Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: LQCq0oTSkQQdotL6cL0QfqRIBvdHrF8wPV3QKpajiR0=
Subject key identifier: 7E:45:67:7A:0F:DF:6C:37:A3:FE:7C:D8:24:BE:9D:B2:E0:56:AD:60
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019E1E6CA841DF15F98F839263896E6A372D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 04EB
Signing time: Tue 12 May 2026 23:01:37 +0000
Manifest this update: Tue 12 May 2026 23:01:37 +0000
Manifest next update: Wed 13 May 2026 23:01:37 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: eXLuodf1q3hjjESUQv66pmaXtupdF65/htA8cWx5acs=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:a8:41:df:15:f9:8f:83:92:63:89:6e:6a:37:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: May 12 23:01:37 2026 GMT
Not After : May 13 23:01:37 2026 GMT
Subject: CN=7e45677a0fdf6c37a3fe7cd824be9db2e056ad60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:d2:c5:1f:ae:a1:56:83:c8:51:b9:f7:3e:
01:21:2a:e3:e7:18:11:da:c5:43:b8:3a:00:06:e7:
d9:94:60:4e:e7:94:51:cc:f2:d9:bb:36:db:cc:88:
80:0a:84:7b:dd:a2:f9:4f:ec:72:62:ba:db:ee:83:
42:bf:ae:fb:8c:bc:d1:fb:23:dc:61:57:0d:e8:12:
7c:f5:82:07:1c:4d:9b:f0:fd:1c:d3:dc:46:e5:f3:
b6:03:ab:da:da:e0:2a:ec:69:62:b7:0a:6b:b5:79:
b5:c5:50:09:5d:37:19:a2:51:0e:30:35:0e:b3:7b:
92:ee:ac:e4:f3:1f:a3:78:2a:90:94:9b:da:d4:3b:
a0:ed:eb:af:e8:15:10:88:09:c7:3c:60:2f:bc:96:
83:fb:d4:96:b4:50:3b:22:fc:eb:8e:b2:e7:9c:77:
6f:f7:fe:43:53:6e:fd:8f:41:fb:3b:a6:2c:27:2e:
f1:c0:c0:20:a5:43:4c:9b:1d:5d:64:83:48:a7:7a:
23:5e:00:16:6f:34:a6:2d:68:78:2a:b3:b4:32:8a:
72:e8:7d:4e:72:e1:cd:5e:73:eb:54:e3:4c:2d:c0:
04:1d:25:f3:0c:ca:96:bf:1c:52:c0:45:01:6a:52:
fe:3e:a3:da:4b:2c:8c:31:06:02:a3:1a:cc:1c:b8:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:67:7A:0F:DF:6C:37:A3:FE:7C:D8:24:BE:9D:B2:E0:56:AD:60
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:18:0d:6f:2c:39:7e:bd:f2:b4:ef:85:a4:5d:8f:91:cf:f2:
16:15:ee:6e:73:53:5f:60:a9:59:93:17:1c:31:96:d2:1e:f0:
91:2d:de:32:1f:30:b0:a1:2f:8f:10:1f:ef:04:26:5f:8d:e4:
f4:6a:d9:aa:f0:1a:1e:54:42:ab:64:97:ba:2a:ba:7a:d3:b1:
74:e3:28:ae:1b:d5:5e:84:90:6a:b6:91:24:d4:49:a8:65:a4:
91:d0:10:31:32:5d:2c:ad:2b:8a:19:ef:20:89:a3:9c:0f:1c:
6f:02:68:36:6a:b2:7d:91:fb:cd:0e:ed:88:a8:f2:0f:2c:3b:
90:d9:b9:4e:9a:15:67:cf:aa:0d:c8:58:34:9e:d5:a1:3a:ae:
1b:4e:c7:e4:10:92:74:38:75:27:0d:28:e7:49:2d:bf:16:c9:
5c:2f:16:a6:9f:ca:d7:24:e8:43:49:a8:e9:0a:05:07:4d:ca:
cb:09:29:ba:6e:a9:b7:4e:53:57:d6:a6:e9:28:f4:33:ac:d1:
b1:f1:1e:0a:d0:14:d3:61:61:a6:49:aa:8c:5e:ab:49:fa:38:
13:9d:76:68:7b:58:0e:9a:5d:9a:d0:5a:19:d0:6d:a8:12:92:
ef:88:8e:ab:26:04:e5:06:e1:7e:ba:35:33:5e:61:cf:d1:8f:
40:b9:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:48 2026 by rpki-client