Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json)
Hash identifier: EQGAPasp8Qq4E6LcDFirTvQNU0JOHLP9ZWEYuCpUT4w=
Subject key identifier: CB:20:AE:DC:B9:40:56:E1:15:6F:B1:DB:06:3C:43:42:80:EE:2C:58
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 01A0DDCE8FBBBAB1204F78B1B16ACF1C7390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
Manifest number: 03B8
Signing time: Sat 26 Sep 2026 13:01:36 +0000
Manifest this update: Sat 26 Sep 2026 13:01:36 +0000
Manifest next update: Sun 27 Sep 2026 13:01:36 +0000
Files and hashes: 1: 9h6W4r2ZUmSWR3rPAISEaioyTnA.roa (hash: YXizQOzPpOHcnczJqxPHErnPR6o/jvzp0veayf1oTFI=)
2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: ruOFPPAW8JaeySKe1SN93NnY5CmuD1JvMEfGtrqzMT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:8f:bb:ba:b1:20:4f:78:b1:b1:6a:cf:1c:73:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Sep 26 13:01:36 2026 GMT
Not After : Sep 27 13:01:36 2026 GMT
Subject: CN=cb20aedcb94056e1156fb1db063c434280ee2c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:a6:71:10:43:db:90:26:39:02:8d:bc:42:
07:42:e7:8e:63:fb:f4:44:38:3e:15:90:50:f7:6d:
19:9d:6a:69:d6:8e:50:7a:c1:7a:d9:76:48:88:e9:
8c:96:ce:6d:be:fb:d8:e6:3b:bc:95:04:56:c9:80:
4a:a4:61:9a:4e:c0:c3:63:4f:ad:97:fb:71:46:a8:
a2:78:11:a7:26:31:d5:6f:43:8f:15:e7:c0:18:00:
94:d1:5f:dd:d1:19:1a:b5:3a:3b:35:d0:0a:e2:55:
11:e3:c9:e9:a4:bb:57:6b:38:ac:39:7d:96:b5:e0:
86:33:78:b9:ab:88:af:43:a0:01:41:6e:5e:08:db:
f5:99:78:ab:75:cb:4e:16:3a:88:b2:10:c2:f7:7b:
38:4c:c4:dc:c9:f5:eb:df:44:72:25:8e:f0:7e:7a:
60:c0:b1:d9:e4:ac:ee:21:1c:e1:49:cc:0d:24:8c:
a3:2d:f7:f7:dc:04:12:5a:fc:46:e7:1e:1e:ec:a5:
ae:eb:3c:b4:fe:0d:92:5b:4c:e5:3b:6e:a6:d2:c2:
ae:65:13:91:b7:63:c0:f0:c9:46:00:eb:6f:3c:42:
79:59:79:93:8f:03:25:5a:26:39:10:dc:f9:c5:f8:
b6:10:72:48:1f:0a:64:74:5f:53:50:63:57:c5:c1:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:AE:DC:B9:40:56:E1:15:6F:B1:DB:06:3C:43:42:80:EE:2C:58
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d9:f9:ae:29:34:72:18:ba:a1:fb:c7:60:88:28:72:7d:2b:
7c:85:bb:d3:69:a5:5d:cb:b2:ea:04:9e:ce:59:bd:97:7e:00:
a3:4f:17:1b:12:17:61:9d:ad:42:62:cb:69:47:1e:35:0e:3f:
c0:79:8d:eb:d1:e5:38:79:9b:65:d4:3c:12:0a:b5:e7:d6:13:
24:4c:b9:be:f4:ae:43:b1:0e:f9:5a:8b:e2:a5:27:71:f8:ee:
36:e0:82:54:96:2b:f8:cf:44:00:45:f9:06:d4:31:0e:2f:e7:
1e:a1:8b:57:ff:f3:ab:38:73:20:de:c6:e7:0d:e8:a8:85:d7:
1c:03:98:95:ef:aa:1b:b4:bf:bf:01:8b:f2:c0:84:97:e2:7c:
5a:c9:1a:2a:ce:8d:49:77:2a:c6:a7:32:94:1e:7d:35:81:a3:
f9:ca:cd:bc:40:2a:1f:30:89:e0:05:24:75:00:5d:55:7f:a6:
db:aa:2e:14:bc:0b:fe:dc:a4:0b:c9:ce:70:e3:e2:b3:b6:d2:
a8:67:e3:64:e8:44:94:b7:7d:d8:4f:e1:41:b5:6a:74:9a:93:
a0:be:e3:6d:a2:c4:c4:42:f3:56:f5:a0:84:08:2c:fc:60:5b:
3a:8f:42:33:a8:f4:76:9a:06:f7:f6:bb:2e:96:6c:da:6e:c9:
66:b0:c3:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzo+7urEgT3ixsWrPHHOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTFlNDQ4N2NmOGQ0YTJkOTYxZGQ2MjJmM2U3NTAxYmRj
MjQ4MjkwHhcNMjYwOTI2MTMwMTM2WhcNMjYwOTI3MTMwMTM2WjAzMTEwLwYDVQQD
EyhjYjIwYWVkY2I5NDA1NmUxMTU2ZmIxZGIwNjNjNDM0MjgwZWUyYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dqmcRBD25AmOQKNvEIHQueOY/v0
RDg+FZBQ920ZnWpp1o5QesF62XZIiOmMls5tvvvY5ju8lQRWyYBKpGGaTsDDY0+t
l/txRqiieBGnJjHVb0OPFefAGACU0V/d0RkatTo7NdAK4lUR48nppLtXazisOX2W
teCGM3i5q4ivQ6ABQW5eCNv1mXirdctOFjqIshDC93s4TMTcyfXr30RyJY7wfnpg
wLHZ5KzuIRzhScwNJIyjLff33AQSWvxG5x4e7KWu6zy0/g2SW0zlO26m0sKuZROR
t2PA8MlGAOtvPEJ5WXmTjwMlWiY5ENz5xfi2EHJIHwpkdF9TUGNXxcGVSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsgrty5QFbhFW+x2wY8Q0KA7ixYMB8GA1UdIwQY
MBaAFPyh5Eh8+NSi2WHdYi8+dQG9wkgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEt
MWUyOTJjMGU5NWYxLzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEtMWUyOTJjMGU5NWYx
LzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtn5rik0
chi6ofvHYIgocn0rfIW702mlXcuy6gSezlm9l34Ao08XGxIXYZ2tQmLLaUceNQ4/
wHmN69HlOHmbZdQ8Egq159YTJEy5vvSuQ7EO+VqL4qUncfjuNuCCVJYr+M9EAEX5
BtQxDi/nHqGLV//zqzhzIN7G5w3oqIXXHAOYle+qG7S/vwGL8sCEl+J8WskaKs6N
SXcqxqcylB59NYGj+crNvEAqHzCJ4AUkdQBdVX+m26ouFLwL/tykC8nOcOPis7bS
qGfjZOhElLd92E/hQbVqdJqToL7jbaLExELzVvWghAgs/GBbOo9CM6j0dpoG9/a7
LpZs2m7JZrDDkg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:27:52 2026 by rpki-client