Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: NPmu7e5XmWFGMJ+4T2Lzv0xyz/0s2S3V6exnUpegeeg=
Subject key identifier: D9:54:18:04:BF:64:19:CF:A4:00:BB:D2:8F:85:8F:40:0D:1E:E6:B4
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019D270425AC261BF6AD8FBB07B9ABD7DB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 12D2
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: DrIlC2gAjiHMS5PxVbexip4Yu4Y.roa (hash: SgZUep6gaG10ZpC2hI1Q2bopt3f37k+OuHhh+4P/NqE=)
2: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: lfT4AkjpwmWTmzC1e1TE5rAZ5KvlXoxg/Hw1UcrEAh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:25:ac:26:1b:f6:ad:8f:bb:07:b9:ab:d7:db:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=d9541804bf6419cfa400bbd28f858f400d1ee6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:b6:0c:bc:17:34:b8:66:05:96:8a:a5:86:
fa:f4:4d:43:57:12:7b:df:33:ff:3c:95:7b:6c:43:
fb:d1:f1:8b:66:58:88:b4:42:3c:9e:d9:10:61:c3:
fb:68:7e:85:4b:40:7c:9e:cf:56:b6:b8:27:ee:25:
f3:0b:c0:a8:d1:c5:0e:1a:66:5a:70:46:09:27:63:
0a:0e:fc:53:33:55:d1:5a:d4:6e:23:20:25:66:ed:
4d:6a:31:f0:2d:fd:3d:5e:e7:8d:0b:d9:95:22:c9:
ea:e8:a6:54:e1:cd:f4:bc:09:57:14:0b:b2:a3:49:
fc:d7:a9:99:a2:73:45:5a:cd:52:97:93:a0:59:9f:
d3:ff:0f:fc:08:e5:e1:6e:57:09:c1:99:73:77:3e:
f9:eb:c5:80:7b:e7:d1:02:f7:4e:33:74:0c:ce:7f:
38:1c:8b:53:e0:8c:2b:bd:04:3c:52:50:92:05:9f:
56:35:fe:75:a4:d7:6f:f8:29:38:93:9b:45:95:d8:
f2:f7:29:b2:69:e1:a2:4b:02:5c:73:dd:e7:43:c1:
ae:21:16:5e:26:a9:67:c3:e7:cd:e8:3a:87:ae:6f:
44:fd:ec:9e:88:92:66:3e:fd:d0:bb:4b:e7:28:b3:
5f:0c:2c:81:8c:a2:f4:7e:9d:c2:87:b7:0b:a1:76:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:54:18:04:BF:64:19:CF:A4:00:BB:D2:8F:85:8F:40:0D:1E:E6:B4
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bf:47:63:f8:f7:55:4b:69:cb:fb:1e:47:31:82:2f:60:c3:
cf:ff:bf:56:dd:2d:1c:32:d6:53:15:67:6b:00:09:9e:2a:f0:
a6:46:e5:d6:eb:fd:28:ac:56:27:cc:9b:00:dc:e3:7b:54:ea:
b0:eb:5f:7b:18:a4:60:51:68:36:4b:ad:51:f7:a9:b5:3e:08:
c6:96:40:7c:46:d4:7a:62:c2:79:da:1c:8f:c0:9d:3e:14:f5:
fa:ef:2d:1d:0e:a5:b6:a9:f3:71:86:70:89:04:10:34:73:8d:
7b:fc:a7:5f:10:57:a7:e2:f5:dc:17:2d:37:6d:82:47:55:0a:
d5:94:48:c3:97:c7:88:be:4e:87:b0:79:e1:9a:b2:00:f0:03:
3b:3c:5f:03:29:63:f7:8d:7b:f1:bd:32:e9:42:9e:65:32:31:
1c:4f:a5:d2:4b:60:34:bb:e2:34:4d:87:ff:d7:ec:20:25:85:
85:34:7f:6e:63:1d:e4:56:95:39:d0:e8:83:3b:25:25:72:50:
0b:48:6b:8a:4a:63:00:d2:2f:dc:78:d4:c8:a5:93:47:60:0b:
74:24:a2:65:e3:94:9a:20:df:b2:bb:88:95:a8:6c:21:9d:6c:
68:a2:57:19:6c:c8:d9:09:17:7f:9b:8d:ff:7a:fb:3e:d4:8f:
d4:db:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:07 2026 by rpki-client