Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json)
Hash identifier: Pyx4O7JBlc8QIJgtkoqsbrAsiT63EqKk82xUUdzzwkg=
Subject key identifier: C1:BD:8D:4E:EE:E6:49:B3:4C:C2:F8:59:AD:E3:98:DD:32:8F:24:DF
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 019D25F1C6BD8D846CDE7CA00C629D11EBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
Manifest number: 01C9
Signing time: Wed 25 Mar 2026 17:01:34 +0000
Manifest this update: Wed 25 Mar 2026 17:01:34 +0000
Manifest next update: Thu 26 Mar 2026 17:01:34 +0000
Files and hashes: 1: CDvOXRqmZ03Osdas03zg-OKS-84.roa (hash: ArwNBlF/B50l4IK1YdSnW2SS2EMQ9GG3g4GljFQ0M5w=)
2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: vPMmAnhh/WTVWrmNvfErs0+HSIkP7lk0AsRPcNfAoG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c6:bd:8d:84:6c:de:7c:a0:0c:62:9d:11:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Mar 25 17:01:34 2026 GMT
Not After : Mar 26 17:01:34 2026 GMT
Subject: CN=c1bd8d4eeee649b34cc2f859ade398dd328f24df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:1c:e9:d9:d8:ee:e4:b3:b0:b6:65:d4:16:
bc:18:17:f7:38:b8:0a:9f:93:5c:7c:72:5c:7d:95:
26:83:41:c1:29:9a:4e:44:73:6a:7c:8d:f2:00:9f:
9f:b3:25:98:d0:07:99:c1:d9:e6:30:fc:05:ac:96:
d8:8c:4c:6d:e3:e8:78:ab:da:75:a9:14:37:2b:69:
06:3f:90:77:88:e1:92:2f:9f:70:54:a2:70:ad:6c:
38:1c:0c:4b:22:89:4a:af:9e:16:e3:fd:39:e2:cb:
7c:64:9e:98:aa:06:35:c1:fe:af:13:bf:98:74:1b:
7a:e1:9b:a6:11:d0:80:e2:5e:08:6d:5d:bb:08:c3:
e0:70:d6:b7:fb:6b:0c:dc:c5:e0:cd:ad:69:8e:f1:
e7:eb:c2:72:dc:eb:10:cd:c0:16:82:a5:26:5e:a0:
d4:f8:9a:50:d7:eb:bb:47:19:7a:c8:fb:dc:38:c8:
41:85:34:c8:b8:05:d6:1b:bd:be:6b:0a:d5:d1:4c:
59:00:37:3b:a5:a8:b0:e4:48:9d:09:36:cf:45:dd:
6b:d5:b0:c1:d4:1d:33:f1:81:30:d9:cf:6d:ec:01:
be:5e:e9:2a:f5:cd:cc:23:f1:43:69:59:05:3d:d5:
e6:93:e2:96:5d:42:5d:b9:7c:70:01:ab:5c:b2:fd:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:8D:4E:EE:E6:49:B3:4C:C2:F8:59:AD:E3:98:DD:32:8F:24:DF
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:26:bc:de:0f:5c:2b:d5:fb:bb:c8:a8:ae:b4:93:41:62:60:
8a:06:10:ef:ee:6a:fb:d9:bd:95:b8:d5:ad:5c:22:e3:73:86:
97:8c:91:2f:cd:e1:cf:2b:45:4c:58:c7:79:bb:cf:4a:e2:1e:
e4:bb:54:3d:72:5d:94:07:69:fd:b7:dd:28:80:0b:28:4f:3e:
96:4e:41:a8:77:7c:0b:70:43:9c:53:5c:4f:ed:91:c3:5f:2c:
71:43:0c:58:20:54:f4:04:5d:34:b5:38:11:de:d7:92:03:be:
83:db:a2:05:54:3f:23:3f:35:39:2e:36:34:50:13:bd:dd:da:
43:07:13:d6:43:35:dc:84:e6:73:5c:4e:fb:51:af:7c:99:33:
d8:f1:e7:3d:51:f0:5e:b7:4e:7f:88:28:8b:26:c4:6d:b2:ac:
9b:78:5a:ee:52:51:7b:f0:bb:1e:24:cb:31:cd:7e:d2:67:8f:
3b:5e:85:95:57:81:34:9f:20:59:6a:33:02:6e:97:2a:01:da:
35:2e:cf:13:5b:ba:08:6b:64:c3:4b:ee:50:b7:0d:dc:a0:d5:
d5:7f:2e:e6:4f:65:91:82:98:00:40:4b:ba:47:d9:ea:de:a3:
59:04:2d:20:01:b5:a5:0a:b7:12:3a:a7:32:75:cd:f9:43:c3:
05:8c:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:35 2026 by rpki-client