Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
File: KHSJcFRraILv-bc41w7-BsYBwzU.mft (raw, json)
Hash identifier: f+9mKUgS1sWSTS388FzZ2MvTjd1WMtHn8ZHGvReFBA0=
Subject key identifier: F9:74:C6:61:11:19:04:8C:FD:F7:40:7E:4B:87:CC:EC:AF:C6:25:03
Authority key identifier: 28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
Certificate issuer: /CN=28748970546b6882eff9b738d70efe06c601c335
Certificate serial: 01A0D23775CBE3CCF8DE92D736D317F07CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
Manifest number: 63
Signing time: Thu 24 Sep 2026 07:00:44 +0000
Manifest this update: Thu 24 Sep 2026 07:00:44 +0000
Manifest next update: Fri 25 Sep 2026 07:00:44 +0000
Files and hashes: 1: KHSJcFRraILv-bc41w7-BsYBwzU.crl (hash: OcuihG1rVwDeJhZ+WUAUipac8sCgtyp7JoRpQVWkQGQ=)
2: toC9TpCejZGoS5Aiy088ROsAylA.roa (hash: A+HnAnljtqd9QqU3SU6STVhVY4cLg0aMMIYBL3Zi0nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:75:cb:e3:cc:f8:de:92:d7:36:d3:17:f0:7c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28748970546b6882eff9b738d70efe06c601c335
Validity
Not Before: Sep 24 07:00:44 2026 GMT
Not After : Sep 25 07:00:44 2026 GMT
Subject: CN=f974c6611119048cfdf7407e4b87ccecafc62503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:cb:32:bf:ab:19:a6:d2:d5:b4:bd:8a:2d:
17:fd:69:a9:3f:3a:10:95:7e:2e:92:36:2d:ed:60:
d9:cc:2a:41:2b:cf:00:d9:fa:e3:36:47:f0:3b:12:
e3:b8:fe:61:ab:9c:22:18:79:78:fb:e7:b0:e0:ad:
d2:90:07:b0:f3:a7:65:14:a3:29:1e:24:1f:06:b5:
d8:6c:9c:c0:e0:87:37:1d:4c:c8:98:0c:bc:29:4d:
d3:c5:eb:06:f3:cc:d8:b7:6d:9e:3c:16:2f:0b:a3:
e4:10:8f:85:c4:fc:3e:2f:ae:19:32:e8:a1:5c:84:
d6:37:3c:37:2e:20:f3:6e:56:07:37:01:64:1d:a2:
97:48:4f:f5:3c:a1:b8:27:b3:76:20:8b:9b:f0:19:
c1:4d:c2:eb:04:bf:3f:91:b4:0d:df:f2:62:e3:19:
e0:76:2f:6a:e5:5e:a3:15:9b:5b:47:11:07:0c:ae:
ee:70:64:9f:d1:4c:0e:1a:28:5d:71:88:f3:4c:f5:
85:61:c4:40:5a:42:67:f2:af:bb:84:ba:45:2a:0a:
4e:2b:23:aa:b8:f1:05:e1:9c:d4:dd:6e:9a:25:46:
f8:9a:53:c4:53:45:23:d2:a4:f9:00:f1:ed:5e:2d:
b2:4e:d9:23:77:ce:d7:23:da:d6:23:37:6c:1b:fa:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:C6:61:11:19:04:8C:FD:F7:40:7E:4B:87:CC:EC:AF:C6:25:03
X509v3 Authority Key Identifier:
keyid:28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c6:11:e0:8c:08:f5:25:6a:8c:ea:40:38:ef:c5:f9:5e:5b:
84:90:9b:41:2a:fd:70:56:38:da:27:b5:d6:a3:05:59:d2:1b:
6e:43:7e:98:c5:fe:74:62:5d:90:e0:c1:30:81:cf:52:07:f3:
ba:23:95:37:be:0a:2c:d5:78:cf:5e:08:83:ce:81:fe:85:29:
b7:04:20:a2:4a:6f:42:13:58:d8:4b:85:5a:78:7f:8f:03:f7:
59:1d:fd:66:a6:ce:f5:60:d4:10:df:6d:fc:00:e4:2f:4d:eb:
46:ad:3b:7b:f9:c3:38:02:1b:94:ad:36:b6:9b:6e:d1:f8:df:
a0:d9:14:38:bd:de:7e:4b:b7:f6:ec:90:e7:10:00:7f:94:b4:
a8:69:89:79:58:6d:c8:ac:5e:f5:ec:68:e0:d2:55:da:36:f3:
b3:df:25:54:e0:f5:0e:bf:92:47:de:b0:70:ee:ec:3b:50:c1:
f1:22:d0:7d:6c:98:88:cd:87:1c:55:59:8b:9f:16:4f:e3:54:
b4:40:09:3a:10:30:38:bc:a8:71:28:92:cc:8b:67:a1:9a:b4:
f2:a8:be:b1:37:dc:c9:6d:fe:18:c1:96:55:4d:31:83:8a:21:
32:cc:3c:08:87:42:9c:18:07:38:62:97:c3:89:24:5d:1b:06:
ad:ea:3e:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSN3XL48z43pLXNtMX8HzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzQ4OTcwNTQ2YjY4ODJlZmY5YjczOGQ3MGVmZTA2YzYw
MWMzMzUwHhcNMjYwOTI0MDcwMDQ0WhcNMjYwOTI1MDcwMDQ0WjAzMTEwLwYDVQQD
EyhmOTc0YzY2MTExMTkwNDhjZmRmNzQwN2U0Yjg3Y2NlY2FmYzYyNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFfLMr+rGabS1bS9ii0X/WmpPzoQ
lX4ukjYt7WDZzCpBK88A2frjNkfwOxLjuP5hq5wiGHl4++ew4K3SkAew86dlFKMp
HiQfBrXYbJzA4Ic3HUzImAy8KU3TxesG88zYt22ePBYvC6PkEI+FxPw+L64ZMuih
XITWNzw3LiDzblYHNwFkHaKXSE/1PKG4J7N2IIub8BnBTcLrBL8/kbQN3/Ji4xng
di9q5V6jFZtbRxEHDK7ucGSf0UwOGihdcYjzTPWFYcRAWkJn8q+7hLpFKgpOKyOq
uPEF4ZzU3W6aJUb4mlPEU0Uj0qT5APHtXi2yTtkjd87XI9rWIzdsG/pQlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPl0xmERGQSM/fdAfkuHzOyvxiUDMB8GA1UdIwQY
MBaAFCh0iXBUa2iC7/m3ONcO/gbGAcM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hTSmNGUnJhSUx2LWJjNDF3Ny1Cc1lCd3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wNzgzZDQtNTQxMy00ZDZkLTkxYjMt
N2JjNDJjMTliNDhlLzEvS0hTSmNGUnJhSUx2LWJjNDF3Ny1Cc1lCd3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wNzgzZDQtNTQxMy00ZDZkLTkxYjMtN2JjNDJjMTliNDhl
LzEvS0hTSmNGUnJhSUx2LWJjNDF3Ny1Cc1lCd3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcYR4IwI
9SVqjOpAOO/F+V5bhJCbQSr9cFY42ie11qMFWdIbbkN+mMX+dGJdkODBMIHPUgfz
uiOVN74KLNV4z14Ig86B/oUptwQgokpvQhNY2EuFWnh/jwP3WR39ZqbO9WDUEN9t
/ADkL03rRq07e/nDOAIblK02tptu0fjfoNkUOL3efku39uyQ5xAAf5S0qGmJeVht
yKxe9exo4NJV2jbzs98lVOD1Dr+SR96wcO7sO1DB8SLQfWyYiM2HHFVZi58WT+NU
tEAJOhAwOLyocSiSzItnoZq08qi+sTfcyW3+GMGWVU0xg4ohMsw8CIdCnBgHOGKX
w4kkXRsGreo+Xw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:39 2026 by rpki-client