Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: 3Yy8HG1vmzG3b40PcOvcFHy+GDwLvv7IoteA9ficG6w=
Subject key identifier: 9C:76:7D:50:65:D3:94:3B:DF:ED:5B:B1:0D:78:62:42:F5:59:4F:66
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 0199FC8F79FE8D9820002D878DF96D611909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 1126
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: U5brV2wu1x_E4LYsBJQzT_Q5MOM.roa (hash: ETh8nXKXUOu2Azl2VyxOp9oStSQiBL2JNlN9c3tCXQ0=)
2: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: UcdTwOm5x/AC2sUaSj+yPT2p6tWsEjjLdZ8JyHQuOTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:79:fe:8d:98:20:00:2d:87:8d:f9:6d:61:19:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=9c767d5065d3943bdfed5bb10d786242f5594f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:3a:04:c8:70:bd:fe:d3:4e:3b:a1:69:96:
0f:e5:d8:ae:53:87:a6:c3:eb:c0:9b:f1:48:e3:08:
fb:84:ef:63:a8:c3:0c:05:7f:8f:24:71:90:c1:c7:
e0:e1:c8:85:d9:e8:2c:56:80:0d:91:fa:d4:02:2a:
af:dd:bf:67:66:b9:de:f3:aa:e8:71:71:75:53:ef:
d6:a7:6b:f0:53:5f:92:1f:b9:2d:27:ff:cc:a1:9d:
45:8b:bf:f4:54:af:33:9f:e3:a2:7b:66:20:3d:48:
7a:5f:db:99:72:ad:4c:a6:7f:b6:94:e2:c6:12:10:
97:d4:23:e0:32:ea:31:1a:8d:be:3c:03:fb:cf:96:
4b:fd:6c:e4:27:e5:01:23:0a:9c:f0:f2:5d:f0:fe:
3f:45:60:28:f5:11:d3:1d:7e:14:42:ad:6b:ea:55:
c2:f1:e9:a1:b1:f7:b7:2a:e8:54:1e:d2:0d:da:e0:
38:70:ae:ed:c5:3e:5a:59:96:d0:81:03:ad:05:70:
8d:96:8c:6d:e6:35:65:fd:9f:10:31:82:a9:d4:94:
50:6a:40:30:d8:00:a4:2c:0b:61:f4:67:43:e0:c1:
28:26:48:f5:10:1e:e5:cc:25:18:7d:1c:f3:ae:c8:
25:69:07:e1:2d:de:f3:da:c4:da:3b:4f:12:cc:44:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:7D:50:65:D3:94:3B:DF:ED:5B:B1:0D:78:62:42:F5:59:4F:66
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cc:63:b5:2f:c2:3c:5e:0a:31:ac:87:3b:80:36:e1:42:5b:
4b:bd:a5:be:70:8b:a1:e1:a4:b1:12:9d:cb:0a:f2:9a:04:17:
cc:f5:21:34:5f:b9:5d:1c:85:c2:aa:d7:a5:83:88:dc:a7:68:
79:cf:9f:75:d4:b4:75:bf:60:3f:58:4f:4f:b2:c4:e0:b9:3c:
47:16:4f:3c:7b:0a:69:66:1e:8b:4a:68:e9:03:25:75:04:f0:
cd:2c:ff:75:65:dd:d1:f3:29:bc:66:ac:b3:75:72:67:a2:70:
99:7e:29:e1:6a:82:0f:88:24:2e:57:f7:36:91:59:84:3d:e0:
22:70:7f:d5:9b:40:0d:95:05:55:8a:87:98:11:02:72:92:0d:
c1:f3:a0:35:25:3a:53:49:17:d1:fc:78:74:c9:00:10:b3:c5:
4e:cc:a4:76:cf:0b:8e:15:f3:50:2a:50:6e:61:f5:69:e1:4b:
45:59:a3:96:19:b3:77:5e:2b:45:d5:60:93:f0:d4:a6:da:5d:
3f:be:08:21:2c:40:11:f2:da:58:21:ee:e3:17:20:12:4f:62:
2a:1f:c2:24:ea:ac:3c:3f:0f:60:f2:64:94:e0:c6:4b:90:36:
1c:b2:95:57:d5:ed:76:87:95:04:08:55:d4:4e:79:f3:24:42:
bd:68:1a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3n+jZggAC2HjfltYRkJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh
MmQxMWIwHhcNMjUxMDE5MTMwMTI1WhcNMjUxMDIwMTMwMTI1WjAzMTEwLwYDVQQD
Eyg5Yzc2N2Q1MDY1ZDM5NDNiZGZlZDViYjEwZDc4NjI0MmY1NTk0ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUE6BMhwvf7TTjuhaZYP5diuU4em
w+vAm/FI4wj7hO9jqMMMBX+PJHGQwcfg4ciF2egsVoANkfrUAiqv3b9nZrne86ro
cXF1U+/Wp2vwU1+SH7ktJ//MoZ1Fi7/0VK8zn+Oie2YgPUh6X9uZcq1Mpn+2lOLG
EhCX1CPgMuoxGo2+PAP7z5ZL/WzkJ+UBIwqc8PJd8P4/RWAo9RHTHX4UQq1r6lXC
8emhsfe3KuhUHtIN2uA4cK7txT5aWZbQgQOtBXCNloxt5jVl/Z8QMYKp1JRQakAw
2ACkLAth9GdD4MEoJkj1EB7lzCUYfRzzrsglaQfhLd7z2sTaO08SzETKzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx2fVBl05Q73+1bsQ14YkL1WU9mMB8GA1UdIwQY
MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct
MDA4NWEzNjVhMjVmLzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm
LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcxjtS/C
PF4KMayHO4A24UJbS72lvnCLoeGksRKdywrymgQXzPUhNF+5XRyFwqrXpYOI3Kdo
ec+fddS0db9gP1hPT7LE4Lk8RxZPPHsKaWYei0po6QMldQTwzSz/dWXd0fMpvGas
s3VyZ6JwmX4p4WqCD4gkLlf3NpFZhD3gInB/1ZtADZUFVYqHmBECcpINwfOgNSU6
U0kX0fx4dMkAELPFTsykds8LjhXzUCpQbmH1aeFLRVmjlhmzd14rRdVgk/DUptpd
P74IISxAEfLaWCHu4xcgEk9iKh/CJOqsPD8PYPJklODGS5A2HLKVV9XtdoeVBAhV
1E558yRCvWga1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:53 2025 by rpki-client