
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: 1GcvfTPZPmJgWfMtiHNFdaLwGUaZgs09J1UBHxxXGNU=
Subject key identifier: 8F:37:96:8C:10:71:AE:24:8D:6B:61:04:2F:D3:C4:DC:05:94:D6:C5
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 01A06D5E56DE0EFA8FCE84D359C5AA577FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0D55
Signing time: Fri 04 Sep 2026 17:01:34 +0000
Manifest this update: Fri 04 Sep 2026 17:01:34 +0000
Manifest next update: Sat 05 Sep 2026 17:01:34 +0000
Files and hashes: 1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: Jrgeixcf3qGasX5AsQMsCG7Lc0IPo4v4LFXcVBT0Lvg=)
4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:56:de:0e:fa:8f:ce:84:d3:59:c5:aa:57:7f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Sep 4 17:01:34 2026 GMT
Not After : Sep 5 17:01:34 2026 GMT
Subject: CN=8f37968c1071ae248d6b61042fd3c4dc0594d6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:5d:96:2c:45:e3:f6:10:98:28:d0:76:d3:
73:59:a3:2d:e6:84:49:5b:c5:15:2d:1a:38:c2:87:
fa:61:b6:b7:d5:55:69:4d:6f:33:3e:9a:1f:5e:12:
09:61:01:f6:8f:3e:e7:95:58:a2:24:10:58:1d:3d:
ee:82:77:c4:40:d9:cc:9f:ab:53:cd:84:41:0c:44:
3f:4e:fc:40:1a:f3:12:fa:a0:95:c2:8d:d1:1b:da:
56:4a:0c:c7:c4:00:ec:d1:4b:ee:93:ba:f0:16:f5:
b3:45:ed:f4:bc:65:ec:51:6b:f7:81:68:04:f7:97:
26:79:e5:73:2d:f5:00:c7:23:a7:00:e5:96:7b:a0:
ea:d9:47:58:a2:a2:70:c5:a0:de:e7:02:5e:00:96:
59:e6:2a:8b:39:d7:c7:e9:12:98:47:72:62:2b:ab:
e7:4d:a2:71:d4:12:96:68:d8:55:77:3a:0b:68:9d:
f6:0e:ab:e1:67:a8:09:37:cc:75:6f:ec:94:54:76:
62:72:f9:55:3e:87:c1:a2:f3:21:57:2f:ac:b3:ac:
12:12:61:d1:7f:f6:18:97:16:c8:c7:5f:63:a0:a0:
c9:6c:8c:88:43:3f:93:fa:ef:1d:c6:15:9f:e2:e6:
ee:33:89:d6:f7:12:ef:32:b7:21:af:2e:17:c0:95:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:96:8C:10:71:AE:24:8D:6B:61:04:2F:D3:C4:DC:05:94:D6:C5
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:ed:02:ce:93:f5:d2:0b:50:67:7e:ec:6c:bc:7b:c8:73:
d3:ba:39:62:7e:ab:db:d7:f8:21:e3:2e:1e:ee:00:71:a5:c7:
23:23:1f:39:22:6e:3c:c3:6a:4f:1a:c9:8f:65:f8:5a:a4:dc:
d1:8d:15:9a:dd:e5:9a:f4:af:8e:3b:80:34:21:ed:55:ce:ea:
19:f6:69:79:3e:22:5a:ff:ad:d6:ef:09:d6:96:56:3a:80:82:
cf:bc:39:e3:1a:f7:ed:6e:c0:18:23:e4:d5:d2:9b:e0:13:33:
8d:9f:e9:93:95:bc:22:56:ef:65:84:97:e0:b9:64:60:8f:ac:
3c:0d:0f:03:26:de:b0:01:e9:bc:98:ee:82:91:a9:e9:5e:1f:
18:53:9e:39:2f:37:c1:43:b9:8f:cd:30:39:65:f8:d7:32:b5:
8b:a1:d1:6a:5d:80:1b:47:3d:de:d2:16:4a:4d:97:74:99:57:
a8:c7:2d:3d:c6:3d:2a:29:08:06:4f:e0:5c:ba:dd:34:ab:cb:
3e:62:78:3c:e3:ef:c6:7b:b7:9b:18:f1:cb:83:9b:19:f5:4c:
5f:ad:68:c1:6f:60:e6:31:71:19:ca:e6:52:c3:51:fd:42:2c:
7f:8e:c1:de:ac:e3:04:cc:e0:f2:5e:20:35:78:2f:de:06:08:
cc:95:e0:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtXlbeDvqPzoTTWcWqV3/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy
NTBlYTYwHhcNMjYwOTA0MTcwMTM0WhcNMjYwOTA1MTcwMTM0WjAzMTEwLwYDVQQD
Eyg4ZjM3OTY4YzEwNzFhZTI0OGQ2YjYxMDQyZmQzYzRkYzA1OTRkNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JZdlixF4/YQmCjQdtNzWaMt5oRJ
W8UVLRo4wof6Yba31VVpTW8zPpofXhIJYQH2jz7nlViiJBBYHT3ugnfEQNnMn6tT
zYRBDEQ/TvxAGvMS+qCVwo3RG9pWSgzHxADs0Uvuk7rwFvWzRe30vGXsUWv3gWgE
95cmeeVzLfUAxyOnAOWWe6Dq2UdYoqJwxaDe5wJeAJZZ5iqLOdfH6RKYR3JiK6vn
TaJx1BKWaNhVdzoLaJ32DqvhZ6gJN8x1b+yUVHZicvlVPofBovMhVy+ss6wSEmHR
f/YYlxbIx19joKDJbIyIQz+T+u8dxhWf4ubuM4nW9xLvMrchry4XwJVGNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI83lowQca4kjWthBC/TxNwFlNbFMB8GA1UdIwQY
MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt
NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm
LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4XtAs6T
9dILUGd+7Gy8e8hz07o5Yn6r29f4IeMuHu4AcaXHIyMfOSJuPMNqTxrJj2X4WqTc
0Y0Vmt3lmvSvjjuANCHtVc7qGfZpeT4iWv+t1u8J1pZWOoCCz7w54xr37W7AGCPk
1dKb4BMzjZ/pk5W8IlbvZYSX4LlkYI+sPA0PAybesAHpvJjugpGp6V4fGFOeOS83
wUO5j80wOWX41zK1i6HRal2AG0c93tIWSk2XdJlXqMctPcY9KikIBk/gXLrdNKvL
PmJ4POPvxnu3mxjxy4ObGfVMX61owW9g5jFxGcrmUsNR/UIsf47B3qzjBMzg8l4g
NXgv3gYIzJXgrg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:23 2026 by rpki-client