Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
File: kh48kn45Yv5XJu2z8kay29kldxY.mft (raw, json)
Hash identifier: X1RzCTptOW78GHETBPYidOYHqeeKDE5ffPGBkbrew3c=
Subject key identifier: E1:65:95:F9:E5:E0:24:F5:5A:E1:C3:E9:18:96:A1:0B:88:65:67:70
Authority key identifier: 92:1E:3C:92:7E:39:62:FE:57:26:ED:B3:F2:46:B2:DB:D9:25:77:16
Certificate issuer: /CN=921e3c927e3962fe5726edb3f246b2dbd9257716
Certificate serial: 01A104DC0088D8093CD5DC25D0F2EB5900B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
Manifest number: 44
Signing time: Sun 04 Oct 2026 03:01:29 +0000
Manifest this update: Sun 04 Oct 2026 03:01:29 +0000
Manifest next update: Mon 05 Oct 2026 03:01:29 +0000
Files and hashes: 1: GbnXnbDjDeY9Xr9vtqb8U64ktUg.roa (hash: 0Fsg5sZ43flaXIXsIykv2FLzC79XVTKgEJeu3CoPW4Q=)
2: kh48kn45Yv5XJu2z8kay29kldxY.crl (hash: eZ3xIw9Wj/A/3PoQB50rUAs2s+TBbjMA32plumTX7A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:dc:00:88:d8:09:3c:d5:dc:25:d0:f2:eb:59:00:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921e3c927e3962fe5726edb3f246b2dbd9257716
Validity
Not Before: Oct 4 03:01:29 2026 GMT
Not After : Oct 5 03:01:29 2026 GMT
Subject: CN=e16595f9e5e024f55ae1c3e91896a10b88656770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:e4:10:6d:50:2a:a7:9b:06:54:6d:3e:78:
2e:e1:9c:1a:e9:17:36:45:5d:47:0f:cd:3f:b5:25:
8b:43:db:bc:28:d2:e0:1b:74:4c:6c:1d:75:0e:48:
90:cc:f6:fe:75:e9:c4:4f:e6:22:ba:95:93:a1:bb:
94:80:4d:10:0f:89:54:4c:52:31:31:86:a0:9c:17:
e0:f7:82:b8:1e:48:3b:78:da:59:25:12:8e:6d:e0:
49:68:eb:ca:d6:52:4e:c9:3c:e4:b8:5b:27:fc:72:
c4:ba:e0:ff:8b:5f:bc:85:47:cc:5d:04:09:ae:c5:
33:3d:74:8a:87:6a:9c:9a:d2:e0:41:04:4b:1b:49:
fc:21:9a:33:d8:1c:15:38:d5:96:ff:26:f1:9d:3f:
15:03:8a:76:18:4a:cb:c6:88:6c:00:6c:34:8f:a8:
bb:db:4c:10:06:06:18:ec:98:63:f7:b8:40:05:58:
eb:61:18:40:37:f4:2e:20:81:03:43:d4:7e:51:06:
79:16:21:86:0e:42:5a:c7:b8:b6:4e:19:cc:d3:19:
b7:f3:c4:75:3d:24:91:d2:ff:8d:1c:1d:43:b4:b2:
dd:9e:9c:ca:6a:57:ce:cd:de:8d:1b:fd:df:be:47:
88:57:a7:67:03:27:0a:05:00:de:d5:41:ae:84:9a:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:95:F9:E5:E0:24:F5:5A:E1:C3:E9:18:96:A1:0B:88:65:67:70
X509v3 Authority Key Identifier:
keyid:92:1E:3C:92:7E:39:62:FE:57:26:ED:B3:F2:46:B2:DB:D9:25:77:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:08:fe:00:f1:90:16:88:a3:29:86:24:50:1a:1c:a8:d0:6a:
09:f7:42:46:87:93:1a:68:43:e9:0b:53:e2:da:1b:17:72:c1:
9f:35:b7:d2:55:47:e7:06:46:ab:ad:b7:1f:1b:43:5d:3a:31:
59:08:11:5d:7a:00:90:e2:e7:2a:3d:8d:67:8d:99:57:fd:4d:
c6:68:80:47:e2:5a:4e:d0:12:c6:58:c3:0a:e1:c9:df:45:7e:
22:8a:59:86:de:95:67:f6:04:1e:9b:5d:23:7f:29:66:4f:93:
6d:8c:4e:ee:39:0b:56:be:d1:c2:00:3e:71:b3:eb:14:64:8e:
1a:9e:0d:4e:f9:8e:fc:00:8d:b0:b5:07:30:86:56:81:05:ff:
2e:b8:16:56:31:a0:2c:21:2d:95:3d:28:54:87:d9:07:05:13:
6d:4d:f4:cf:bb:dd:52:20:02:2c:fd:f9:67:96:be:88:0c:6a:
43:cc:08:2f:33:f4:1a:13:2f:ab:71:91:97:38:a9:0a:3e:aa:
ae:fb:8a:bf:d2:8e:00:40:e6:11:32:d1:e9:96:7a:f7:79:8c:
52:ad:be:3a:3d:f9:fa:b8:9f:63:da:cb:0e:61:17:f3:82:9c:
30:ef:45:42:c8:9f:17:3c:37:f4:4e:e7:7d:55:37:cb:1e:f4:
4b:99:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:41:16 2026 by rpki-client