Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: uut67eDUwworEagjo/c9MsFzidxtbApEjHvSQoWACCM=
Subject key identifier: 3F:92:94:37:72:30:69:60:65:BC:F8:EB:92:4A:47:11:C5:8F:FA:C0
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019F9323CCC83904E1884EF0B8B9F811FE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 05AC
Signing time: Fri 24 Jul 2026 08:00:24 +0000
Manifest this update: Fri 24 Jul 2026 08:00:24 +0000
Manifest next update: Sat 25 Jul 2026 08:00:24 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: oDX7SGD7jc8BDMKplR2qEn/UzaQjtalcl+GlQGWOdPM=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:cc:c8:39:04:e1:88:4e:f0:b8:b9:f8:11:fe:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jul 24 08:00:24 2026 GMT
Not After : Jul 25 08:00:24 2026 GMT
Subject: CN=3f9294377230696065bcf8eb924a4711c58ffac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:e0:1f:0d:6c:9a:75:5f:6e:73:fb:99:df:
2e:32:3a:37:a9:bb:71:72:9e:c4:dc:8e:72:bd:db:
dc:b4:ca:de:f6:0d:37:ad:dc:af:f3:24:8e:df:4b:
c6:09:3d:da:32:13:69:ba:9a:c0:b6:af:2d:36:a8:
56:69:4f:cf:76:87:d3:ce:cf:01:79:a1:10:33:68:
0f:fd:d3:5a:c6:3f:53:89:b9:90:e6:18:88:0c:67:
50:67:2b:00:67:1e:66:71:f7:ae:21:17:0a:f9:c5:
db:e4:07:a2:04:52:1a:7a:74:1c:32:90:f7:8c:da:
48:00:9e:52:18:6c:d0:59:3b:58:6c:c9:18:51:72:
8e:c6:bf:e5:d0:aa:e0:c0:e6:28:e3:eb:08:bf:fd:
d7:3e:95:f3:1f:17:69:9e:49:1d:f7:29:52:12:e1:
ad:ad:37:80:8f:29:e0:c9:77:76:38:95:ff:b5:3a:
74:a5:ab:cd:e3:d9:fd:3d:22:33:d8:95:67:1d:a3:
f3:c3:ee:68:76:26:1e:4e:7e:a7:34:39:5f:51:ed:
6c:4d:c9:62:3c:50:53:0c:49:07:e5:1d:58:d1:a5:
2c:5f:8d:c6:ef:1f:cb:0b:58:7f:e5:9f:a9:8b:aa:
fe:65:dc:38:43:86:81:d3:ff:86:c0:5d:46:0f:6f:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:94:37:72:30:69:60:65:BC:F8:EB:92:4A:47:11:C5:8F:FA:C0
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c4:61:0f:79:26:71:5b:52:49:5a:bc:ea:29:eb:e9:21:12:
fa:ad:a8:64:f5:af:a0:83:50:74:1a:23:f0:d3:75:b6:46:c0:
7b:4d:ee:e3:12:d4:a5:35:8f:6d:09:23:77:bb:5a:4d:32:00:
69:a5:ec:fa:49:a8:60:2e:9e:ad:05:02:19:c2:66:18:3d:8e:
77:c1:7d:5e:61:2e:53:0e:2b:71:21:0f:59:1b:94:a0:43:20:
03:19:df:1a:79:fb:fe:e5:e9:4a:24:fe:2a:44:ea:05:3e:69:
35:88:ed:54:a4:a8:05:b0:2b:45:bf:af:35:d9:1f:84:55:72:
46:8c:98:84:25:26:5e:2c:d7:a2:af:55:ef:17:7a:6f:e0:ce:
57:6c:73:dc:c1:dc:4d:f7:2c:b7:ff:e1:b5:2e:40:e5:e3:96:
ca:eb:a9:c9:64:8b:9f:0c:94:54:6b:41:c4:e6:d9:75:b4:ea:
8a:67:67:99:98:52:83:55:fa:0d:fb:34:b4:63:37:2e:8e:54:
24:ea:a8:73:31:9b:11:97:b3:d2:86:98:ee:be:27:0b:0b:cf:
3d:10:55:db:d7:8a:14:7e:d6:68:cd:34:ff:3a:cf:e6:7d:f6:
3b:8f:64:70:00:9f:79:94:ba:cc:47:ba:a8:8e:d8:1f:3e:45:
c9:24:c3:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI8zIOQThiE7wuLn4Ef56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew
ZGViNzAwHhcNMjYwNzI0MDgwMDI0WhcNMjYwNzI1MDgwMDI0WjAzMTEwLwYDVQQD
EygzZjkyOTQzNzcyMzA2OTYwNjViY2Y4ZWI5MjRhNDcxMWM1OGZmYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWHgHw1smnVfbnP7md8uMjo3qbtx
cp7E3I5yvdvctMre9g03rdyv8ySO30vGCT3aMhNpuprAtq8tNqhWaU/PdofTzs8B
eaEQM2gP/dNaxj9TibmQ5hiIDGdQZysAZx5mcfeuIRcK+cXb5AeiBFIaenQcMpD3
jNpIAJ5SGGzQWTtYbMkYUXKOxr/l0KrgwOYo4+sIv/3XPpXzHxdpnkkd9ylSEuGt
rTeAjyngyXd2OJX/tTp0pavN49n9PSIz2JVnHaPzw+5odiYeTn6nNDlfUe1sTcli
PFBTDEkH5R1Y0aUsX43G7x/LC1h/5Z+pi6r+Zdw4Q4aB0/+GwF1GD28T8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+SlDdyMGlgZbz465JKRxHFj/rAMB8GA1UdIwQY
MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt
MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi
LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8RhD3km
cVtSSVq86inr6SES+q2oZPWvoINQdBoj8NN1tkbAe03u4xLUpTWPbQkjd7taTTIA
aaXs+kmoYC6erQUCGcJmGD2Od8F9XmEuUw4rcSEPWRuUoEMgAxnfGnn7/uXpSiT+
KkTqBT5pNYjtVKSoBbArRb+vNdkfhFVyRoyYhCUmXizXoq9V7xd6b+DOV2xz3MHc
Tfcst//htS5A5eOWyuupyWSLnwyUVGtBxObZdbTqimdnmZhSg1X6Dfs0tGM3Lo5U
JOqoczGbEZez0oaY7r4nCwvPPRBV29eKFH7WaM00/zrP5n32O49kcACfeZS6zEe6
qI7YHz5FySTDNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:54 2026 by rpki-client