:d3:b9:
50:94:9c:65:05:c9:05:3e:67:09:12:c6:47:04:d2:fd:c5:cf:
10:fd:7a:8b:3a:97:7d:a0:d7:de:51:88:05:52:46:3a:8b:1b:
f9:30:66:bc:4d:4c:7f:59:ad:6b:69:62:98:80:3f:07:6a:ec:
c6:e0:76:a6:39:e9:64:fc:18:09:7a:bb:1a:5b:2e:98:01:cb:
83:b7:75:42:44:dd:0b:75:fc:4a:b8:a9:73:7f:6d:04:b0:ba:
d2:52:1c:97:b2:21:a2:88:52:bc:a0:d5:6b:c4:66:ce:88:b0:
79:70:ed:c0:c2:ab:f5:9a:54:0d:32:b9:c3:fe:b3:ef:b7:a6:
a2:b3:2d:33:fd:7e:09:cf:dd:ac:fd:60:cd:ce:33:87:f4:3c:
1b:20:62:82:18:92:a2:8d:01:e9:58:3b:16:69:8e:9e:99:25:
08:45:bb:29:50:1c:8a:8a:59:0f:b6:2b:6f:b0:ad:e8:a8:30:
ac:2f:f1:49:63:5b:e0:19:96:f8:37:b1:fd:60:3d:13:9e:ce:
c6:1a:2d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Mc74EiafGkDL5Ksq2NX0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOGY1NjZjOGZmOTUxMmE1NzQ4Y2MxNDg5ZjA5MzVjMjVk
OGM0YWIwHhcNMjYwNDI3MDEwMDMwWhcNMjYwNDI4MDEwMDMwWjAzMTEwLwYDVQQD
EyhhNDU5ZmI3OGNjY2FmN2I1ODlkYzI4NWI5NjMwYWRlM2Q2MWE4NzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7OHM/JmIKEatYov3kpdbsmlhUVS
NM6gjCfzzgGdyEXyBqkfoDz5YNHziIJiq7G3DDZjDLHIo08y60YJCMpREUQHJFzQ
DLB8Zo9cfCGMqYsivB2n4V2pk8H5EEssU/2qqacSUSrpDTr95Fqapyqb0CtltEbT
UFC49yP8tzKG8D7xa+I/liEV/CJ1DSqAhMCa3Fed3JHRQo/qh4YqqEkXDFgbm+G1
tOHD2hWJOh9ss3PXgcau6bkEkKrHIHsxeKvSLLDTI9vP/f3N5snBt0UnB/FNjzYI
Vbwn94GlHYdtOPJfx18wD9wyPvFluwNc80d1GgLPBWsKvS7kRjOd+M6WpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRZ+3jMyve1idwoW5YwrePWGodHMB8GA1UdIwQY
MBaAFJGPVmyP+VEqV0jMFInwk1wl2MSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEt
YTVmMTFiYzM1ZjMxLzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEtYTVmMTFiYzM1ZjMx
LzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGBAj84S
ngY9FKgoWnqKeqEmpeSkFGar93+SG0GIJQg0T+4GipYJZS/durUvYmsHvBInfNO5
UJScZQXJBT5nCRLGRwTS/cXPEP16izqXfaDX3lGIBVJGOosb+TBmvE1Mf1mta2li
mIA/B2rsxuB2pjnpZPwYCXq7GlsumAHLg7d1QkTdC3X8Sripc39tBLC60lIcl7Ih
oohSvKDVa8RmzoiweXDtwMKr9ZpUDTK5w/6z77emorMtM/1+Cc/drP1gzc4zh/Q8
GyBighiSoo0B6Vg7FmmOnpklCEW7KVAciopZD7Yrb7Ct6KgwrC/xSWNb4BmW+Dex
/WA9E57OxhotTg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:09 2026 by rpki-client