Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier: hQDCPUEyYBO3NSukK17hBwKWiTl6jVMjhECKnFP4pEc=
Subject key identifier: AF:5E:9A:4E:89:65:16:21:45:EA:A8:92:8C:9D:0F:FC:63:54:47:D0
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial: 019D29613679A614DCC9DEA3A74F19273155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:02:09 +0000
Manifest this update: Thu 26 Mar 2026 09:02:09 +0000
Manifest next update: Fri 27 Mar 2026 09:02:09 +0000
Files and hashes: 1: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: PtNcDqqKO33d4w0i2OI1joLzDBZDx5SUsyuD94ryqYM=)
2: m64MgsXTuVAo-KXrz-HC9VS3YL4.roa (hash: aAemQZEctQRghlYaCM8BeUg6WijqhJ1QuHQjJjaDAco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:36:79:a6:14:dc:c9:de:a3:a7:4f:19:27:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Validity
Not Before: Mar 26 09:02:09 2026 GMT
Not After : Mar 27 09:02:09 2026 GMT
Subject: CN=af5e9a4e8965162145eaa8928c9d0ffc635447d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:2d:4e:89:a5:60:c0:39:67:91:c7:96:f8:
66:65:59:d7:80:e6:3b:86:c6:b1:f9:95:53:b6:9d:
2f:3f:65:53:00:2b:55:5f:1b:c6:2c:f9:e6:84:f3:
97:b2:0d:48:55:5a:86:8a:23:9e:21:bc:91:e4:90:
67:8b:c8:ab:6f:ee:c2:1c:0d:ad:a0:cc:56:0c:e5:
2b:8a:ea:99:09:30:9d:5a:56:b4:aa:be:1b:f7:fb:
63:ae:d5:b8:aa:e3:3b:81:1e:a4:ca:34:e3:91:6e:
1c:15:9e:ab:2e:f9:cc:01:bd:2f:3c:88:57:a4:46:
bb:21:be:c6:ed:e8:bf:d8:5e:07:9f:79:eb:9a:b0:
6f:78:05:0c:45:cc:33:fe:c0:3d:9a:bb:6c:e0:00:
23:96:9b:44:f0:9b:5e:29:f0:13:c3:01:f3:82:57:
6c:a8:88:79:05:62:89:30:a7:b8:d3:f6:b3:80:e6:
cc:55:78:99:8a:9e:38:dc:65:d1:2f:34:eb:0c:12:
6a:d8:a6:32:a4:ed:e9:7d:40:bd:03:7c:05:b6:cc:
44:83:46:33:21:f5:60:91:92:7e:45:6b:01:39:32:
bb:d5:be:60:f5:55:04:da:c8:82:25:44:9f:e8:d1:
57:3e:04:4e:39:0b:49:eb:6d:c2:34:7f:f2:52:3b:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:9A:4E:89:65:16:21:45:EA:A8:92:8C:9D:0F:FC:63:54:47:D0
X509v3 Authority Key Identifier:
keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5e:5e:50:7c:af:35:03:1b:b9:dc:5d:4f:65:3a:13:b8:bb:
8e:28:07:fb:68:a5:f5:31:0b:b5:ef:df:3d:2d:f7:17:e0:fc:
e1:48:91:c6:e4:e5:49:69:cd:2d:98:6e:83:40:82:da:f2:13:
10:66:88:be:d6:ef:2b:e4:bc:4b:bd:f7:bb:fd:74:3f:2d:2a:
bd:27:26:9b:e0:59:53:a5:53:16:6d:f1:40:b8:1f:e0:65:ae:
52:f7:fd:fe:12:7a:99:1f:55:c5:33:20:ff:5e:aa:38:91:8a:
21:f2:18:8b:98:02:ee:74:df:7b:59:5b:b7:9d:e4:0f:3d:be:
67:29:99:89:ae:97:75:41:00:7f:56:f9:3c:47:05:d1:37:74:
66:60:b1:aa:5b:3a:70:43:f5:0f:02:ad:9b:52:88:74:7d:3a:
20:56:9d:27:81:a5:d2:03:eb:e5:c0:14:fc:d2:dc:9b:87:53:
91:e7:3c:7a:41:0f:2f:df:0c:cb:c8:1f:1f:2d:43:40:73:92:
74:72:d2:f0:93:ff:4e:1e:0e:9d:a9:13:db:4b:fe:a2:d4:73:
72:0d:57:8e:bc:81:ef:d7:8e:78:a7:3b:79:79:7b:b2:43:8d:
98:93:23:1a:97:03:cf:44:e7:48:a0:0f:47:1c:5e:3d:eb:83:
99:fc:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:00 2026 by rpki-client