Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: mJrQO6dqAoTEzvsI3jRscLInzGEqSAbrXWUEy9fO55w=
Subject key identifier: AD:5F:94:E1:36:AD:37:61:17:F6:10:96:34:60:5C:20:E5:78:E1:58
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 01A1DDCBB7F551917F9C42D88E72BDF18362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 1487
Signing time: Sun 15 Nov 2026 06:01:17 +0000
Manifest this update: Sun 15 Nov 2026 06:01:17 +0000
Manifest next update: Mon 16 Nov 2026 06:01:17 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: M9kPuUYfGcHapQ/YM/tdgibjs3iVK2a/zRXC85V50is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:b7:f5:51:91:7f:9c:42:d8:8e:72:bd:f1:83:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Nov 15 06:01:17 2026 GMT
Not After : Nov 16 06:01:17 2026 GMT
Subject: CN=ad5f94e136ad376117f6109634605c20e578e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:1b:44:02:2a:be:5c:79:61:31:62:25:0e:
df:23:a3:fa:42:11:42:61:34:d0:bf:5e:93:44:62:
3f:38:5a:31:23:bb:a5:f4:cd:01:a9:a7:11:4e:99:
9e:49:07:3a:08:fb:ab:ed:ed:b9:a2:5f:c7:d6:4e:
6f:bc:a0:7e:04:a9:11:4b:56:83:c6:21:13:ab:b9:
ce:a1:97:2f:2c:86:9e:72:b6:cc:6a:8e:26:51:9d:
43:d8:ad:c3:bd:af:38:f3:ce:c6:b5:66:b0:55:0e:
95:6c:2f:13:55:fb:24:64:10:f7:d9:36:de:5f:f8:
84:ab:4e:d8:13:e3:f1:73:81:1a:15:c0:fd:6d:db:
1c:24:8a:74:17:a3:a2:bb:83:31:85:ea:2f:eb:1d:
f8:9a:ac:c4:7e:98:b4:5c:e4:f7:c3:53:0d:c9:6e:
92:7c:98:01:78:7a:ba:8f:12:1d:71:fe:a5:8b:1e:
35:62:dd:c1:a1:d7:68:a7:31:d2:55:c8:45:f4:1d:
6c:56:d0:6e:dd:a9:bd:32:f5:81:58:85:d7:19:9b:
e4:2c:32:29:f4:72:03:f6:0b:a4:e3:ad:c2:dc:64:
b5:4c:a1:44:1d:bf:ea:2d:e1:ac:02:67:75:97:c9:
71:96:84:fc:2d:63:83:50:72:61:4e:bd:31:d2:52:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:94:E1:36:AD:37:61:17:F6:10:96:34:60:5C:20:E5:78:E1:58
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b5:7d:6f:01:e9:00:ac:0f:32:6a:cf:c2:bc:dd:14:6c:d9:
b9:1e:55:ec:b7:5d:4f:5e:ca:5b:35:62:c1:32:2e:66:4e:ab:
03:db:c9:2c:ae:4a:6c:88:71:3f:f9:73:07:14:0b:80:d5:fa:
eb:11:38:2e:4f:b3:67:a6:37:28:67:08:fe:95:98:0f:21:0e:
c4:27:2b:66:75:f0:aa:5c:61:91:93:b7:bb:a3:75:1a:e0:0d:
71:64:5e:58:aa:9f:58:0c:0c:cc:22:77:08:dc:7f:08:b9:a7:
3c:bb:8c:13:44:73:7b:a0:f6:d5:ab:c5:e4:6e:1f:00:f4:18:
92:ff:9d:cc:ed:d1:dc:9d:b3:3d:a3:37:17:6c:af:c6:0a:1b:
33:ee:0c:b8:02:3d:9b:77:5b:e5:4d:9b:3d:2c:15:95:93:5d:
c7:f4:d6:01:a1:90:da:97:68:74:f7:ae:b3:9b:9a:ce:ae:e5:
bf:4f:fa:b6:67:9c:cc:64:e4:72:09:fc:dc:a5:4f:6e:4b:64:
2a:b7:29:27:ad:5d:6c:b6:6d:11:6d:31:ec:cc:3e:c3:cc:1a:
08:82:30:61:e4:c1:b4:c3:d8:66:de:af:cd:f4:a0:15:df:64:
46:71:e3:c7:ec:ea:37:e3:67:8b:f6:ce:84:03:b7:06:44:d4:
e7:6e:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:59:12 2026 by rpki-client