Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
File: KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft (raw, json)
Hash identifier: K2wkpfZ91tfYoKSd4orr4aKlVdpW56GZIGnAIqqa4No=
Subject key identifier: 50:DE:F0:29:92:5C:BE:2A:0C:F0:2C:01:E7:CE:6E:76:34:6A:84:70
Authority key identifier: 28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
Certificate issuer: /CN=287b8e2b920bff440a8f518744527146fb87e930
Certificate serial: 01A1081388318A19773AF4C4B547D86D720E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:01:00 +0000
Manifest this update: Sun 04 Oct 2026 18:01:00 +0000
Manifest next update: Mon 05 Oct 2026 18:01:00 +0000
Files and hashes: 1: IFW7hqO5GTL9KLcDfHf9JjuxeUc.asa (hash: WD3Stybi3qSMyZoe+Iv7eOPoBR7+JFZjhBMR2qYQzEs=)
2: KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl (hash: Fvjp/0UUuuNbQuTMPlYOu63so68O7cef+SVoG1/9MLY=)
3: ju68EpXZevf4Hb2wWFqdPmV352k.roa (hash: Ck2VmIwjqmui7Sus7741mQyUCGm4+who9Co6bDTtcl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:88:31:8a:19:77:3a:f4:c4:b5:47:d8:6d:72:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287b8e2b920bff440a8f518744527146fb87e930
Validity
Not Before: Oct 4 18:01:00 2026 GMT
Not After : Oct 5 18:01:00 2026 GMT
Subject: CN=50def029925cbe2a0cf02c01e7ce6e76346a8470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:da:72:06:e4:d8:40:f3:7a:97:91:57:f1:
6b:29:2a:ca:ee:d6:d1:0d:69:9a:0c:29:28:67:66:
16:97:fa:19:cc:c0:cf:6f:7c:09:a8:2a:b4:10:c9:
e5:d9:53:48:fa:58:52:c9:8c:7b:9c:45:e2:da:d6:
df:6b:68:39:77:a5:dd:a1:41:ba:9e:64:ae:44:d2:
f6:14:c4:6d:33:e0:e1:0e:a8:1c:26:c4:99:9b:86:
89:3c:21:23:f0:c5:4f:3d:d8:ec:da:8d:0d:9c:fb:
92:45:10:2b:1b:26:a1:59:97:1e:b1:3d:b1:df:d5:
0d:4b:aa:77:d7:06:07:97:a7:e8:bc:7a:56:f2:38:
46:e9:b4:36:8a:3b:21:20:78:4d:5e:9c:af:f5:1f:
58:dd:67:21:8d:d5:4d:a9:0c:f9:19:a5:5f:1a:a8:
4c:6a:9e:cd:3a:dc:2a:fe:c2:5c:48:a1:05:0f:d1:
04:62:9a:d4:1d:b8:e3:45:10:d3:2d:b7:ea:53:f7:
4a:b3:2c:57:4b:c6:38:2a:f9:92:ed:7e:60:c0:f5:
ba:65:f5:47:38:2f:64:a5:37:42:23:f8:55:61:d0:
f8:e4:82:13:a4:9e:3b:26:a3:07:34:58:b6:7f:e0:
d6:cb:6a:be:57:a0:80:47:1d:14:16:0c:e6:c1:d3:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:F0:29:92:5C:BE:2A:0C:F0:2C:01:E7:CE:6E:76:34:6A:84:70
X509v3 Authority Key Identifier:
keyid:28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:29:49:e7:83:66:b0:92:44:18:df:a1:d9:40:9c:30:cc:a1:
83:5f:5b:b1:23:6b:ba:fa:6f:99:c5:da:87:10:92:82:e2:8f:
70:17:e4:60:5c:80:14:ba:91:a5:e6:e5:30:3e:7a:71:bb:4b:
e6:f7:2a:70:c9:aa:96:b7:d2:b0:b6:da:36:93:5a:6f:97:47:
60:00:ac:52:fb:d7:29:43:fd:f0:6f:84:c3:6a:80:ef:10:46:
11:89:9d:03:61:f8:09:b8:a3:c1:4a:e7:85:61:3d:59:11:82:
77:d7:73:6e:3b:e0:99:49:85:57:2f:01:09:78:dc:92:fd:c5:
9e:e6:e0:1f:d0:75:c5:9c:98:4a:15:09:95:1e:31:78:f3:d3:
d8:44:8e:62:62:51:4e:a4:66:8f:51:db:80:2a:16:da:6d:6a:
8a:d3:35:ab:f7:65:cb:cd:a3:50:2f:d5:fd:50:9a:81:08:07:
66:31:ec:7e:ca:a9:61:54:c1:a6:78:5b:3c:c7:64:1f:f6:cb:
50:4c:c8:1f:cf:90:2d:3b:f0:05:7f:70:88:9b:71:bf:dd:ee:
b9:a9:9f:40:f8:60:d6:44:6a:2f:ff:83:a7:86:00:bb:4b:2e:
64:51:1c:d1:2e:f1:a1:e7:47:69:4d:32:46:c7:73:07:8e:e1:
49:43:59:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:40:26 2026 by rpki-client