Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: gZJ469dpyA2vrZK/TwZJoqh+uBvCQ/J83xmXcK6eO08=
Subject key identifier: 10:F9:BA:E7:A3:EC:1E:7A:9D:FF:DC:28:2E:6F:65:79:71:A1:94:09
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019F91DA95175A6F60B646842D2D9C6235A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 02:00:49 +0000
Manifest this update: Fri 24 Jul 2026 02:00:49 +0000
Manifest next update: Sat 25 Jul 2026 02:00:49 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: 3A2WGMes6dYKTTPyFRza0WNCd2GAiN5Gu55Y9ViH8Go=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:95:17:5a:6f:60:b6:46:84:2d:2d:9c:62:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Jul 24 02:00:49 2026 GMT
Not After : Jul 25 02:00:49 2026 GMT
Subject: CN=10f9bae7a3ec1e7a9dffdc282e6f657971a19409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:4d:d8:55:f9:cb:46:ed:fc:60:ba:50:5f:
4a:24:ea:9d:67:0d:f0:e5:7c:bf:6d:99:3b:76:0c:
c0:68:f4:ed:21:89:fd:6c:32:10:0a:a3:c3:fc:69:
ce:d1:ca:24:b3:cc:3f:1e:04:47:87:aa:6e:cd:0b:
31:1f:ce:87:9b:cc:f9:45:9f:2a:37:89:1b:2b:9a:
9e:46:64:85:ad:77:26:56:9b:dd:15:0b:c0:96:0c:
e4:41:d2:d8:a4:51:67:2a:96:da:b8:41:f8:a2:d0:
f7:c0:7e:32:77:8e:14:8a:ae:96:3a:3b:5c:f1:0d:
9c:e1:45:71:d2:a1:35:98:2c:7a:2e:ec:e7:c6:f2:
37:c3:ef:2b:6f:dc:a2:ca:80:dd:ff:85:73:03:33:
f6:7a:d9:c7:0d:36:f8:25:c8:71:de:a9:53:8d:8f:
79:16:08:ec:58:be:34:60:d5:cb:8b:92:24:07:96:
4e:05:7d:7d:23:3c:cb:9a:7d:5e:0b:58:95:9e:da:
5c:cd:43:63:b7:a0:e8:1f:e7:fb:9e:18:cb:d2:2c:
64:6c:7c:0c:e8:00:59:90:2b:71:63:2a:35:2a:d0:
ec:29:0b:66:31:f1:f6:62:8e:75:67:c2:3a:6b:ab:
79:b6:b1:99:01:6d:e1:a4:f0:b2:67:c4:04:38:cf:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:BA:E7:A3:EC:1E:7A:9D:FF:DC:28:2E:6F:65:79:71:A1:94:09
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8d:c3:4c:57:35:9a:d0:24:53:8d:a8:fe:06:a2:60:51:a5:
b7:f8:16:a6:38:87:f9:5f:c2:22:45:62:c6:73:49:d9:22:30:
5e:e0:ae:14:4e:49:4c:cf:b7:32:26:6d:32:53:82:26:da:0c:
b9:99:20:d8:3e:2e:08:30:95:38:6a:9b:31:cf:9b:1f:0d:48:
b8:1d:3e:a3:80:ae:5f:69:11:d2:09:32:00:9d:7d:21:8b:cd:
71:31:ec:f5:c2:b3:f9:b0:10:df:b4:23:c5:7b:e3:55:5c:35:
c3:1d:77:bd:3f:7e:cd:c1:45:53:07:60:d4:5b:4a:70:28:5b:
d1:db:05:cf:7a:7c:3f:a0:ca:74:8f:06:05:be:65:94:41:4e:
3b:45:17:1d:21:7f:a9:a5:7f:68:e1:4a:a6:20:aa:16:3a:c1:
e6:c0:88:07:a4:d0:e1:d7:da:52:97:53:3d:de:34:4b:28:4c:
b9:d7:6e:ba:ed:7f:87:4b:b9:85:89:a6:54:dc:40:a2:01:11:
6d:7a:b5:6f:70:5f:37:4c:6d:5b:c0:e8:4f:79:7c:9b:ed:d3:
7f:15:eb:7e:d3:7e:d9:94:65:16:d2:b6:1e:af:d8:e5:8f:a6:
4b:b1:74:9d:79:62:90:e2:d3:27:ed:19:2b:3b:6d:40:bb:b0:
60:2c:6e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2pUXWm9gtkaELS2cYjWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz
MWY1ZjEwHhcNMjYwNzI0MDIwMDQ5WhcNMjYwNzI1MDIwMDQ5WjAzMTEwLwYDVQQD
EygxMGY5YmFlN2EzZWMxZTdhOWRmZmRjMjgyZTZmNjU3OTcxYTE5NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aRN2FX5y0bt/GC6UF9KJOqdZw3w
5Xy/bZk7dgzAaPTtIYn9bDIQCqPD/GnO0coks8w/HgRHh6puzQsxH86Hm8z5RZ8q
N4kbK5qeRmSFrXcmVpvdFQvAlgzkQdLYpFFnKpbauEH4otD3wH4yd44Uiq6WOjtc
8Q2c4UVx0qE1mCx6LuznxvI3w+8rb9yiyoDd/4VzAzP2etnHDTb4Jchx3qlTjY95
FgjsWL40YNXLi5IkB5ZOBX19IzzLmn1eC1iVntpczUNjt6DoH+f7nhjL0ixkbHwM
6ABZkCtxYyo1KtDsKQtmMfH2Yo51Z8I6a6t5trGZAW3hpPCyZ8QEOM9GhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD5uuej7B56nf/cKC5vZXlxoZQJMB8GA1UdIwQY
MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt
Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3
LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT43DTFc1
mtAkU42o/gaiYFGlt/gWpjiH+V/CIkVixnNJ2SIwXuCuFE5JTM+3MiZtMlOCJtoM
uZkg2D4uCDCVOGqbMc+bHw1IuB0+o4CuX2kR0gkyAJ19IYvNcTHs9cKz+bAQ37Qj
xXvjVVw1wx13vT9+zcFFUwdg1FtKcChb0dsFz3p8P6DKdI8GBb5llEFOO0UXHSF/
qaV/aOFKpiCqFjrB5sCIB6TQ4dfaUpdTPd40SyhMudduuu1/h0u5hYmmVNxAogER
bXq1b3BfN0xtW8DoT3l8m+3TfxXrftN+2ZRlFtK2Hq/Y5Y+mS7F0nXlikOLTJ+0Z
KzttQLuwYCxuDA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:03 2026 by rpki-client