Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: MXe5y2zD9Ywspl1NqnJqGmBqamLG1avRGPWhe+SRlKM=
Subject key identifier: BC:02:03:A1:52:30:36:95:D8:2A:AA:B3:C5:5A:BC:F5:0E:00:8F:15
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 019D2B1781B1B0340F3B7EBEA412969893AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 06B7
Signing time: Thu 26 Mar 2026 17:00:53 +0000
Manifest this update: Thu 26 Mar 2026 17:00:53 +0000
Manifest next update: Fri 27 Mar 2026 17:00:53 +0000
Files and hashes: 1: 5AdJAtotSZ6-3RjcAlYlJ7tU3r0.roa (hash: Jfwedi1GqsNw78sfU1IyKbpy27gfbSz+DOrazFRB1dc=)
2: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: U/mzUhqNRF5K0u9G/vfUINpemjdpLbZ/HQ+QX1MXlTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:81:b1:b0:34:0f:3b:7e:be:a4:12:96:98:93:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Mar 26 17:00:53 2026 GMT
Not After : Mar 27 17:00:53 2026 GMT
Subject: CN=bc0203a152303695d82aaab3c55abcf50e008f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:7a:4f:c2:a6:3e:75:47:b1:43:6c:34:5e:
1d:a9:3e:6a:06:3f:20:e9:05:88:5c:b7:fa:7f:c8:
a2:f4:af:a4:46:17:6a:ae:b2:06:1d:46:ae:e7:9a:
d5:02:68:b5:5b:42:f8:b1:1f:b3:4f:c2:c5:ea:a4:
67:bc:0d:b1:70:db:f7:a8:fe:83:c6:3a:a4:13:e0:
db:3e:ed:eb:10:59:e7:14:0e:9e:29:ae:01:6e:46:
df:72:14:64:9a:be:6e:fc:8d:3a:fa:13:3d:40:25:
f4:28:7f:42:a9:9f:51:4d:0d:64:ea:b7:be:91:8e:
dd:bd:63:29:1e:30:84:57:88:5e:ff:87:8d:fc:21:
9d:8d:2b:aa:2a:0a:51:0a:4c:b2:08:53:ed:e9:ec:
d0:d7:f2:61:2b:85:80:89:cc:43:35:a4:7f:f7:5f:
62:18:81:5d:62:c6:86:61:78:17:89:9e:33:5e:b5:
ba:46:e5:84:d4:9c:be:d0:ec:57:7f:bb:74:e4:f5:
83:54:63:73:73:51:15:f0:3d:b8:53:e3:78:40:b3:
92:62:8d:d4:08:88:b8:52:dc:90:ee:77:4b:22:69:
ea:12:3c:17:95:0b:67:a3:8a:1b:18:44:b0:5d:7a:
c4:36:43:f4:1c:26:b3:60:bf:1b:41:d4:f8:9d:c0:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:03:A1:52:30:36:95:D8:2A:AA:B3:C5:5A:BC:F5:0E:00:8F:15
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:12:89:28:2d:4d:77:6f:4b:50:e4:5b:83:29:97:c7:a5:
fd:37:04:ac:1b:07:3d:3e:c3:2b:3e:ae:c6:a9:e3:0e:d5:6f:
8b:01:8e:4f:b0:77:79:f8:8f:95:fc:89:f3:23:89:ef:f6:9f:
31:12:51:04:73:3e:20:77:35:6b:e8:b7:e1:54:5e:12:11:41:
56:6b:09:95:e6:5f:0e:c5:09:42:a9:b3:a5:c6:87:63:f3:df:
74:0b:4c:a3:36:83:e5:47:c3:bc:3b:9c:48:a3:6f:39:d3:04:
80:ea:dc:ae:b1:77:d8:d6:c5:b7:51:b9:e3:ee:6d:09:3e:61:
0e:e5:a6:8e:09:ce:d8:b6:14:d7:27:41:99:a6:a9:1b:cf:c0:
58:df:8f:d9:2e:70:aa:db:ce:96:1e:e9:a9:77:02:7a:60:40:
d4:27:9f:13:e9:c1:70:2b:49:ad:f8:6e:10:6e:06:3a:ce:c5:
50:d7:12:31:77:69:f6:cf:90:9b:f4:29:eb:98:a6:06:b1:b3:
c2:ef:07:a9:be:ed:07:f2:29:f3:68:51:94:1b:84:62:f8:5e:
ea:54:a7:99:6e:45:d4:77:d2:cc:11:de:65:cb:f3:57:9e:24:
66:90:7b:05:66:8c:d9:a9:f4:4a:07:0a:19:3a:74:51:ca:51:
81:de:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:09:41 2026 by rpki-client