Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: HH6ARoDmpQwY/UKhga89j8V21ACdGA2b6/f32vyaKLk=
Subject key identifier: EB:A6:EA:D7:5E:37:7E:72:4E:3A:17:3E:2A:A6:11:7E:62:10:45:CC
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019E1EA31A8730EA0CBF17DD5DD308609A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 1353
Signing time: Wed 13 May 2026 00:01:06 +0000
Manifest this update: Wed 13 May 2026 00:01:06 +0000
Manifest next update: Thu 14 May 2026 00:01:06 +0000
Files and hashes: 1: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=)
2: cuKBdXTr4qzygMyG_xdsVAondIc.roa (hash: gx6P2REt7/T1YdadU0I1WyXfvK+m2EoLKxa8au7Wlyw=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: 7jKEuvaR8H+FQfsgVo14GYuoB4thQ20pPQDd35PtVX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:1a:87:30:ea:0c:bf:17:dd:5d:d3:08:60:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: May 13 00:01:06 2026 GMT
Not After : May 14 00:01:06 2026 GMT
Subject: CN=eba6ead75e377e724e3a173e2aa6117e621045cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:fc:7c:e0:a4:9c:5a:8e:48:95:da:e3:56:
cd:f9:97:24:b8:c3:9e:44:1e:4c:6c:69:89:f3:9d:
86:78:f4:2e:87:26:a7:54:7e:c8:6f:7f:77:b5:f8:
1a:30:18:8f:f3:94:4a:24:bd:9e:5d:d1:53:6b:d6:
3c:39:22:fc:c3:fe:ce:8a:87:eb:c6:a7:c8:3b:b2:
f5:b3:5d:4c:cc:9f:cf:78:ba:d1:cc:65:c5:18:f9:
87:f1:e5:ee:7d:fd:a5:c3:61:72:71:85:fe:b4:66:
03:8f:26:12:e0:da:89:fd:2c:46:db:e1:0b:34:e0:
9c:e6:30:8a:ef:5a:78:4f:40:32:e7:14:2e:e1:eb:
20:7e:ef:42:40:d2:58:43:46:b6:9b:9c:b7:20:27:
64:a6:4c:d6:7f:85:7e:3f:16:3c:08:e9:44:c5:f6:
e1:64:d6:bf:ea:6e:5f:75:f2:ff:42:b6:16:91:a2:
a2:fd:e4:b0:1c:a0:c4:6c:01:57:97:cc:1c:99:d5:
63:cc:ec:23:9b:ae:8f:ba:09:1d:c8:e6:27:ab:5a:
13:7c:ad:cf:18:93:fc:6c:da:6c:d9:f1:de:23:2c:
27:35:23:cf:f1:4e:66:ac:74:93:c8:d7:2f:8f:03:
57:46:cf:d0:48:cd:ed:d0:a9:7d:9e:84:44:58:8a:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A6:EA:D7:5E:37:7E:72:4E:3A:17:3E:2A:A6:11:7E:62:10:45:CC
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c7:60:0b:13:8e:ab:9a:d2:bf:ab:68:aa:a5:8d:1a:c7:c4:
cd:70:e5:4e:ac:bb:63:e8:4d:3b:57:66:b7:8e:7a:f9:33:55:
a4:d2:c7:93:53:d8:9a:b9:e1:57:9d:ce:61:f4:03:fc:f9:65:
3c:f2:13:57:c5:ec:9c:07:cf:55:5e:5f:d7:37:41:e8:58:67:
54:34:b1:dd:06:40:0f:83:c4:33:6e:78:08:12:b1:96:86:bc:
fe:00:47:bb:bb:ed:16:f6:33:1e:05:3d:b0:6a:02:a9:a7:30:
9a:a0:c4:e3:f9:54:e9:1b:3c:a7:af:e4:51:01:13:94:0d:94:
26:4d:6c:4b:22:f2:7d:65:5c:64:db:e0:88:bd:c2:48:15:c4:
2f:2f:07:30:4b:0a:05:09:90:b2:13:cb:fb:41:7d:63:d2:90:
7a:af:4c:86:78:18:36:a6:ea:7e:7e:69:0a:28:f1:99:b4:a7:
e6:c2:8e:f0:70:5e:e7:be:84:be:56:c1:ee:a2:39:43:78:83:
f1:ce:0f:18:20:d7:59:19:ad:e5:21:5c:f5:ae:b2:64:8a:40:
42:6f:3e:02:da:f7:78:00:67:9d:a2:77:c5:ae:e9:58:ba:9d:
f6:ff:eb:af:fe:ab:4c:ec:38:96:51:58:22:d2:ec:cf:b5:70:
1e:40:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:30 2026 by rpki-client