Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: g5W+ff+Zb3irD63BMoaIVx1YNULYNsuBkydHP1V23pE=
Subject key identifier: 32:FB:2C:A4:11:D7:A9:0E:43:BF:88:B8:A9:A1:AA:DD:F8:13:B9:F1
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019E20FF8AB7E30A9A9E4199BD5250F5E85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 11:01:18 +0000
Manifest this update: Wed 13 May 2026 11:01:18 +0000
Manifest next update: Thu 14 May 2026 11:01:18 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: zfAcyZr6gXFCxAxB1UlgRWDyPUbVoEMpVO8FrnjmcOA=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:8a:b7:e3:0a:9a:9e:41:99:bd:52:50:f5:e8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: May 13 11:01:18 2026 GMT
Not After : May 14 11:01:18 2026 GMT
Subject: CN=32fb2ca411d7a90e43bf88b8a9a1aaddf813b9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:fc:29:d0:5b:0e:dd:72:6a:55:5e:83:cc:
77:70:2e:87:45:e5:cd:f6:b7:c7:c2:cc:e1:92:99:
5e:5b:d8:19:93:ea:8e:ef:a7:e7:5c:1b:d2:49:37:
21:92:ef:77:21:73:c6:a0:17:3d:c7:d0:df:b8:da:
c5:c4:b3:7d:4b:68:79:80:c8:33:b2:e7:f5:eb:df:
4a:45:04:9c:e3:ec:d6:e5:1f:12:5b:d3:69:cb:da:
ca:b4:e5:06:5f:af:6b:8a:5c:d2:b0:2b:ff:87:2b:
33:53:3f:81:17:dd:8f:31:bc:19:c7:31:c7:ba:48:
0d:81:c4:aa:ef:bb:9c:ad:e8:bb:a3:0e:c7:26:20:
80:58:58:35:50:01:8b:07:59:19:53:48:ce:2d:00:
4c:df:eb:e8:2c:73:9b:be:ab:95:06:ff:dd:9e:d1:
f9:d9:34:b4:59:73:ed:2c:35:ee:17:45:cc:4e:88:
87:2f:33:9d:fe:cb:6e:ee:3f:c3:2d:61:fe:31:0a:
24:a8:d7:59:40:a5:33:c1:d6:bc:9e:48:c9:fe:26:
77:ab:43:7c:db:28:ff:44:fe:1f:1f:54:74:36:81:
02:4a:5b:a2:b3:ab:fe:a0:14:db:19:08:2c:dc:ed:
98:bd:e3:01:df:d1:9e:2b:a3:76:cd:de:9f:4c:68:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FB:2C:A4:11:D7:A9:0E:43:BF:88:B8:A9:A1:AA:DD:F8:13:B9:F1
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:25:44:2e:8d:80:45:d1:c9:22:09:5d:2f:91:82:7e:60:ae:
fc:36:99:17:01:1c:af:b6:48:3a:f4:e6:55:90:1a:a5:c9:0c:
1d:d3:a4:ce:41:67:3a:e7:78:a9:5c:e2:a0:5a:15:84:81:c9:
5e:f5:e7:44:8f:ef:83:3b:74:c4:34:63:16:2f:68:e6:1f:8b:
2a:6b:cf:e8:da:82:77:c2:19:fe:6c:34:30:97:62:39:c6:64:
c1:bf:bf:76:fc:cb:89:29:69:73:d2:99:61:65:08:31:5d:49:
55:a9:4c:10:4f:1b:45:f7:44:71:d0:62:cb:4e:47:6e:00:d5:
5e:c2:f1:06:e8:5d:32:b5:35:f9:35:13:b6:15:46:7e:6e:82:
9b:36:b6:28:0d:09:36:5a:2a:a4:df:7b:e4:33:6e:1b:c7:da:
62:dc:b9:a8:e6:b1:57:ad:7f:6b:86:92:0b:cb:15:ec:cb:10:
4e:2d:2d:67:82:19:f7:5a:af:a1:03:aa:a0:6a:7c:3c:ab:98:
0d:29:18:2a:4c:1d:31:05:46:a6:8c:1f:a6:4c:49:fd:15:6b:
c6:5f:d9:61:c0:70:92:33:fe:5d:41:bb:33:af:8c:97:b2:f7:
47:42:a4:be:24:fc:fe:fc:38:96:93:50:7c:51:4e:e6:5f:1f:
f4:92:14:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/4q34wqankGZvVJQ9ehfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz
MWY1ZjEwHhcNMjYwNTEzMTEwMTE4WhcNMjYwNTE0MTEwMTE4WjAzMTEwLwYDVQQD
EygzMmZiMmNhNDExZDdhOTBlNDNiZjg4YjhhOWExYWFkZGY4MTNiOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLv8KdBbDt1yalVeg8x3cC6HReXN
9rfHwszhkpleW9gZk+qO76fnXBvSSTchku93IXPGoBc9x9DfuNrFxLN9S2h5gMgz
suf1699KRQSc4+zW5R8SW9Npy9rKtOUGX69rilzSsCv/hyszUz+BF92PMbwZxzHH
ukgNgcSq77ucrei7ow7HJiCAWFg1UAGLB1kZU0jOLQBM3+voLHObvquVBv/dntH5
2TS0WXPtLDXuF0XMToiHLzOd/stu7j/DLWH+MQokqNdZQKUzwda8nkjJ/iZ3q0N8
2yj/RP4fH1R0NoECSluis6v+oBTbGQgs3O2YveMB39GeK6N2zd6fTGjj4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDL7LKQR16kOQ7+IuKmhqt34E7nxMB8GA1UdIwQY
MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt
Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3
LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCVELo2A
RdHJIgldL5GCfmCu/DaZFwEcr7ZIOvTmVZAapckMHdOkzkFnOud4qVzioFoVhIHJ
XvXnRI/vgzt0xDRjFi9o5h+LKmvP6NqCd8IZ/mw0MJdiOcZkwb+/dvzLiSlpc9KZ
YWUIMV1JValMEE8bRfdEcdBiy05HbgDVXsLxBuhdMrU1+TUTthVGfm6Cmza2KA0J
NloqpN975DNuG8faYty5qOaxV61/a4aSC8sV7MsQTi0tZ4IZ91qvoQOqoGp8PKuY
DSkYKkwdMQVGpowfpkxJ/RVrxl/ZYcBwkjP+XUG7M6+Ml7L3R0KkviT8/vw4lpNQ
fFFO5l8f9JIUnw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:42 2026 by rpki-client