Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: wY0DYUQ5Ao6pN6pfKDG1/QMC3DJKgfkbmtKQ1T80i58=
Subject key identifier: 71:5D:6C:65:62:A6:B2:D8:79:3C:39:39:37:60:34:E3:47:69:3A:42
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 01A0D9837B645D2F4952B5A985E1B1357B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 0655
Signing time: Fri 25 Sep 2026 17:01:07 +0000
Manifest this update: Fri 25 Sep 2026 17:01:07 +0000
Manifest next update: Sat 26 Sep 2026 17:01:07 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: SHvXlqy6YZ349kScaiYaRAs5RcueVU14AHQbl00QA+Q=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:7b:64:5d:2f:49:52:b5:a9:85:e1:b1:35:7b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Sep 25 17:01:07 2026 GMT
Not After : Sep 26 17:01:07 2026 GMT
Subject: CN=715d6c6562a6b2d8793c3939376034e347693a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:62:96:f4:17:ba:e8:04:37:4d:52:97:23:
6b:20:e8:3e:91:21:4a:f5:70:1e:a3:90:d2:f3:66:
71:46:31:95:53:34:3d:f9:88:32:c0:ae:73:ad:94:
81:df:c9:84:71:e2:9e:10:87:b2:1e:ff:35:3e:0b:
c6:ec:9f:1e:99:3a:ba:93:b8:45:5f:e0:80:0b:5a:
8e:2f:53:bf:61:02:bb:94:fb:96:0a:ac:1c:39:08:
a9:03:36:e0:9f:5f:28:7f:22:03:08:57:77:0e:8e:
72:78:09:4c:26:03:49:b7:b2:a6:af:57:ce:1c:1a:
13:02:03:dd:c5:2d:26:09:60:ba:e1:60:1c:a5:dc:
66:76:9d:46:dc:a9:3e:a1:3f:c2:51:fc:a0:af:53:
e5:47:0d:7d:9f:a6:c8:57:b8:12:6b:2d:a4:64:1f:
43:40:30:69:39:2e:67:36:d6:55:27:34:15:1a:a6:
96:7d:66:d9:53:06:61:16:fb:2a:a8:ab:82:78:e5:
09:de:0b:05:17:54:fa:b8:28:82:5a:92:a2:44:16:
e0:b0:98:a6:13:4c:df:06:af:be:85:63:98:70:6f:
bd:59:97:b0:a5:aa:42:52:19:aa:0f:29:17:e2:f3:
57:a2:32:33:7f:f1:03:8c:85:d1:37:b9:8d:fa:80:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:6C:65:62:A6:B2:D8:79:3C:39:39:37:60:34:E3:47:69:3A:42
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4a:af:42:63:00:81:a1:f8:d6:de:49:a8:2d:33:a8:80:d1:
d2:74:aa:96:ec:dd:46:8d:9a:a5:05:fd:c0:31:df:bf:7b:54:
a5:88:82:78:f1:57:a2:88:bf:da:4e:56:6f:e2:24:81:5e:90:
33:6c:27:89:6c:4b:d2:2f:65:55:b1:1a:fd:0b:67:dd:63:bf:
be:5a:22:3e:2e:d4:7b:f4:0f:d6:39:84:74:a6:4e:b2:71:68:
7f:e7:28:6f:23:cb:5c:0b:b1:a2:f3:22:99:3e:3a:91:57:5e:
4f:41:04:58:4d:13:0f:85:63:d8:4b:45:69:d7:dc:b5:2d:35:
0c:07:32:f5:18:cc:9b:33:36:68:1e:3a:e2:48:c3:d9:fa:1f:
b9:20:a6:20:5b:59:23:03:44:e5:c7:ca:4f:3d:f9:04:da:8a:
e7:d0:3f:2f:c7:cb:6a:c6:2a:c9:08:39:ea:3a:7e:43:91:98:
8e:42:52:04:2e:7c:1b:e0:bb:13:78:ba:bd:4f:05:63:67:d4:
b3:5a:da:d7:0c:d7:ba:f1:13:c0:dc:97:af:90:e1:f0:a0:ba:
cb:68:35:0f:d4:03:ad:e8:cb:e7:44:3f:e8:2e:ce:5a:90:2e:
69:74:ae:af:d3:36:2e:50:a7:21:21:d0:05:03:01:26:59:c3:
0b:fb:bd:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg3tkXS9JUrWpheGxNXsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew
ZGViNzAwHhcNMjYwOTI1MTcwMTA3WhcNMjYwOTI2MTcwMTA3WjAzMTEwLwYDVQQD
Eyg3MTVkNmM2NTYyYTZiMmQ4NzkzYzM5MzkzNzYwMzRlMzQ3NjkzYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmZilvQXuugEN01SlyNrIOg+kSFK
9XAeo5DS82ZxRjGVUzQ9+YgywK5zrZSB38mEceKeEIeyHv81PgvG7J8emTq6k7hF
X+CAC1qOL1O/YQK7lPuWCqwcOQipAzbgn18ofyIDCFd3Do5yeAlMJgNJt7Kmr1fO
HBoTAgPdxS0mCWC64WAcpdxmdp1G3Kk+oT/CUfygr1PlRw19n6bIV7gSay2kZB9D
QDBpOS5nNtZVJzQVGqaWfWbZUwZhFvsqqKuCeOUJ3gsFF1T6uCiCWpKiRBbgsJim
E0zfBq++hWOYcG+9WZewpapCUhmqDykX4vNXojIzf/EDjIXRN7mN+oAJ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFdbGViprLYeTw5OTdgNONHaTpCMB8GA1UdIwQY
MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt
MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi
LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUqvQmMA
gaH41t5JqC0zqIDR0nSqluzdRo2apQX9wDHfv3tUpYiCePFXooi/2k5Wb+IkgV6Q
M2wniWxL0i9lVbEa/Qtn3WO/vloiPi7Ue/QP1jmEdKZOsnFof+cobyPLXAuxovMi
mT46kVdeT0EEWE0TD4Vj2EtFadfctS01DAcy9RjMmzM2aB464kjD2fofuSCmIFtZ
IwNE5cfKTz35BNqK59A/L8fLasYqyQg56jp+Q5GYjkJSBC58G+C7E3i6vU8FY2fU
s1ra1wzXuvETwNyXr5Dh8KC6y2g1D9QDrejL50Q/6C7OWpAuaXSur9M2LlCnISHQ
BQMBJlnDC/u9Aw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:02:31 2026 by rpki-client