Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
File: khjNJev3TLGwBLAe5QVQP_8kbWE.mft (raw, json)
Hash identifier: GmJJD/kk88P15oJSiJPVL6LqL4dptePObgkQ5Qmx+IU=
Subject key identifier: CA:4D:34:C9:39:B7:61:09:FA:9C:CA:4F:AE:79:09:8C:B5:AF:81:1B
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial: 019D2583240D70AA22C5B71C1577C07801ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
Manifest number: 06BD
Signing time: Wed 25 Mar 2026 15:00:44 +0000
Manifest this update: Wed 25 Mar 2026 15:00:44 +0000
Manifest next update: Thu 26 Mar 2026 15:00:44 +0000
Files and hashes: 1: WsvNi9fHVaR-QhhBc-1gHE69wug.roa (hash: Lfbnxpr5l5lYF7k2njm/AqL3hJumFpGwecHcxo26Gqc=)
2: khjNJev3TLGwBLAe5QVQP_8kbWE.crl (hash: 6EX/5kHPO0+vUOs3b+qk9YRKBL5yZGNPZAvYRazUg+A=)
3: rmPK-2arqwQhilMnOZ0KFnfC2n0.roa (hash: Ik9jCJ7xxR+lg/nG9DpBqXvmyqxrBlr3ClzK4O2QwTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:24:0d:70:aa:22:c5:b7:1c:15:77:c0:78:01:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Validity
Not Before: Mar 25 15:00:44 2026 GMT
Not After : Mar 26 15:00:44 2026 GMT
Subject: CN=ca4d34c939b76109fa9cca4fae79098cb5af811b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:6b:f6:7f:12:86:e1:2e:7d:90:c2:0f:92:
cb:f9:85:d2:04:a0:4b:ed:e1:7e:50:fd:76:45:c1:
c1:39:62:58:89:57:09:d2:87:fc:18:52:f3:ca:56:
3f:28:d7:c9:29:7f:67:5d:fd:45:a4:b7:cf:5b:e5:
bc:93:f0:1d:d1:30:76:a9:cf:81:f2:4b:9b:1e:bd:
31:19:8c:ab:ec:8b:3b:07:8d:77:db:b4:02:00:5a:
24:59:9a:a6:7f:1f:a1:08:5b:77:6f:70:36:de:a9:
34:dd:01:b0:22:c1:34:74:3f:98:45:cd:3a:4a:6d:
a0:21:b4:86:85:2b:ce:25:98:2f:37:8b:a3:c3:9f:
77:73:22:4e:61:82:8e:2b:c0:e2:0d:5d:ed:6a:03:
42:5f:65:92:a7:16:f5:4f:1b:54:62:74:e2:d5:82:
19:f1:e4:0c:16:39:e5:44:69:50:aa:1b:22:96:27:
83:80:d0:1c:21:88:b1:3b:46:d0:3d:cd:11:fe:13:
fa:59:f3:85:6a:7e:fd:48:98:4d:a6:4f:33:5f:92:
77:3a:a2:e2:89:4c:4b:08:34:4e:bb:da:b1:49:f6:
28:4e:85:54:6d:6c:02:06:f6:50:31:96:f0:79:49:
5b:b5:0e:8a:a9:d9:1e:ee:b4:9a:1c:31:fd:5a:4f:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4D:34:C9:39:B7:61:09:FA:9C:CA:4F:AE:79:09:8C:B5:AF:81:1B
X509v3 Authority Key Identifier:
keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7e:59:8d:fd:f3:dc:26:ab:44:4c:0b:71:a9:04:ae:98:19:
e9:7a:9b:31:7f:ca:ae:ed:c1:f7:cf:d6:02:43:60:0c:ef:f8:
d2:c7:88:f0:4f:41:d0:e1:23:40:62:4d:d1:c5:a8:eb:ff:ab:
f3:f8:59:4d:d9:20:63:f2:e8:7b:1c:39:3c:69:78:a7:83:05:
ef:c1:0d:7f:00:ec:d2:08:a3:16:53:bf:be:69:7d:89:26:71:
8c:cb:2c:66:97:1c:e5:c5:04:ec:20:f0:1a:de:79:de:0f:74:
0e:9b:0b:86:73:8b:25:9b:e0:64:10:1c:51:65:7e:f9:46:d6:
79:cf:3e:b7:19:9c:d6:a9:45:0c:7f:f7:76:fb:de:a2:ac:b1:
b6:f9:32:8a:33:e7:7f:7d:68:6b:65:32:65:54:53:9b:54:b7:
a5:ed:2f:d0:05:ee:42:81:17:de:e1:a0:ec:45:c9:3d:29:f4:
61:b4:c8:30:55:fd:85:d6:4d:61:68:f0:c4:1c:25:29:eb:06:
47:d3:c2:85:76:09:15:77:b7:42:f4:b2:a6:2f:21:06:9d:38:
a9:f6:bf:77:53:eb:e6:4c:4d:da:27:96:58:86:21:25:e6:d0:
ef:60:d7:77:d6:89:8b:c8:4d:62:05:87:76:5e:dc:cc:c8:f4:
5b:42:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:07 2026 by rpki-client