Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: vyGm1wxTPwpd4/KbPFNBQWWwXv5bXOAAoMAcKEd9hl8=
Subject key identifier: B1:55:CA:04:AD:CD:42:40:ED:3D:A9:BF:F8:5D:AE:CD:86:B4:26:CC
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 01A0D31567B2D42DBBD7F6552DB75B24EBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 11:03:10 +0000
Manifest this update: Thu 24 Sep 2026 11:03:10 +0000
Manifest next update: Fri 25 Sep 2026 11:03:10 +0000
Files and hashes: 1: 2VrXKMaV4hFStFOxu_UQS5okGCc.roa (hash: ysQxFYSk2THDKp3xdvckm0rpXg2xlVHGITzLw9rPwIQ=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: i2bqg/Aj3oFESw2xmeeukFg0kn/QwFkXtuiK3SVC/T0=)
3: Stpleb6OTPqMfH86_X0X4TcY0xw.roa (hash: vOMEgiat3XRiljAMfWkhr6z+Hs+WLCtckYdZXT9W3aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:67:b2:d4:2d:bb:d7:f6:55:2d:b7:5b:24:eb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Sep 24 11:03:10 2026 GMT
Not After : Sep 25 11:03:10 2026 GMT
Subject: CN=b155ca04adcd4240ed3da9bff85daecd86b426cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:d4:f4:0a:7b:57:fc:6b:f0:da:d3:f1:f9:
09:9f:1f:47:94:20:c1:59:67:30:d5:6d:11:26:a2:
00:61:ac:e3:50:03:4f:8d:95:9b:27:1c:e0:e0:ec:
2b:c5:25:c4:8d:e2:2e:54:7f:fe:06:68:0b:6c:5f:
26:5c:24:9e:39:89:79:b6:60:eb:25:75:14:7b:de:
04:21:e8:62:d1:ef:41:d5:ab:3e:a9:2e:c5:40:9c:
28:7f:47:a9:2c:6d:85:e4:de:b1:0c:60:9b:6a:13:
4c:32:ed:12:02:f6:e6:18:7b:da:9d:5d:39:be:1c:
8a:0c:64:22:9f:ad:42:7f:4a:8a:cc:34:0c:7b:0a:
9d:af:9c:c6:7b:26:33:42:fb:3c:be:75:21:54:a2:
51:b2:a5:35:13:67:4a:93:84:03:4f:2c:f4:42:63:
1c:73:57:a5:b5:4d:6e:1a:03:9a:e2:a7:a5:a3:6b:
12:90:c1:14:53:99:59:1c:6f:8b:ed:29:d1:5d:3e:
a0:71:48:8a:ea:da:f2:43:89:5f:f4:13:67:9f:f3:
f8:65:dd:23:ee:48:95:c5:ab:05:7c:29:3a:3b:26:
74:51:c9:84:16:6b:c6:79:85:fe:e9:26:6a:19:f5:
e7:24:c1:49:1c:b8:09:b4:b5:b7:f9:6b:e0:f8:f3:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:55:CA:04:AD:CD:42:40:ED:3D:A9:BF:F8:5D:AE:CD:86:B4:26:CC
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1b:d1:77:f8:be:c8:a4:2c:fa:5e:c5:7b:e7:0b:c7:bf:cc:
20:14:58:6e:a9:81:6f:02:ee:1a:59:be:2d:75:23:cf:71:b8:
7d:52:d3:cb:14:6a:c3:90:83:03:c6:a8:f8:25:61:ec:86:29:
3e:a3:b9:f9:56:d0:58:0b:e3:af:ff:05:ab:fe:35:26:a5:56:
28:c2:c6:f7:ad:04:47:77:1b:4e:46:82:52:dc:16:89:1a:e4:
23:b0:82:da:8f:07:ee:69:ca:94:16:e5:70:3e:a1:a4:e5:8f:
45:ee:a2:da:be:29:05:f0:ea:2c:ff:cf:71:31:9e:42:a5:ec:
1b:a2:96:1e:32:fd:78:6a:65:e3:5c:7f:57:19:2a:df:f5:9f:
8f:fb:fa:3d:24:46:3f:6c:b9:13:5a:3b:4f:73:75:d6:b8:4b:
0a:43:16:6f:cb:80:ad:24:60:06:f4:95:39:be:dc:80:b1:42:
09:91:17:9d:1a:b2:18:57:94:94:c4:6a:f1:95:c4:65:0a:b8:
ca:de:d3:d6:76:54:2b:25:0b:9e:39:6d:43:d6:1e:0d:47:89:
96:46:08:8c:4f:b4:fa:7e:7b:2f:ad:b8:d5:a4:2f:db:39:d6:
3f:c4:68:d3:b1:26:4e:3f:29:69:75:f1:98:2d:29:55:bf:23:
d7:fb:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:20:29 2026 by rpki-client