Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
File: kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft (raw, json)
Hash identifier: C3ab4Qvg1ViJ3GY048Uq9VVIGal6txFqCjxljYOdcUs=
Subject key identifier: D9:4A:18:59:85:C0:88:59:96:2D:01:EE:F8:FC:97:EA:C9:EC:C5:3D
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 01A08CE9662B091115102C7BDAA8C7740B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
Manifest number: 0534
Signing time: Thu 10 Sep 2026 20:01:41 +0000
Manifest this update: Thu 10 Sep 2026 20:01:41 +0000
Manifest next update: Fri 11 Sep 2026 20:01:41 +0000
Files and hashes: 1: kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl (hash: OHnszok2lTi4u02hL1BaMAB85Dk2er3JGIB1lDyT6sI=)
2: p7RfayQGkYVg5d11LiJ1Q0zbyT4.roa (hash: I4DW3u8qF1DUqorT+zF5KoXC1GrV1uanCFydVzAjLr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:66:2b:09:11:15:10:2c:7b:da:a8:c7:74:0b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Sep 10 20:01:41 2026 GMT
Not After : Sep 11 20:01:41 2026 GMT
Subject: CN=d94a185985c08859962d01eef8fc97eac9ecc53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:5e:eb:33:8b:28:5b:32:f9:a9:23:00:c6:
8e:24:cc:f8:93:ae:eb:67:48:09:fb:d8:ca:75:47:
99:a6:ba:8c:85:f8:cf:e5:a0:1b:a6:41:70:af:12:
8c:e2:05:d5:7f:76:b6:e9:e4:2c:2f:63:79:b3:ee:
5d:b7:e0:d1:87:24:df:d0:72:e9:b0:6a:68:b1:40:
e5:0d:dd:df:16:96:ac:a5:f8:fc:0a:f8:ae:4b:3b:
2a:cc:28:a1:f8:67:1b:53:37:89:1c:22:1f:a7:7a:
c9:dc:71:b8:63:91:31:9a:9d:1e:2c:2e:ee:ea:18:
4f:3c:1c:e8:80:ac:8b:f5:36:2e:b1:7d:c1:9b:c1:
b1:99:96:02:ad:62:ea:8c:ae:65:f6:38:fe:29:1c:
d2:b7:61:de:06:5d:da:9b:70:98:17:3b:9d:f2:f9:
b2:de:ff:ed:13:d1:19:67:ce:c9:79:2e:5f:a0:ea:
18:16:88:9c:31:99:a2:76:3e:69:d7:62:10:16:74:
5e:11:52:b5:6d:c4:e5:7b:c4:61:1d:cd:20:58:70:
9c:73:05:09:3a:ba:8f:c8:bd:7f:33:36:ff:19:63:
38:29:28:3f:be:6a:ca:2a:ab:25:f3:68:41:a7:97:
3c:8d:4b:7c:7b:3a:ef:d7:af:0f:33:83:4a:41:96:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4A:18:59:85:C0:88:59:96:2D:01:EE:F8:FC:97:EA:C9:EC:C5:3D
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:30:bc:77:40:08:7c:77:8f:99:af:d1:6e:f2:9f:02:36:ce:
9b:14:5d:20:ac:b5:40:2c:5c:a3:ec:25:56:01:82:c4:95:7e:
e2:cd:bf:3a:65:38:69:17:90:37:91:8a:3c:21:0d:ed:c8:95:
d1:1a:93:29:67:11:b1:fc:8b:11:47:f8:66:46:73:59:0c:5f:
20:0c:5d:d6:c5:59:a9:ef:dc:af:0c:2f:c8:75:63:cd:4b:a9:
78:2f:44:f6:88:d7:3f:77:b6:a1:08:2f:7e:e1:6b:6a:87:2a:
78:03:16:0b:42:09:9f:92:1f:54:e8:34:e7:a3:f0:d1:a9:a2:
e3:f6:84:6b:aa:98:b3:51:d2:9c:2d:94:ef:71:02:dd:f6:07:
c5:15:5a:fa:1d:db:43:bb:b3:74:48:c1:5c:7a:f9:59:a2:b4:
26:04:d4:ff:ce:c7:18:83:d9:97:59:de:3c:5b:0d:eb:c3:ce:
d6:84:b2:b0:d5:5a:17:e6:92:5f:4a:df:fb:ce:59:e3:57:1b:
f9:42:8e:47:ea:84:50:4f:89:4e:8b:31:9c:c3:d5:5b:29:02:
28:49:27:f6:55:54:9a:7a:2a:01:a9:1c:93:e4:ef:98:03:a8:
53:b3:c9:c0:ed:93:0a:c3:57:a6:e9:d5:be:1d:ac:76:ec:d0:
1c:f4:92:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6WYrCREVECx72qjHdAsnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODllMDZjODg3ZDNmZWRlODhmNzE3YmZmYTQzYzhjYzg2
NmM3YTUwHhcNMjYwOTEwMjAwMTQxWhcNMjYwOTExMjAwMTQxWjAzMTEwLwYDVQQD
EyhkOTRhMTg1OTg1YzA4ODU5OTYyZDAxZWVmOGZjOTdlYWM5ZWNjNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ute6zOLKFsy+akjAMaOJMz4k67r
Z0gJ+9jKdUeZprqMhfjP5aAbpkFwrxKM4gXVf3a26eQsL2N5s+5dt+DRhyTf0HLp
sGposUDlDd3fFpaspfj8CviuSzsqzCih+GcbUzeJHCIfp3rJ3HG4Y5Exmp0eLC7u
6hhPPBzogKyL9TYusX3Bm8GxmZYCrWLqjK5l9jj+KRzSt2HeBl3am3CYFzud8vmy
3v/tE9EZZ87JeS5foOoYFoicMZmidj5p12IQFnReEVK1bcTle8RhHc0gWHCccwUJ
OrqPyL1/Mzb/GWM4KSg/vmrKKqsl82hBp5c8jUt8ezrv168PM4NKQZbkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlKGFmFwIhZli0B7vj8l+rJ7MU9MB8GA1UdIwQY
MBaAFJGJ4GyIfT/t6I9xe/+kPIzIZselMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMt
ZDk3YTU0Y2IzOWUxLzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zZDNhMzMtNjFkOS00OTk2LTgxOWMtZDk3YTU0Y2IzOWUx
LzEva1luZ2JJaDlQLTNvajNGN182UThqTWhteDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDC8d0AI
fHePma/RbvKfAjbOmxRdIKy1QCxco+wlVgGCxJV+4s2/OmU4aReQN5GKPCEN7ciV
0RqTKWcRsfyLEUf4ZkZzWQxfIAxd1sVZqe/crwwvyHVjzUupeC9E9ojXP3e2oQgv
fuFraocqeAMWC0IJn5IfVOg056Pw0ami4/aEa6qYs1HSnC2U73EC3fYHxRVa+h3b
Q7uzdEjBXHr5WaK0JgTU/87HGIPZl1nePFsN68PO1oSysNVaF+aSX0rf+85Z41cb
+UKOR+qEUE+JTosxnMPVWykCKEkn9lVUmnoqAakck+TvmAOoU7PJwO2TCsNXpunV
vh2sduzQHPSS5g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:41 2026 by rpki-client