Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: aZIAdqZTJb7br9CalEMS3sSZiiPxIQUsFdSCS2dDUjo=
Subject key identifier: F1:89:40:B9:58:69:7E:E2:0F:03:9D:66:B1:11:C6:6B:AF:AD:A2:1D
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 019D2884BCD4145A9155F869C9B7A095BE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: 2VrXKMaV4hFStFOxu_UQS5okGCc.roa (hash: ysQxFYSk2THDKp3xdvckm0rpXg2xlVHGITzLw9rPwIQ=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: 4bVahniHBB/EzfWItdaZXhB1AhqQhcXAQ6EL46SMQVY=)
3: Stpleb6OTPqMfH86_X0X4TcY0xw.roa (hash: vOMEgiat3XRiljAMfWkhr6z+Hs+WLCtckYdZXT9W3aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:bc:d4:14:5a:91:55:f8:69:c9:b7:a0:95:be:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=f18940b958697ee20f039d66b111c66bafada21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:61:b2:91:06:95:86:9c:3e:01:7f:58:fc:
3b:88:20:50:4c:8f:65:92:e2:fe:d1:b5:2e:1f:db:
1a:24:8b:06:b6:31:a0:e8:29:b7:fe:80:cd:dc:2e:
9b:c5:e6:31:a2:e0:8e:4b:54:30:08:17:16:5b:60:
7d:43:73:81:b7:ce:46:be:c4:80:5c:8e:3c:fc:0d:
f3:29:c9:81:52:56:21:4b:e6:9d:b4:26:56:be:ff:
39:ac:53:1d:d3:4f:92:96:0d:6a:f2:5c:69:3f:bb:
0d:66:10:18:f1:a3:25:cf:87:ee:35:33:98:b7:c2:
ad:f7:a9:fc:8e:a9:1b:1c:e7:29:53:85:bb:84:70:
04:11:f5:91:ac:fe:03:f2:7e:30:19:e8:24:90:b6:
07:79:e6:c0:de:4b:49:dd:f5:4d:07:86:95:42:15:
9c:9e:77:ba:4a:d5:11:94:52:fe:51:e8:6b:f1:fb:
2f:ca:ff:e8:6e:51:84:9c:20:71:62:1f:74:f4:c4:
71:ac:24:49:4f:b9:b1:5a:1e:9d:8f:cb:f8:10:3c:
4d:39:5a:2d:37:99:30:91:11:9a:57:25:dc:bd:da:
00:3b:6d:fa:62:85:86:b5:98:fb:39:ad:f2:b4:5d:
ce:9f:0b:25:3c:42:40:c9:a0:15:f3:eb:86:7a:00:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:89:40:B9:58:69:7E:E2:0F:03:9D:66:B1:11:C6:6B:AF:AD:A2:1D
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:aa:ca:d6:b4:74:f4:f0:c2:11:43:36:82:9c:32:71:70:9d:
cd:2f:ca:32:d8:f3:34:2b:ea:f1:54:46:b3:b0:e1:55:a5:8f:
56:81:29:54:e0:d2:51:e7:15:12:56:dc:ba:e2:a9:1f:59:4a:
68:95:4c:60:d5:1b:16:2c:1e:30:f5:b2:8c:ac:da:b8:7f:a7:
2b:b3:8a:39:9e:92:7f:5f:b4:17:32:b7:7a:2f:c0:0f:31:35:
8a:88:44:81:3a:cc:55:a5:d4:4f:b4:71:35:78:d2:9d:55:dd:
15:c6:86:4e:9f:c3:71:ce:2c:7c:b8:f0:cf:9b:c7:1c:8d:0a:
55:a8:75:be:3f:f8:83:61:1b:26:b4:29:b3:a3:c1:fd:ee:b0:
da:7d:eb:f0:ea:20:1a:4b:ea:77:28:4f:3b:b9:c8:19:67:42:
19:51:f9:b7:35:ea:66:2f:91:9d:ac:af:7d:a7:28:62:6f:d2:
0b:80:2a:1f:85:b0:11:b1:63:92:6e:fe:26:6c:b0:68:18:79:
f3:ab:0a:5a:8d:37:40:76:2f:46:36:fb:c2:9f:3c:34:db:19:
9c:a5:e8:64:f2:d3:a1:a0:75:a9:3f:70:08:3e:f9:24:71:18:
35:69:c9:6d:be:a0:cf:0e:00:b0:d4:91:43:60:68:31:86:1a:
69:00:cd:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohLzUFFqRVfhpybeglb6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzVmMTg1ODIzZGJjNmE4MmQxMDViM2NhMTYwNzdkYjU3
MjkzNzcwHhcNMjYwMzI2MDUwMTIwWhcNMjYwMzI3MDUwMTIwWjAzMTEwLwYDVQQD
EyhmMTg5NDBiOTU4Njk3ZWUyMGYwMzlkNjZiMTExYzY2YmFmYWRhMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ5hspEGlYacPgF/WPw7iCBQTI9l
kuL+0bUuH9saJIsGtjGg6Cm3/oDN3C6bxeYxouCOS1QwCBcWW2B9Q3OBt85GvsSA
XI48/A3zKcmBUlYhS+adtCZWvv85rFMd00+Slg1q8lxpP7sNZhAY8aMlz4fuNTOY
t8Kt96n8jqkbHOcpU4W7hHAEEfWRrP4D8n4wGegkkLYHeebA3ktJ3fVNB4aVQhWc
nne6StURlFL+Uehr8fsvyv/oblGEnCBxYh909MRxrCRJT7mxWh6dj8v4EDxNOVot
N5kwkRGaVyXcvdoAO236YoWGtZj7Oa3ytF3OnwslPEJAyaAV8+uGegBPcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGJQLlYaX7iDwOdZrERxmuvraIdMB8GA1UdIwQY
MBaAFCh18YWCPbxqgtEFs8oWB321cpN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDct
OTRlNWQ0OWNjNjI4LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDctOTRlNWQ0OWNjNjI4
LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6rK1rR0
9PDCEUM2gpwycXCdzS/KMtjzNCvq8VRGs7DhVaWPVoEpVODSUecVElbcuuKpH1lK
aJVMYNUbFiweMPWyjKzauH+nK7OKOZ6Sf1+0FzK3ei/ADzE1iohEgTrMVaXUT7Rx
NXjSnVXdFcaGTp/Dcc4sfLjwz5vHHI0KVah1vj/4g2EbJrQps6PB/e6w2n3r8Oog
GkvqdyhPO7nIGWdCGVH5tzXqZi+RnayvfacoYm/SC4AqH4WwEbFjkm7+JmywaBh5
86sKWo03QHYvRjb7wp88NNsZnKXoZPLToaB1qT9wCD75JHEYNWnJbb6gzw4AsNSR
Q2BoMYYaaQDN1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:52 2026 by rpki-client