Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: +yEmh7PWbe8CTwunebuRozQSALFvIkCqxKh8D5i7tVE=
Subject key identifier: B1:00:08:82:C2:28:D7:07:DA:E8:0F:8A:A4:78:08:17:B1:82:6A:66
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 01A1103B25F1618AC9E686C0875C26FFB327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 08:01:13 +0000
Manifest this update: Tue 06 Oct 2026 08:01:13 +0000
Manifest next update: Wed 07 Oct 2026 08:01:13 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: A1lY+K2DQrRwxwlAwOdodFgQtMUehD7I6RsH5kVS2ns=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3b:25:f1:61:8a:c9:e6:86:c0:87:5c:26:ff:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Oct 6 08:01:13 2026 GMT
Not After : Oct 7 08:01:13 2026 GMT
Subject: CN=b1000882c228d707dae80f8aa4780817b1826a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:a0:55:18:bf:00:ba:fd:04:90:62:85:4f:
4b:26:03:11:1b:d9:0e:cb:aa:ad:2f:6b:b9:82:75:
bc:d6:bc:ac:01:20:0f:4b:81:24:2a:92:2d:33:ef:
bd:97:08:4f:b8:fb:57:83:10:10:94:d7:30:50:53:
1d:55:9b:d0:9e:36:a0:c7:06:0f:b2:39:28:c5:ab:
a0:7a:cc:b6:7a:b6:0c:82:72:31:cf:38:67:20:c9:
b8:1d:58:dd:95:b4:e5:ec:1d:6a:d5:33:68:80:84:
97:5a:f4:a0:a5:54:d5:1f:06:58:3e:28:57:27:50:
d1:f9:7d:64:93:85:23:1e:b5:7c:70:9e:55:57:99:
e3:39:79:7f:fb:86:6d:89:dc:7a:ad:99:50:e7:0f:
c0:6c:c4:da:71:fc:a8:a5:0a:03:47:03:20:28:50:
58:5b:93:d0:99:b7:5c:c4:23:c0:ee:64:04:6d:b3:
7c:e6:1f:eb:73:36:01:68:1b:50:92:03:85:1e:13:
87:83:f4:66:23:f5:6c:8f:90:2e:b6:d9:41:c7:be:
56:a5:13:8a:28:4d:b2:29:4b:23:23:8d:73:28:62:
84:25:e9:f5:cd:41:af:c3:42:3c:52:17:dd:dc:cf:
78:18:b2:6d:57:80:e3:da:fb:d8:69:3f:a9:7b:60:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:00:08:82:C2:28:D7:07:DA:E8:0F:8A:A4:78:08:17:B1:82:6A:66
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:30:96:9b:65:fa:c0:cf:6f:d3:55:20:a3:dd:bd:68:19:f7:
01:b9:3e:60:8b:6a:46:9e:37:5e:82:57:4e:bd:9c:5f:59:1b:
0f:06:42:99:30:4c:f6:92:a5:73:ae:9b:dd:a7:0a:09:c0:de:
98:af:f2:0b:9d:fc:e2:23:5d:19:aa:0a:9d:ff:c3:f8:c0:8a:
f2:bf:14:c9:7f:0d:93:3d:ec:0c:e3:30:70:1f:55:ca:5e:fa:
a7:94:ec:ff:42:42:44:39:d4:6d:f9:19:9d:f4:ee:d4:14:65:
31:d5:05:a2:c3:e7:82:ab:fa:f0:28:80:70:8d:05:65:80:75:
37:96:ae:47:d8:c9:89:f3:ef:1c:1e:09:fe:be:6f:8d:67:56:
5f:91:5d:d7:58:d4:ff:f8:2f:a3:a8:ff:87:e2:e7:6c:3a:a5:
f1:f7:b8:4b:a9:a4:e8:18:a2:eb:bb:a7:e5:ef:24:a9:9e:66:
ec:f1:11:da:5e:b2:87:f8:c3:0f:a6:08:87:29:69:59:2e:d2:
22:54:7c:1d:2c:6b:a6:2e:5a:6a:f7:ee:46:01:e2:f1:55:d1:
f7:e8:13:44:cd:04:b3:8d:45:f2:50:f8:26:3d:a5:6f:a7:21:
6d:bf:39:9e:14:54:b7:18:29:96:da:ae:f9:3f:2e:e4:a6:be:
83:94:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:20:08 2026 by rpki-client