Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: TIOTOhfHVLWZ5WF4JNnFkJqrBCLsF3wacQqSileg+F0=
Subject key identifier: DE:D7:E2:B6:43:9C:91:E2:FB:D6:7B:7D:A1:1E:FF:1A:AF:21:C8:11
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019D2929B264A7406E277CF77AC804AAB4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 046C
Signing time: Thu 26 Mar 2026 08:01:31 +0000
Manifest this update: Thu 26 Mar 2026 08:01:31 +0000
Manifest next update: Fri 27 Mar 2026 08:01:31 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: NCT90f4KNNKj6zMeRcTyu1P/cVRuNGLHOMuHqYTvzXQ=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:b2:64:a7:40:6e:27:7c:f7:7a:c8:04:aa:b4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Mar 26 08:01:31 2026 GMT
Not After : Mar 27 08:01:31 2026 GMT
Subject: CN=ded7e2b6439c91e2fbd67b7da11eff1aaf21c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:bb:3e:f6:ed:24:c2:81:ee:dd:9a:97:ef:
b9:18:a0:91:c2:96:03:26:41:15:5b:ef:02:2d:f8:
04:14:32:7f:aa:d0:d5:c0:06:dd:01:ba:20:e8:7e:
92:67:0e:b9:b8:e9:3c:97:1a:9c:a7:75:0d:b8:d5:
c6:6f:d2:20:bf:0c:38:84:eb:3c:c8:4c:07:3f:5b:
a8:c6:df:d6:14:47:b7:16:13:fc:a4:e1:4f:ea:36:
87:73:0d:5d:6a:ff:b8:29:77:c2:fc:06:95:6f:85:
2c:bd:6e:21:18:3f:62:22:91:c4:c8:f1:92:26:f7:
24:f5:d3:d5:34:cf:73:4b:ac:12:a8:35:07:c0:d3:
4d:30:80:6f:79:7f:92:7b:d4:db:1c:d7:ab:82:2c:
d4:7d:81:40:ad:06:a3:d8:dc:4a:7e:ab:7e:3d:07:
ed:7e:21:80:0a:ad:da:5c:50:55:1b:9b:d0:98:82:
c5:6d:19:2b:9c:5c:43:5d:ef:78:16:d5:12:d4:63:
eb:8c:2f:14:fd:bf:2e:88:98:a9:d5:5a:39:3f:51:
2d:99:ea:76:e6:26:d6:81:19:79:97:71:5e:9f:dd:
c8:e5:9c:c5:65:10:b5:d3:c1:a4:06:dc:18:6d:3b:
00:d3:88:1e:94:f3:4c:ff:a4:37:15:4b:9a:27:35:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D7:E2:B6:43:9C:91:E2:FB:D6:7B:7D:A1:1E:FF:1A:AF:21:C8:11
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:84:4c:8c:6c:f4:04:c4:36:d6:04:86:b7:68:1e:da:22:
f2:13:7a:af:41:f4:ea:47:23:b7:ac:72:04:ea:4e:29:4f:d5:
7b:17:e8:3a:f5:28:bd:62:87:16:bc:d1:ff:1a:2d:0f:1e:44:
42:bc:7e:bf:7f:cc:63:26:d8:59:e6:80:62:b2:5a:64:28:c9:
fa:02:d0:c9:1f:bf:96:6e:7b:65:96:2a:52:4b:e4:8b:29:7b:
84:13:cb:3d:40:c0:bf:3b:b3:60:26:cc:09:d8:14:26:2f:a6:
86:e7:62:c5:21:49:a9:ed:1a:66:c0:a8:5b:cb:b9:d0:cd:6b:
e5:5c:b1:a3:da:2d:fb:6b:fb:96:c1:eb:9d:b7:e9:c8:26:81:
89:b5:de:b2:a7:19:cc:39:e7:e3:91:2b:dd:b9:23:4c:b4:96:
a3:32:1e:1b:e9:ee:2a:9e:25:6e:c3:f3:7a:88:0c:be:3a:aa:
20:8c:15:1f:a1:7a:c6:1f:77:f5:e1:21:0b:88:c6:65:52:31:
ea:38:74:a6:0a:bf:fb:24:2b:1c:0f:c7:5f:5b:50:46:9f:7a:
fd:90:a1:67:ee:e8:99:fe:ac:86:c4:af:f0:f3:79:40:9b:62:
11:ee:29:7a:a8:c1:40:0e:fb:33:79:64:43:af:31:66:7d:4d:
26:c6:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:10 2026 by rpki-client