Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
File: KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft (raw, json)
Hash identifier: Q2+xan6ECM8SON+6p2fXJLYI+gkr+tljKDzZYRIzC7s=
Subject key identifier: C3:6C:08:4F:FB:3E:AE:8B:76:5C:E3:68:32:A2:AF:27:04:5F:CA:3E
Authority key identifier: 28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
Certificate issuer: /CN=287b8e2b920bff440a8f518744527146fb87e930
Certificate serial: 019F8F7F29740187E646E6F7244F30E80AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:43 +0000
Manifest this update: Thu 23 Jul 2026 15:01:43 +0000
Manifest next update: Fri 24 Jul 2026 15:01:43 +0000
Files and hashes: 1: IFW7hqO5GTL9KLcDfHf9JjuxeUc.asa (hash: WD3Stybi3qSMyZoe+Iv7eOPoBR7+JFZjhBMR2qYQzEs=)
2: KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl (hash: 1Wllmmelu5DAPjVAOu9sCM4lD5SXB7JsWsQPCrfO8Jk=)
3: ju68EpXZevf4Hb2wWFqdPmV352k.roa (hash: Ck2VmIwjqmui7Sus7741mQyUCGm4+who9Co6bDTtcl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:29:74:01:87:e6:46:e6:f7:24:4f:30:e8:0a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287b8e2b920bff440a8f518744527146fb87e930
Validity
Not Before: Jul 23 15:01:43 2026 GMT
Not After : Jul 24 15:01:43 2026 GMT
Subject: CN=c36c084ffb3eae8b765ce36832a2af27045fca3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:26:db:f3:36:18:d1:62:b8:12:ff:9e:18:
66:59:9f:ab:16:68:cf:22:07:3f:a5:ba:00:ca:f0:
fa:c5:1e:75:fb:8b:60:b4:a5:e7:2d:f6:2c:1e:80:
51:ef:8b:6a:a7:55:a5:97:b7:be:00:3d:6d:e2:cc:
98:15:52:60:5a:1e:ef:ef:7c:28:2e:59:95:a6:5a:
fa:62:4b:31:8a:f2:92:b7:43:bb:62:48:ee:af:27:
03:53:ec:8f:e6:86:54:0e:cc:87:08:40:7e:2a:32:
21:45:cf:db:12:2f:f5:a0:58:3f:96:38:d3:27:66:
c6:2a:47:ce:ba:1b:0b:8e:40:11:4d:77:00:eb:b3:
b7:08:05:36:d1:50:0c:c3:19:e7:0c:45:3a:3f:0e:
71:14:3c:54:37:5a:23:3c:cb:8b:43:96:ca:4b:ff:
28:87:8b:d2:3e:c7:69:53:c1:a4:3f:04:23:5c:72:
84:d3:0c:68:10:d5:b6:b6:69:73:ce:9c:1c:70:68:
8e:24:b9:6b:bc:fb:87:cf:a3:b8:cb:cf:93:6f:24:
e8:c5:19:c8:d1:f0:c6:55:fb:d5:25:07:ea:20:cc:
c8:f8:26:75:2d:04:66:be:98:48:e7:66:dd:0b:fe:
18:0f:09:a9:f5:d7:3a:08:90:b8:62:35:6f:e1:61:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6C:08:4F:FB:3E:AE:8B:76:5C:E3:68:32:A2:AF:27:04:5F:CA:3E
X509v3 Authority Key Identifier:
keyid:28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8b:9b:ee:5a:4e:fb:38:f8:31:bf:1b:24:ad:95:c3:e3:98:
37:73:e9:b1:ef:27:56:32:5f:5f:07:97:51:a7:25:2b:82:08:
2e:0e:2e:03:07:a6:4b:e7:0f:c2:b5:53:58:d5:ef:fb:96:9f:
d6:51:7f:05:ec:cd:40:a0:35:77:a5:6e:d5:08:34:f5:49:c6:
0e:cd:3a:71:09:80:b2:62:39:73:50:f0:be:2d:0e:97:ec:bb:
c2:e3:79:42:98:dc:8f:b9:9e:ce:0f:9b:ca:64:49:5d:b3:f6:
fe:1a:7f:9a:69:41:06:8b:bb:eb:c6:a9:ae:38:6b:70:5d:23:
d9:a8:9d:31:a1:e5:5e:15:cf:21:86:e0:2c:f7:15:cc:3a:f1:
70:8e:04:ee:dc:f3:a3:6a:a1:46:fd:0b:c7:b0:2b:e7:5f:f6:
8c:fe:c9:b6:f9:03:fe:d5:cf:20:83:95:08:f5:b8:d2:69:75:
71:e0:27:f9:11:b4:f9:4b:4f:e2:f8:b0:ae:9b:d1:70:db:9b:
58:7f:88:70:7f:2c:9c:af:bf:bb:d9:be:34:2b:fc:63:d0:f1:
cc:c6:f8:5d:8c:24:d7:0a:1a:df:7b:21:17:f9:52:21:1f:10:
92:a0:46:24:a9:53:fb:c5:25:80:9a:b1:22:0b:25:d9:15:23:
3a:c0:09:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfyl0AYfmRub3JE8w6AqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4N2I4ZTJiOTIwYmZmNDQwYThmNTE4NzQ0NTI3MTQ2ZmI4
N2U5MzAwHhcNMjYwNzIzMTUwMTQzWhcNMjYwNzI0MTUwMTQzWjAzMTEwLwYDVQQD
EyhjMzZjMDg0ZmZiM2VhZThiNzY1Y2UzNjgzMmEyYWYyNzA0NWZjYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzskm2/M2GNFiuBL/nhhmWZ+rFmjP
Igc/pboAyvD6xR51+4tgtKXnLfYsHoBR74tqp1Wll7e+AD1t4syYFVJgWh7v73wo
LlmVplr6YksxivKSt0O7YkjurycDU+yP5oZUDsyHCEB+KjIhRc/bEi/1oFg/ljjT
J2bGKkfOuhsLjkARTXcA67O3CAU20VAMwxnnDEU6Pw5xFDxUN1ojPMuLQ5bKS/8o
h4vSPsdpU8GkPwQjXHKE0wxoENW2tmlzzpwccGiOJLlrvPuHz6O4y8+TbyToxRnI
0fDGVfvVJQfqIMzI+CZ1LQRmvphI52bdC/4YDwmp9dc6CJC4YjVv4WFp/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNsCE/7Pq6LdlzjaDKirycEX8o+MB8GA1UdIwQY
MBaAFCh7jiuSC/9ECo9Rh0RScUb7h+kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0h1T0s1SUxfMFFLajFHSFJGSnhSdnVINlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgt
ZmQ1ZDU1YjYxZWM0LzEvS0h1T0s1SUxfMFFLajFHSFJGSnhSdnVINlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgtZmQ1ZDU1YjYxZWM0
LzEvS0h1T0s1SUxfMFFLajFHSFJGSnhSdnVINlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIub7lpO
+zj4Mb8bJK2Vw+OYN3Ppse8nVjJfXweXUaclK4IILg4uAwemS+cPwrVTWNXv+5af
1lF/BezNQKA1d6Vu1Qg09UnGDs06cQmAsmI5c1Dwvi0Ol+y7wuN5Qpjcj7mezg+b
ymRJXbP2/hp/mmlBBou768aprjhrcF0j2aidMaHlXhXPIYbgLPcVzDrxcI4E7tzz
o2qhRv0Lx7Ar51/2jP7JtvkD/tXPIIOVCPW40ml1ceAn+RG0+UtP4viwrpvRcNub
WH+IcH8snK+/u9m+NCv8Y9DxzMb4XYwk1woa33shF/lSIR8QkqBGJKlT+8UlgJqx
Igsl2RUjOsAJ6A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:46 2026 by rpki-client