Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: 9eCLQh2OuiV5zNjf4N6x2xrjZmlZvGDt1hftVC1JycU=
Subject key identifier: D4:3E:BD:54:AB:D1:17:27:41:96:FE:51:1A:56:A9:6D:3F:79:20:8C
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 019E1FB57DF3835991DBD68B4A2EF16430BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 05:00:48 +0000
Manifest this update: Wed 13 May 2026 05:00:48 +0000
Manifest next update: Thu 14 May 2026 05:00:48 +0000
Files and hashes: 1: 2VrXKMaV4hFStFOxu_UQS5okGCc.roa (hash: ysQxFYSk2THDKp3xdvckm0rpXg2xlVHGITzLw9rPwIQ=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: oiq8ZNTcdF20tFS3X7M5xkeXcevgIUG1jYORbnSd2c0=)
3: Stpleb6OTPqMfH86_X0X4TcY0xw.roa (hash: vOMEgiat3XRiljAMfWkhr6z+Hs+WLCtckYdZXT9W3aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:7d:f3:83:59:91:db:d6:8b:4a:2e:f1:64:30:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: May 13 05:00:48 2026 GMT
Not After : May 14 05:00:48 2026 GMT
Subject: CN=d43ebd54abd117274196fe511a56a96d3f79208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:64:bb:64:e8:6c:ca:a9:9d:a8:d2:7b:d1:
60:ea:a9:2a:e7:5a:7d:2b:43:6b:e2:86:27:68:8d:
d0:95:e3:cd:06:6b:c4:ec:b1:f9:1f:80:73:13:4f:
51:18:23:84:83:14:cf:81:41:2d:dd:b6:ca:fd:83:
d4:27:62:14:2b:c8:67:2d:df:bb:79:ed:4b:c6:36:
55:39:35:8e:d9:df:9a:c6:2a:29:12:94:02:d7:c0:
b9:8a:60:f8:2c:5b:81:10:c2:1d:7d:a5:ba:ec:dc:
78:16:51:79:a9:fe:0c:74:45:89:dd:8e:c4:c0:83:
e6:b6:39:30:95:b6:53:46:de:0a:2d:51:a3:84:59:
27:35:95:5f:13:62:e9:79:92:bb:26:05:23:00:b9:
b7:fb:d7:b5:c8:c0:2b:d5:be:d1:08:2c:a0:89:c8:
d6:65:95:98:5c:88:46:ae:b3:d1:f0:5d:c2:ab:12:
71:91:34:dd:4e:68:e9:07:fc:e8:d5:6b:d8:ea:e8:
30:10:c4:8c:94:08:87:1c:3e:6c:d8:ee:cc:6a:5d:
f0:e0:50:45:9a:46:23:32:ef:b4:11:ef:46:72:22:
92:58:4f:e9:0a:d4:b1:ce:b5:19:f6:76:f0:62:0a:
e5:55:0d:e0:42:29:75:f4:cf:96:97:78:12:31:f7:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:BD:54:AB:D1:17:27:41:96:FE:51:1A:56:A9:6D:3F:79:20:8C
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c2:f6:bb:ae:e4:b5:c1:6c:b3:2d:d1:84:26:42:f0:10:5c:
54:a1:7b:c3:2f:11:5c:32:a8:af:cf:f3:57:93:d6:73:01:1e:
9a:51:89:71:dc:5e:c5:90:5e:40:b4:06:d5:64:83:c1:5b:c4:
12:8b:a3:31:59:3b:fc:18:cc:c7:a9:de:a9:fb:09:ce:f8:14:
17:d0:27:b7:cb:9c:f9:8d:10:4a:cd:be:e3:8b:06:de:1d:c7:
e8:ec:f2:85:60:99:7e:c3:08:e8:0c:d5:63:bd:d1:7f:ab:ef:
b0:22:90:a1:71:cd:9f:b6:dc:0e:00:59:9c:33:7c:7c:e6:75:
d2:b2:cd:21:2c:27:24:67:ee:8d:19:6e:27:1e:d2:5f:15:10:
f5:f6:19:49:fd:77:50:6c:2a:94:24:10:0e:2a:c7:42:62:87:
94:85:89:83:34:54:31:75:0f:bb:59:65:1f:ad:f9:5f:75:ee:
18:ed:80:9c:e0:fa:6a:ce:7b:30:cc:ea:2d:9e:81:b3:62:67:
29:92:ef:8d:be:3d:9f:da:2d:99:a9:ae:4d:06:a1:ff:d7:29:
75:ff:a7:60:2c:0d:16:2b:2b:18:72:be:c1:dd:1c:b4:52:bb:
10:f4:76:03:b9:99:3c:21:3a:63:b2:b3:2d:33:2a:bb:fc:4c:
e1:8b:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:24:45 2026 by rpki-client