Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: TiRQZG1yQQOCMqmkFDWT18y13TLZgAiySIoramtn5Qw=
Subject key identifier: 5E:F1:65:59:21:29:A3:DA:0D:F8:A9:D1:49:CA:9E:9A:C3:FB:FE:4E
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019F916D6706E03AD0C4B03DFFED7B65757C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 1413
Signing time: Fri 24 Jul 2026 00:01:33 +0000
Manifest this update: Fri 24 Jul 2026 00:01:33 +0000
Manifest next update: Sat 25 Jul 2026 00:01:33 +0000
Files and hashes: 1: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=)
2: cuKBdXTr4qzygMyG_xdsVAondIc.roa (hash: gx6P2REt7/T1YdadU0I1WyXfvK+m2EoLKxa8au7Wlyw=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: yF+CtJJOtXpDTcENG36L90dvarmNUHFu7/eKsyw/sxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:67:06:e0:3a:d0:c4:b0:3d:ff:ed:7b:65:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Jul 24 00:01:33 2026 GMT
Not After : Jul 25 00:01:33 2026 GMT
Subject: CN=5ef165592129a3da0df8a9d149ca9e9ac3fbfe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:0c:7c:a8:0d:9f:b6:91:b5:12:ae:f9:87:
32:51:fd:67:96:a2:bc:df:cc:11:2a:c2:84:19:7a:
a8:52:30:46:bc:e1:4c:e1:a9:3d:7e:19:10:8c:41:
03:87:38:25:c2:64:bb:cc:ab:38:4e:1a:ae:00:7d:
23:d4:6c:b1:fb:98:60:d5:ac:88:7b:d0:9c:6e:61:
e8:00:05:22:9f:f3:f5:15:f8:89:9e:27:26:22:e9:
85:a2:8f:47:b4:fe:dd:a5:75:f2:2a:e8:b2:3b:53:
e5:c3:71:04:9d:79:43:be:f6:2d:92:b3:54:fe:9a:
1b:25:5f:01:23:3b:29:f7:bb:4f:7b:49:d4:c9:86:
1b:b5:73:4f:bb:86:3d:4a:a1:13:c5:24:5e:ff:20:
f9:3e:42:b6:e0:ec:a8:ff:fa:3a:41:3e:20:1a:e9:
94:97:40:32:ed:af:a8:23:7e:90:44:0d:e4:45:d3:
ec:ec:af:88:18:63:f0:24:ed:f8:34:1f:7d:75:44:
ce:cb:27:57:dd:74:41:7f:38:78:df:f1:17:40:91:
a1:a8:55:b4:cd:f9:58:11:da:db:24:c8:61:b3:44:
e4:e0:00:c4:04:45:e4:b1:d0:fa:2d:1b:b8:f1:03:
c9:ac:f3:f2:38:18:86:71:f1:af:62:14:77:d6:92:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F1:65:59:21:29:A3:DA:0D:F8:A9:D1:49:CA:9E:9A:C3:FB:FE:4E
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e4:86:89:bd:83:2d:21:6e:43:e0:44:4e:a2:7e:a1:53:10:
99:9a:9b:e5:48:bc:1c:bb:cf:97:87:55:cb:94:8f:d9:02:3e:
5d:f4:7c:e4:74:12:43:96:65:40:1f:db:de:8f:a8:d2:b0:a8:
0e:fa:78:3d:f0:8d:9d:ea:f1:78:53:b6:d3:ee:00:44:8d:24:
98:1f:a1:98:06:fb:75:10:0d:60:0d:1d:c4:18:05:a2:33:ae:
c7:43:4a:7a:14:da:c0:8f:2f:19:58:5b:38:7c:53:d1:d1:6d:
9f:a3:04:5e:d1:e4:80:7f:b3:45:6c:74:cf:e1:ae:c5:85:52:
8e:25:de:e2:b0:57:10:5d:dc:c1:55:cc:60:ad:60:b0:33:5d:
f2:24:d6:3d:0f:ee:8e:7a:bf:b5:2c:27:cd:ae:76:58:1b:e0:
50:0c:c7:ae:11:51:8e:e8:bf:76:a1:12:6a:c0:dc:cd:93:8b:
10:7e:b5:82:55:e6:ba:07:41:2b:87:42:af:cf:e4:be:2c:67:
bb:69:a5:9a:ae:19:c0:0e:94:46:dc:b2:16:02:a4:64:fd:28:
f3:c7:93:cc:7c:f3:5c:18:d9:2a:00:ed:ff:9b:09:83:1a:8b:
74:6e:d4:ad:94:72:98:23:ba:39:3b:9d:a7:79:bc:0d:32:c8:
ba:38:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:43 2026 by rpki-client