Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: /QV1PB8AkcGunK2VYx3SsY93b5n/6G2yz7qYWYIMgoQ=
Subject key identifier: B4:2D:66:5E:BA:1E:90:E0:87:65:92:82:E3:86:2B:C4:4E:C0:E7:C7
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 01A10E4C51E27E9648BC446400C0901182DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1A8D
Signing time: Mon 05 Oct 2026 23:00:44 +0000
Manifest this update: Mon 05 Oct 2026 23:00:44 +0000
Manifest next update: Tue 06 Oct 2026 23:00:44 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: Mtv2xce/BJDEpSgD8bp06sATHDlomIonUEsH0i5MuY4=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:51:e2:7e:96:48:bc:44:64:00:c0:90:11:82:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Oct 5 23:00:44 2026 GMT
Not After : Oct 6 23:00:44 2026 GMT
Subject: CN=b42d665eba1e90e087659282e3862bc44ec0e7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:ec:0c:c7:51:78:60:a7:4a:e9:fb:cd:b0:
9b:98:08:df:1a:f0:72:52:48:83:56:9d:5c:f2:3c:
92:c5:bf:5a:ef:0e:1d:2b:5b:bb:c2:73:30:68:b3:
c3:3f:4a:c7:fb:bd:4a:07:a5:4a:8a:2d:ad:fd:41:
86:d2:64:6f:c1:9b:2b:69:bd:54:1f:cf:f9:5b:07:
e4:fd:6f:bf:de:77:1c:c9:af:2c:6b:d5:f1:bf:81:
72:cb:83:a8:36:17:e5:ae:72:38:56:18:3f:35:4c:
4a:cd:03:bf:10:ca:4c:e7:d3:14:7d:be:2f:db:29:
a7:ff:d8:eb:a3:0f:16:ec:a7:8f:aa:2b:81:16:6b:
17:34:32:4f:92:d4:ac:a9:22:b5:e4:14:56:36:3a:
e5:08:cc:3e:82:3f:6d:d8:d5:ca:5a:6c:1a:3c:46:
e4:70:91:43:06:f3:a3:5b:47:fc:8a:2f:63:7f:a2:
dd:5d:c5:22:b5:0e:44:5b:63:5a:be:d1:d9:46:b8:
4c:fa:3d:12:88:1c:13:f9:17:39:17:a3:36:cc:10:
4d:4c:f2:44:e2:65:37:35:7c:39:b9:0d:0a:ea:a2:
a8:ee:e3:06:9b:c9:d1:c6:70:a7:e7:6c:fa:fd:50:
c3:4a:a9:1e:fa:19:f8:b8:79:34:8d:f1:15:27:5a:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:66:5E:BA:1E:90:E0:87:65:92:82:E3:86:2B:C4:4E:C0:E7:C7
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:65:92:44:36:13:59:15:41:5f:e2:fd:7d:03:de:c4:f4:
a8:60:bd:9e:37:eb:17:1c:e2:6d:50:40:33:e1:18:87:ba:a1:
29:9c:b8:ef:2b:a4:37:77:d9:3c:09:cf:05:95:f8:19:e4:6c:
30:21:6b:b0:19:3d:c9:d8:bd:9f:a8:f8:0d:82:09:85:18:f5:
8c:42:dd:c5:33:43:37:7e:93:56:72:dd:e2:c7:45:af:61:be:
ba:9c:25:8e:d5:af:28:be:13:40:b1:e2:23:7a:3f:b5:cb:9f:
17:b5:1d:c0:3c:c4:33:13:03:49:fc:d0:c0:f0:52:21:d1:5f:
a5:b2:bf:16:60:0b:f1:45:60:15:97:cd:70:e1:3f:9c:9f:49:
af:34:26:db:cb:0b:83:82:d9:5f:00:22:2b:c2:9d:5c:13:c4:
e6:e2:76:42:98:f4:27:1f:67:85:69:79:55:28:51:cc:cc:1b:
a3:92:c9:f7:9a:17:93:d9:f8:15:4d:76:12:41:52:33:59:54:
2a:fd:39:38:eb:8d:9e:d5:ea:aa:d3:57:c7:5f:cb:01:78:14:
97:98:14:19:61:4d:41:7c:aa:84:c9:a4:eb:6b:ff:b5:4f:fe:
6d:6d:49:77:24:66:37:02:5f:28:18:e4:5c:2f:0d:a9:35:5f:
d2:21:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:16:42 2026 by rpki-client