Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File: kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier: An76/qIxqHLBJw3Ny40/1TAC8acYpmDQpM+ljyLuaJ0=
Subject key identifier: 23:8D:1D:44:BC:87:7C:1B:8A:2A:2F:31:12:AD:BF:AC:A9:1A:B2:DB
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 019D394177EA139AC9090E9A0F4C6000A420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number: 15DB
Signing time: Sun 29 Mar 2026 11:01:24 +0000
Manifest this update: Sun 29 Mar 2026 11:01:24 +0000
Manifest next update: Mon 30 Mar 2026 11:01:24 +0000
Files and hashes: 1: 1bETOn4u2gjUznUVtc2UJFR0MNE.roa (hash: Se377+qulLt1rOwEhiw29dlkwUaw9wX23jWkxc/skO8=)
2: 5zwisq6tqBp5Q8UJhKWZ6V2emyU.roa (hash: q2Bm4SlhXLKP3doSfRxzJEsVmQ5w9uuO4LbIvtN/uRU=)
3: BAcJe-19lYOvYihsq39lbaP8oGs.roa (hash: ECeRBoRLHOCn/TR8MMhvCUtYLPwMPepDaPSKaAfRuGY=)
4: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: FBhwDsb79TYS3n+kcRrNAJ+LT/rVFGk0otw6sCTMWJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:77:ea:13:9a:c9:09:0e:9a:0f:4c:60:00:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Mar 29 11:01:24 2026 GMT
Not After : Mar 30 11:01:24 2026 GMT
Subject: CN=238d1d44bc877c1b8a2a2f3112adbfaca91ab2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:ea:11:25:47:51:68:00:8a:e0:30:fc:63:
0d:72:95:ed:e7:b9:f0:b7:a7:c9:70:6c:d1:1d:64:
96:cf:a2:64:2f:b5:4d:88:0f:e5:47:ce:71:5e:02:
aa:24:0c:44:45:07:23:8a:4c:f2:83:97:23:0a:17:
46:a0:cd:5b:6e:69:e6:48:6c:61:ab:ac:6c:22:bf:
14:fc:f5:7d:99:51:3d:60:f4:bc:40:10:42:2a:e5:
45:33:77:a4:0e:07:3a:e9:52:2f:3b:e1:ce:16:6c:
dd:d1:dd:bb:dd:dc:e1:77:4f:ce:10:68:5e:91:37:
06:14:be:d5:f0:db:8f:72:0c:90:a2:bb:39:50:75:
95:44:8e:c3:d0:fa:56:7a:05:a2:c8:47:65:73:6b:
6c:46:03:81:93:7e:f7:ed:06:89:55:bc:43:96:be:
af:52:a2:81:5a:fb:33:dd:3a:08:fd:53:0f:7f:51:
26:21:c6:c5:bf:7a:bf:3b:bb:46:33:0e:d8:0b:0a:
e8:6b:4c:5a:49:07:49:30:85:c3:8b:2e:22:76:38:
25:f4:56:37:59:45:2c:de:9a:e4:83:1d:ca:16:c8:
a8:50:3d:c8:97:59:c9:86:19:55:7f:16:ae:78:c7:
b4:f1:1d:79:1b:a6:98:fe:df:39:2b:04:a6:f9:d9:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8D:1D:44:BC:87:7C:1B:8A:2A:2F:31:12:AD:BF:AC:A9:1A:B2:DB
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:96:41:de:ee:db:7c:88:16:84:e9:2c:72:a0:b8:9a:62:00:
73:46:05:71:91:7b:ab:51:a6:6e:f1:29:29:0f:a0:e3:57:4f:
80:3f:1e:ba:7a:45:e7:a9:90:f2:35:f9:82:16:10:5e:4e:50:
9e:7d:96:32:06:0f:aa:3f:92:d9:8c:03:aa:27:68:2b:45:7b:
ee:33:d3:e0:ab:87:ea:f5:ce:75:4c:b6:5e:92:17:79:d2:df:
ff:92:d6:bf:76:1c:47:23:e9:ed:9c:31:e5:19:a9:9c:83:8e:
f6:e4:61:49:dd:d7:3f:5d:04:f6:ee:f7:e9:c0:65:6e:6a:da:
01:6a:4d:7b:21:8b:fe:15:b0:04:6b:90:02:9d:6c:45:05:0f:
fc:43:c3:c8:50:a4:32:a0:a8:0d:68:f9:ee:d1:ea:c6:64:3b:
1d:74:be:0b:3b:81:47:9b:48:fc:16:15:2e:12:6e:6f:db:9a:
62:87:9a:4e:e3:f4:74:a8:79:ae:fa:3d:5f:f1:d5:6a:93:6b:
7d:fd:0d:40:b1:57:f7:8a:f4:eb:8f:69:1b:f8:b0:cc:40:eb:
24:c1:eb:3c:7a:67:02:d1:f8:4b:29:52:13:56:bf:05:f9:c1:
e7:72:74:d6:23:87:19:f9:86:4b:c6:e8:cb:c9:dd:1c:f3:34:
5b:b1:d1:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QXfqE5rJCQ6aD0xgAKQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjYwYjIzZmUzYjg2NDJkNmJmNDc1ZjhlYjdmY2FkOWQx
M2M0MTMwHhcNMjYwMzI5MTEwMTI0WhcNMjYwMzMwMTEwMTI0WjAzMTEwLwYDVQQD
EygyMzhkMWQ0NGJjODc3YzFiOGEyYTJmMzExMmFkYmZhY2E5MWFiMmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk93qESVHUWgAiuAw/GMNcpXt57nw
t6fJcGzRHWSWz6JkL7VNiA/lR85xXgKqJAxERQcjikzyg5cjChdGoM1bbmnmSGxh
q6xsIr8U/PV9mVE9YPS8QBBCKuVFM3ekDgc66VIvO+HOFmzd0d273dzhd0/OEGhe
kTcGFL7V8NuPcgyQors5UHWVRI7D0PpWegWiyEdlc2tsRgOBk3737QaJVbxDlr6v
UqKBWvsz3ToI/VMPf1EmIcbFv3q/O7tGMw7YCwroa0xaSQdJMIXDiy4idjgl9FY3
WUUs3prkgx3KFsioUD3Il1nJhhlVfxaueMe08R15G6aY/t85KwSm+dlllwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCONHUS8h3wbiiovMRKtv6ypGrLbMB8GA1UdIwQY
MBaAFJJmCyP+O4ZC1r9HX463/K2dE8QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWIt
MTNlZjFjNDU1Y2M0LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWItMTNlZjFjNDU1Y2M0
LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5ZB3u7b
fIgWhOkscqC4mmIAc0YFcZF7q1GmbvEpKQ+g41dPgD8eunpF56mQ8jX5ghYQXk5Q
nn2WMgYPqj+S2YwDqidoK0V77jPT4KuH6vXOdUy2XpIXedLf/5LWv3YcRyPp7Zwx
5RmpnIOO9uRhSd3XP10E9u736cBlbmraAWpNeyGL/hWwBGuQAp1sRQUP/EPDyFCk
MqCoDWj57tHqxmQ7HXS+CzuBR5tI/BYVLhJub9uaYoeaTuP0dKh5rvo9X/HVapNr
ff0NQLFX94r0649pG/iwzEDrJMHrPHpnAtH4SylSE1a/BfnB53J01iOHGfmGS8bo
y8ndHPM0W7HR9g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:33 2026 by rpki-client