Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json)
Hash identifier: 9I+Ma/mAE/YqWnRBPdYAqfGm3nn0etGkjU9OY29fPKc=
Subject key identifier: CB:9E:59:92:FE:F9:BF:BD:A4:99:CD:B6:7D:A4:17:5C:1B:37:AF:85
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 019F04A98A326D3B0A2C92F9650BB8306E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
Manifest number: 02C2
Signing time: Fri 26 Jun 2026 16:00:47 +0000
Manifest this update: Fri 26 Jun 2026 16:00:47 +0000
Manifest next update: Sat 27 Jun 2026 16:00:47 +0000
Files and hashes: 1: 5IGkS-SPPNrJqQTvuCzGZItfdmI.roa (hash: bztepUTAX03w7M+nSyLqDj9U6yAnTCS2QiNsYuhc6yM=)
2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: 94xBPcaDIDr5R3TBclsqdW4AmhAGFrplTjVA8XW2h3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:a9:8a:32:6d:3b:0a:2c:92:f9:65:0b:b8:30:6e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Jun 26 16:00:47 2026 GMT
Not After : Jun 27 16:00:47 2026 GMT
Subject: CN=cb9e5992fef9bfbda499cdb67da4175c1b37af85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:c1:49:a1:b3:3f:02:3b:9b:b5:1a:7f:f1:
ae:5e:7f:8a:b1:05:6a:30:7f:92:0b:1d:be:e4:1d:
39:2b:53:30:81:12:e9:16:64:ec:3c:e7:a7:e3:86:
fd:15:47:7e:cb:cc:8a:2c:ac:d3:c3:74:73:14:89:
df:60:67:d5:82:b4:71:6b:bf:e1:fb:95:7f:93:cf:
1e:97:08:72:da:26:a7:2c:a9:8c:39:8c:94:83:10:
11:64:d0:f9:ed:6e:e0:d6:dd:24:c9:69:db:69:92:
21:f4:b0:2d:c8:af:7d:17:da:49:43:d2:fb:23:28:
ed:67:82:46:ec:f8:76:86:0d:ad:5c:f0:47:55:39:
09:66:ec:2d:c4:ae:73:c6:40:4e:78:ef:cb:c5:7e:
11:3e:ee:a4:16:18:ed:bd:be:13:ae:ec:05:98:57:
9f:dd:64:99:05:e7:fe:56:7f:66:0b:28:38:bc:54:
59:d0:16:50:ee:ba:1b:6a:0b:42:c6:f1:1b:87:d2:
50:3d:54:78:5c:22:6f:e0:76:78:e1:f1:89:98:b9:
d9:73:29:83:af:e2:10:00:f9:c2:db:eb:4a:70:a0:
d5:eb:24:96:47:09:95:8b:ce:e6:91:4d:eb:58:87:
05:99:2a:37:14:93:44:b6:c2:de:dc:28:a9:d2:9c:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9E:59:92:FE:F9:BF:BD:A4:99:CD:B6:7D:A4:17:5C:1B:37:AF:85
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:51:27:25:bd:65:9a:94:a1:08:85:0d:31:65:8d:65:f7:f8:
35:1c:ce:a9:66:b2:24:9a:f8:da:b9:95:32:e5:df:f7:08:61:
02:20:b8:2b:4d:31:c3:91:3f:69:56:e0:07:14:f6:67:36:10:
73:13:6f:00:01:96:fc:fa:29:78:53:69:7c:49:7c:ff:b9:88:
ec:6a:9d:64:d7:1b:90:4b:89:4a:ef:5e:ba:52:99:d0:bd:b8:
f3:4c:3d:8f:96:65:82:ec:6c:07:a6:9e:4c:29:0a:bf:1f:cb:
e6:74:ec:19:f5:12:4b:a7:e0:28:b9:e1:8c:30:11:a7:29:37:
c0:4d:cb:28:43:24:ea:e4:9f:ea:db:2f:0c:9f:d8:8a:7d:42:
bf:5a:f0:3c:fb:44:da:43:c3:1c:e4:7e:78:a5:c1:05:2b:66:
9a:a0:52:4a:39:05:d6:16:dd:4b:24:5f:8b:18:28:b5:87:2b:
79:19:4e:72:a5:e0:13:e2:ee:9e:02:b8:28:90:76:3b:b5:36:
3c:6e:e9:0e:cf:b1:e5:e7:ad:96:e6:09:9d:da:82:ba:d8:c2:
1c:77:a1:40:ea:2a:a2:ec:2d:b7:86:45:f3:6a:d9:f5:70:8a:
2d:88:a9:a0:2a:6a:75:ae:4c:c1:fc:f2:08:4f:51:ce:7d:ef:
6a:8e:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 20:40:24 2026 by rpki-client