Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
File: KhH6IvVmXbh21C9wHdf0uikMoWs.mft (raw, json)
Hash identifier: hAy+N63ou5EaWvV0S2tJ2ogGgRHk7JbhYy/um/ydft4=
Subject key identifier: 4F:87:38:1B:35:A0:6A:7C:10:F7:06:BF:30:16:4F:35:86:5C:E2:18
Authority key identifier: 2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
Certificate issuer: /CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Certificate serial: 01A0C96B3B71751985D69BFFFC1ADAF66DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
Manifest number: 40
Signing time: Tue 22 Sep 2026 14:00:43 +0000
Manifest this update: Tue 22 Sep 2026 14:00:43 +0000
Manifest next update: Wed 23 Sep 2026 14:00:43 +0000
Files and hashes: 1: KhH6IvVmXbh21C9wHdf0uikMoWs.crl (hash: bxyM5s+28880gc3JZ0e9jqNxnw6a8LT/x8HJD4/TlhA=)
2: ehnz7mg_oQ2vy8uW7-EY6KjMfv8.asa (hash: sLCKF9FnIe6mVq71g7Z1KhrNB/Y5bi6HgjGXEqBr/Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:3b:71:75:19:85:d6:9b:ff:fc:1a:da:f6:6d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Validity
Not Before: Sep 22 14:00:43 2026 GMT
Not After : Sep 23 14:00:43 2026 GMT
Subject: CN=4f87381b35a06a7c10f706bf30164f35865ce218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:28:ea:b8:f8:c9:eb:61:c7:c1:87:18:95:f3:
49:79:ad:e3:39:02:b0:5e:48:d8:ba:ab:21:fa:a1:
aa:14:fd:53:44:9d:7e:9a:ce:47:10:79:54:39:5f:
84:f3:d5:de:96:d2:08:10:5f:05:18:bc:83:97:96:
04:16:44:1d:4c:fb:71:da:d7:f5:a0:e4:59:7e:5b:
df:f6:4f:f3:08:d5:6f:ee:b3:42:60:fb:33:03:b3:
a4:c6:8c:91:0f:f1:3a:1b:7d:69:f1:a3:d5:2f:47:
64:67:38:25:8a:2c:e1:ff:8a:ef:a4:8a:85:ad:4e:
51:17:2b:00:f9:3c:dd:f4:bb:2c:de:98:8e:50:41:
12:aa:6e:f0:c4:d6:d3:6b:80:f1:e1:91:86:4f:37:
ce:44:63:bd:45:31:d3:51:11:3d:5f:fb:92:bb:a6:
2c:e1:55:39:50:03:3e:57:cc:b5:79:5e:22:79:ba:
aa:7e:5f:75:65:16:0a:2b:f5:3c:5a:92:f5:46:1f:
0e:9f:d4:b5:02:d1:56:86:a1:5b:e2:66:87:eb:14:
6c:1c:78:58:c5:5d:07:bc:80:26:32:48:94:4e:b7:
cd:5e:04:5c:a9:7c:f3:3d:a2:c5:34:cb:79:5c:d8:
6a:ce:7e:93:96:b9:3f:4b:b9:21:34:b5:c8:6e:ed:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:87:38:1B:35:A0:6A:7C:10:F7:06:BF:30:16:4F:35:86:5C:E2:18
X509v3 Authority Key Identifier:
keyid:2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2e:c5:67:70:c2:79:dc:bf:5b:b3:8b:8d:f5:ff:97:51:6b:
52:27:89:5d:7e:5d:ad:7b:90:97:85:8c:14:c4:24:68:4a:c9:
c9:de:d4:61:cd:bb:1e:98:0d:a8:a4:fa:32:50:86:76:6d:d9:
96:f2:0c:62:b3:6e:cc:ef:3b:25:b3:80:59:82:86:43:a1:6b:
75:00:55:8c:e2:73:18:0d:20:4d:cf:47:e3:55:ba:78:e8:51:
a0:86:ec:57:23:4a:8d:c8:05:df:64:22:af:ea:57:dc:1c:fe:
1a:90:05:44:f0:38:e1:3d:72:4d:a6:ed:ef:50:16:fb:49:3d:
d9:97:26:76:22:9c:4c:76:93:3e:b4:d1:e2:9c:e2:80:c1:89:
c8:e8:de:91:42:a5:63:42:d8:6a:1a:97:85:ef:cc:9d:5d:82:
c8:12:62:31:2b:75:cb:38:db:4e:66:8a:bd:8c:a3:fc:f0:6c:
cf:94:da:4d:d6:02:72:d1:9c:4c:7d:a5:2f:cf:b4:31:e9:b4:
f9:1e:40:0a:96:ce:67:c6:6f:1c:e3:a5:4b:73:80:43:5f:c0:
64:ee:ed:56:f4:50:ec:4a:ed:75:12:db:b4:94:f8:1c:ab:bb:
ae:93:50:db:1c:77:a3:5e:49:fa:0f:5a:b5:ba:db:12:e1:f4:
18:54:3e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:53:29 2026 by rpki-client