Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json)
Hash identifier: bEkDTozx7CMdKdOKV8IAYgOAVWF8PpkG7jqX7YisJWc=
Subject key identifier: 9A:C2:7D:85:2B:BF:9D:FA:2A:78:BA:F6:9C:0B:DA:9A:8D:96:33:85
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 01A17A3AB3AA07A50BB4F45A476D91DE6FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
Manifest number: 0409
Signing time: Mon 26 Oct 2026 22:00:29 +0000
Manifest this update: Mon 26 Oct 2026 22:00:29 +0000
Manifest next update: Tue 27 Oct 2026 22:00:29 +0000
Files and hashes: 1: 9h6W4r2ZUmSWR3rPAISEaioyTnA.roa (hash: YXizQOzPpOHcnczJqxPHErnPR6o/jvzp0veayf1oTFI=)
2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: reatbbaTI2eJKFROPdGasP0LTN6gSCL5hl+PBvO0+Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:b3:aa:07:a5:0b:b4:f4:5a:47:6d:91:de:6f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Oct 26 22:00:29 2026 GMT
Not After : Oct 27 22:00:29 2026 GMT
Subject: CN=9ac27d852bbf9dfa2a78baf69c0bda9a8d963385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:7e:d4:64:a7:74:ba:2f:bb:ea:d5:93:a5:
67:48:a0:7d:f8:9b:b6:48:70:cf:df:6e:92:49:56:
33:35:97:cb:22:a3:57:0c:10:43:8e:ba:56:10:d1:
79:51:7d:bd:2b:98:2c:bf:f9:4f:cd:54:f6:b0:f4:
30:ce:d6:75:a2:93:8c:c7:51:57:c0:38:25:ef:12:
73:b8:bb:ff:81:06:0c:42:d4:b8:62:2b:56:83:a9:
d0:d1:1e:2a:53:7b:3c:bf:75:f1:82:ac:c0:13:21:
df:22:9e:b2:9c:9c:a7:64:05:8a:9e:36:df:d7:2b:
f1:82:82:af:68:08:b6:5c:53:c7:5e:88:c5:9c:c3:
8a:65:3d:df:71:f2:3c:6a:18:75:d2:75:79:d8:8b:
a7:b4:0e:8c:b5:57:72:51:23:d7:61:a3:cb:8f:84:
90:b7:65:f5:8c:df:16:6c:46:43:d9:a9:25:15:75:
c8:9a:64:8a:b9:f1:0c:0e:1f:3b:20:51:93:25:bd:
3d:04:f3:50:97:04:72:9a:e8:96:dd:cc:15:7b:a3:
29:d9:7d:51:eb:ed:ae:a0:45:87:43:b4:ca:2c:0b:
8d:b1:5f:c4:89:82:86:2d:f9:a5:69:fa:a5:a7:a7:
59:08:0f:89:d3:47:ce:e1:41:39:49:69:02:d9:d5:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:7D:85:2B:BF:9D:FA:2A:78:BA:F6:9C:0B:DA:9A:8D:96:33:85
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1a:6c:75:fe:2d:a9:a4:fa:71:0e:51:a7:4a:3b:56:f2:78:
e8:ca:66:bb:8d:f3:23:53:c5:9e:51:ba:6e:7a:97:81:7a:1c:
ce:e4:92:b5:54:ac:e9:3f:13:4b:23:7c:47:75:13:1c:25:03:
38:6e:67:26:35:9f:85:d9:68:71:8e:3c:aa:a4:56:28:c0:77:
1e:97:42:fd:f0:5d:f1:af:92:c2:08:62:83:d7:f3:0c:6d:3a:
20:1a:09:b6:4f:18:41:34:1a:08:e6:d1:0c:90:b9:12:0c:96:
a9:86:eb:8e:dd:08:89:83:12:e9:8b:d9:fe:5b:27:d7:ee:9e:
01:e7:1e:5a:76:a4:57:ec:5e:54:ab:d5:12:d7:ba:36:54:9b:
15:f6:cd:7b:9f:ed:1e:d0:cb:61:90:53:a0:cf:db:7f:67:f7:
de:33:bb:24:de:67:2a:0f:57:3d:71:0a:e3:10:db:09:e2:7e:
53:d4:cd:1e:aa:47:57:80:94:9c:b2:bc:0a:21:21:dc:bf:38:
96:4c:19:58:4a:19:1f:70:57:1f:2e:0a:f1:cb:57:50:fb:c4:
08:34:62:71:b0:df:4f:3c:ef:f4:57:3a:ec:ad:f1:44:ad:89:
9f:d3:86:7f:98:61:d4:07:ce:f7:c6:70:da:9e:ee:33:2d:ec:
02:5d:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:46 2026 by rpki-client