Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: Q10N+G1pSZuUi9Pv1xzp+gWkwxaiBY/CyvYk7XibcSk=
Subject key identifier: 1A:A6:9E:D5:59:2E:1C:1A:D7:8A:8C:17:F3:F3:6B:9F:0E:93:F2:1C
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 01A0D56FEF3645F2599F0AF85778ACC4E27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 14BB
Signing time: Thu 24 Sep 2026 22:01:17 +0000
Manifest this update: Thu 24 Sep 2026 22:01:17 +0000
Manifest next update: Fri 25 Sep 2026 22:01:17 +0000
Files and hashes: 1: 8RIumqkeV3tlefbMbbhwKUXmPoE.roa (hash: Hcw16et0hw/lbpdl7sOTOgYfd3jsskMwBHynxWpg+2M=)
2: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: wXASDgB6MWFmXinIL1hn7lfcEOsQUrcuV2twCdilkm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:ef:36:45:f2:59:9f:0a:f8:57:78:ac:c4:e2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Sep 24 22:01:17 2026 GMT
Not After : Sep 25 22:01:17 2026 GMT
Subject: CN=1aa69ed5592e1c1ad78a8c17f3f36b9f0e93f21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:df:ba:96:0b:4d:04:4f:b8:28:00:37:f0:
25:92:81:5c:28:e7:35:02:2e:96:a0:71:d9:a3:5a:
fe:5d:62:ff:ec:75:aa:f4:77:c5:07:f4:2a:72:98:
1a:85:ad:7c:ff:8c:37:e1:eb:c9:1d:fa:36:26:91:
0b:d9:60:ec:c8:48:c6:3a:c7:47:dc:7f:f5:ff:77:
e5:1a:2a:f0:72:2b:1e:0d:3f:e1:4b:3f:c3:40:7f:
e9:fb:85:cd:a8:de:20:84:81:f1:76:08:fe:7a:0b:
8a:10:91:9b:9e:20:c6:48:35:f4:a2:a1:c7:b3:7e:
36:1b:c2:5c:fa:13:aa:a8:c3:90:f1:23:2a:72:a1:
b4:d8:d4:f0:39:dd:54:70:15:5d:8e:6c:53:c0:8d:
71:4b:ec:cd:6c:b3:36:99:a0:c8:b4:c0:fd:7f:f4:
66:e1:06:6e:d9:e2:61:36:a2:b6:cd:f5:c4:db:c5:
f7:f9:34:10:81:cc:65:bb:ab:36:77:74:c3:0d:30:
9b:82:9d:9b:b5:e9:35:f4:b9:e5:ac:1b:05:e7:eb:
30:ad:4d:db:fd:fa:8a:cc:ae:e3:7e:7b:1f:c2:13:
c8:fe:eb:11:a8:34:ec:31:4a:66:fb:45:9e:67:31:
4a:2e:bb:c7:c8:97:44:6c:48:69:ef:ca:7c:49:75:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:9E:D5:59:2E:1C:1A:D7:8A:8C:17:F3:F3:6B:9F:0E:93:F2:1C
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:df:68:f7:e2:6b:0a:e7:3a:fb:29:06:e4:de:d0:f7:51:e6:
6f:be:6f:79:37:7b:9a:59:05:c2:95:dc:a4:37:cc:b8:4e:d1:
48:2d:76:77:a2:bd:4b:fc:ab:79:11:42:81:71:2c:8d:fe:e4:
13:84:de:35:15:fc:45:fe:c6:2e:af:39:82:eb:de:bb:cb:c0:
1b:ed:c4:ff:58:7a:0e:7a:5c:4d:36:af:7c:fc:92:e7:98:51:
9b:e7:eb:56:fd:1f:07:2b:c1:09:e4:ea:61:ee:54:21:82:25:
4a:6f:a5:75:b5:d2:c0:7e:16:cf:dd:42:86:67:d4:9a:dd:a3:
81:1c:68:e7:6e:cd:85:2a:8b:60:d0:59:d2:fd:1c:14:b8:10:
81:07:05:1d:c2:0d:59:47:67:64:aa:d4:f5:9e:90:e7:d8:08:
8f:3a:04:c5:8c:3e:69:c4:a8:c9:7c:41:95:41:b0:a4:94:ce:
b7:68:08:f3:4c:a7:0e:a3:ef:b9:de:92:51:d1:03:56:2b:ad:
b1:be:f8:47:f6:d3:c8:af:10:30:7d:d1:f7:a5:15:2d:24:b1:
5e:0e:ca:94:4b:af:2c:ec:ac:f7:57:db:db:48:a8:f9:13:52:
1a:3b:19:33:96:2f:5a:7a:c2:15:27:8a:61:99:61:14:50:a3:
b1:9f:b8:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVb+82RfJZnwr4V3isxOJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh
MmQxMWIwHhcNMjYwOTI0MjIwMTE3WhcNMjYwOTI1MjIwMTE3WjAzMTEwLwYDVQQD
EygxYWE2OWVkNTU5MmUxYzFhZDc4YThjMTdmM2YzNmI5ZjBlOTNmMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEHfupYLTQRPuCgAN/AlkoFcKOc1
Ai6WoHHZo1r+XWL/7HWq9HfFB/Qqcpgaha18/4w34evJHfo2JpEL2WDsyEjGOsdH
3H/1/3flGirwciseDT/hSz/DQH/p+4XNqN4ghIHxdgj+eguKEJGbniDGSDX0oqHH
s342G8Jc+hOqqMOQ8SMqcqG02NTwOd1UcBVdjmxTwI1xS+zNbLM2maDItMD9f/Rm
4QZu2eJhNqK2zfXE28X3+TQQgcxlu6s2d3TDDTCbgp2btek19LnlrBsF5+swrU3b
/fqKzK7jfnsfwhPI/usRqDTsMUpm+0WeZzFKLrvHyJdEbEhp78p8SXXW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqmntVZLhwa14qMF/Pza58Ok/IcMB8GA1UdIwQY
MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct
MDA4NWEzNjVhMjVmLzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm
LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt9o9+Jr
Cuc6+ykG5N7Q91Hmb75veTd7mlkFwpXcpDfMuE7RSC12d6K9S/yreRFCgXEsjf7k
E4TeNRX8Rf7GLq85guveu8vAG+3E/1h6DnpcTTavfPyS55hRm+frVv0fByvBCeTq
Ye5UIYIlSm+ldbXSwH4Wz91ChmfUmt2jgRxo527NhSqLYNBZ0v0cFLgQgQcFHcIN
WUdnZKrU9Z6Q59gIjzoExYw+acSoyXxBlUGwpJTOt2gI80ynDqPvud6SUdEDViut
sb74R/bTyK8QMH3R96UVLSSxXg7KlEuvLOys91fb20io+RNSGjsZM5YvWnrCFSeK
YZlhFFCjsZ+4RQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:52:09 2026 by rpki-client