Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: 53s3jj4ZhhB4UnjUDB45BxZYA1fjTvjHin+DXRY5/uY=
Subject key identifier: 27:FD:C8:66:85:02:D9:7F:B7:C7:77:AE:1B:4F:F5:77:88:02:93:FC
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 019D28843940274625D452D16B2486C36487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0CD3
Signing time: Thu 26 Mar 2026 05:00:47 +0000
Manifest this update: Thu 26 Mar 2026 05:00:47 +0000
Manifest next update: Fri 27 Mar 2026 05:00:47 +0000
Files and hashes: 1: 4VL55TR7n8zY5sjEwyy-tDqTfgs.roa (hash: 7BDvUnPmZt5rM/QuBJhcT4U2nlJB/FKzg2OukOPZ9uQ=)
2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: 1UxUCDDCgM7wfpNdT2nwcikyV6v5stgY9Ypfsu9Smec=)
3: KnCfg8nTQsfpTcM_cEW8Uzz8x5M.roa (hash: 2VYLtBiQmGKXrUCSv3SxyNnrS3C6FcV2aiRtsHxSXSI=)
4: arOEcwZhUNm3Hj36Uwng_wKeV9E.roa (hash: B20xitz9JymuHol/jxxjXdJ6lXpi2xW/yyUd53yf3d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:39:40:27:46:25:d4:52:d1:6b:24:86:c3:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Mar 26 05:00:47 2026 GMT
Not After : Mar 27 05:00:47 2026 GMT
Subject: CN=27fdc8668502d97fb7c777ae1b4ff577880293fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:ae:67:b0:a0:d8:30:48:3b:2b:69:d5:29:
3f:7b:71:32:de:ed:96:23:6b:f9:b1:f2:b9:e1:c4:
2b:ec:d5:31:b9:51:f3:dd:e6:bb:a8:18:47:d5:1d:
1d:9a:e3:14:08:98:8e:f9:5b:88:36:57:35:4d:b4:
7b:73:22:8c:d4:1a:f7:22:48:e9:a3:57:b7:0e:7a:
ae:c4:37:53:03:9b:c0:c3:8f:27:16:30:72:02:a1:
27:4a:04:db:1f:1f:15:da:b8:9d:e5:67:0d:df:1c:
5f:60:43:94:7a:16:cf:3c:e6:b8:54:f8:eb:f8:09:
48:35:23:7d:82:9e:68:40:33:c7:c5:ae:96:3b:27:
9d:a5:e5:a4:85:4b:82:6c:c8:53:f3:5b:45:33:66:
e6:59:5c:6a:5b:e0:73:10:88:f6:1b:c2:68:a9:ef:
11:86:9f:b3:d0:46:1f:19:9a:bf:b1:18:16:91:a8:
95:b4:9d:7a:e4:0c:fb:c2:72:f5:c8:0a:33:60:ac:
82:0f:a0:b1:69:96:25:50:45:fd:73:7d:3f:cf:43:
be:cd:df:3e:31:49:c7:e2:6b:2a:0a:db:30:e5:bb:
85:fa:82:c8:00:14:ae:43:0a:79:e7:90:94:1f:44:
bf:4b:0c:84:ac:f1:b8:b5:21:06:6d:9c:b6:6f:59:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FD:C8:66:85:02:D9:7F:B7:C7:77:AE:1B:4F:F5:77:88:02:93:FC
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6b:9f:84:26:8a:8a:25:7d:66:37:10:ee:12:e8:19:92:3e:
fa:36:27:06:9b:b4:50:0d:51:2f:dc:bd:0c:fb:10:36:aa:87:
32:96:8b:22:8f:c7:08:6f:a6:d3:c7:db:99:2b:60:d5:95:84:
a4:a2:0b:53:1a:79:d2:e0:cc:5a:db:58:de:b5:3f:34:8c:3b:
48:03:71:01:55:09:58:3e:0c:79:54:e2:7f:0e:7c:8f:bd:fa:
f6:09:ca:bb:03:9c:a1:14:b1:b5:1b:4b:d5:4c:fa:a0:24:cf:
6e:7d:ee:a1:99:0e:e7:25:41:88:54:94:54:c2:94:83:cd:6a:
0f:64:36:d4:61:07:01:f6:59:fd:c9:96:24:b4:74:7f:f6:a9:
4c:74:5b:69:ea:7e:34:e9:28:fd:eb:6a:df:07:4e:d9:bb:0d:
0a:21:8d:f2:80:5a:ea:bc:26:b2:ff:a6:f1:d4:e4:10:ad:bc:
96:39:ca:73:4c:51:a9:ef:35:3b:e9:65:61:0a:03:f1:82:82:
9a:51:80:fb:33:3b:9f:99:5f:b8:40:08:fe:f4:ec:f5:a8:93:
84:cc:4f:64:d0:67:2f:23:0c:ba:aa:f9:41:25:75:5d:88:5c:
d3:58:28:c6:79:99:52:20:85:89:40:75:bf:ca:97:a1:c0:6e:
80:84:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:17 2026 by rpki-client