Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: yR4xsQhUNTZNc50vfuc6BN+Dg+7jRMIfiTFTJRNw95Y=
Subject key identifier: 07:1F:29:1B:68:AB:F0:AA:20:44:8E:55:77:74:56:5A:2D:6F:F9:B2
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 01A175B915DE44D724353C353DA56ADE1922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 150E
Signing time: Mon 26 Oct 2026 01:00:26 +0000
Manifest this update: Mon 26 Oct 2026 01:00:26 +0000
Manifest next update: Tue 27 Oct 2026 01:00:26 +0000
Files and hashes: 1: 8RIumqkeV3tlefbMbbhwKUXmPoE.roa (hash: Hcw16et0hw/lbpdl7sOTOgYfd3jsskMwBHynxWpg+2M=)
2: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: bJPY4/5zF84TVnJ0QumpTHvRGX+D8YbDjmy1ROEvDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:15:de:44:d7:24:35:3c:35:3d:a5:6a:de:19:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Oct 26 01:00:26 2026 GMT
Not After : Oct 27 01:00:26 2026 GMT
Subject: CN=071f291b68abf0aa20448e557774565a2d6ff9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:7a:ca:bc:a9:af:6d:01:34:ec:7d:99:c0:
17:3e:f4:be:3a:13:a4:b9:45:f4:f3:eb:09:61:df:
b4:55:ca:0a:f6:6a:87:f5:43:c7:af:ae:7d:9c:e1:
0b:eb:31:6e:0d:a3:72:46:aa:e1:90:9d:c0:d4:df:
ee:95:7d:1c:9c:5d:58:a0:f9:bf:8c:04:e6:17:ab:
be:12:7f:af:9e:19:1e:bd:1f:46:35:b8:0a:98:93:
5c:d2:46:8a:e5:68:46:20:15:a3:d3:46:57:f0:46:
e3:f8:e0:45:22:35:56:50:c2:88:4c:49:1b:b9:75:
58:81:f1:da:96:a6:78:15:3a:78:78:e2:6e:a8:29:
e1:65:7a:e4:00:af:e1:25:c4:9c:e6:2b:5f:87:90:
d8:9e:06:8c:4c:21:cf:78:30:c4:e5:7d:29:71:32:
37:93:c1:88:69:91:bf:ed:65:56:e3:d1:ec:80:0e:
4e:94:e1:6b:aa:7c:df:0e:ba:18:c3:51:12:ff:c4:
8a:e9:57:ff:5c:41:16:51:2f:11:e2:a5:a4:df:19:
24:c7:ba:01:1d:f9:3a:f9:80:0e:6b:40:58:24:1c:
f4:b6:c4:a4:03:23:bd:c4:8f:8d:e3:05:4e:b8:f6:
e7:b6:74:85:03:ba:0b:92:40:b5:66:58:71:ae:2d:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:29:1B:68:AB:F0:AA:20:44:8E:55:77:74:56:5A:2D:6F:F9:B2
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ba:2f:f5:05:fb:ba:db:49:6d:6f:f0:b3:8f:bf:cd:38:50:
d0:73:1e:a4:6b:4e:07:99:14:89:dc:6d:59:ab:b9:72:f7:3b:
d4:bc:26:95:43:cb:4a:a0:9e:ef:6d:21:07:72:f0:aa:4b:01:
82:c3:f1:f3:95:c2:39:91:f5:2c:96:d5:26:08:11:45:cd:2d:
2f:a4:de:4c:42:e6:fa:84:62:cb:3c:b2:c3:49:cc:ec:c8:35:
bd:b8:af:b5:a3:46:41:97:4d:80:ed:08:63:5f:87:81:34:38:
b6:c1:17:9e:f9:84:7a:5d:eb:5e:cb:c9:06:69:ff:88:4d:9a:
87:e4:42:39:98:e3:ee:b9:e7:42:7a:e4:b0:4d:1e:17:20:b5:
31:76:d3:80:73:fc:2a:c1:ff:1d:44:29:55:59:bb:0d:3a:52:
24:4f:49:d4:a8:90:52:a7:6a:99:58:2f:b6:60:b6:38:33:52:
e1:8a:19:98:53:47:c1:6f:1a:56:27:34:04:b4:62:44:57:b2:
05:e1:17:f0:01:95:b0:41:63:cd:0f:4e:a9:77:0c:1c:8a:07:
18:74:0d:d9:6a:20:07:7c:20:8f:4a:c7:88:08:86:e5:3f:3b:
2a:ed:72:36:35:d1:61:fe:27:45:9e:af:27:1c:5f:3d:0c:dc:
4c:94:66:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:27:28 2026 by rpki-client