Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json)
Hash identifier: z42g5ZfdVfSDDo7fyHUJfngswtohU58rHST3jndTxoA=
Subject key identifier: 5A:35:8B:94:76:44:BF:71:1B:6D:63:F6:84:2A:3D:E9:3D:29:2D:3F
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 01A03F72EAD58F79C2B324A92C78EC5E3720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
Manifest number: 0365
Signing time: Wed 26 Aug 2026 19:01:30 +0000
Manifest this update: Wed 26 Aug 2026 19:01:30 +0000
Manifest next update: Thu 27 Aug 2026 19:01:30 +0000
Files and hashes: 1: 5IGkS-SPPNrJqQTvuCzGZItfdmI.roa (hash: bztepUTAX03w7M+nSyLqDj9U6yAnTCS2QiNsYuhc6yM=)
2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: 5hxDH9mWbk1MCRbfuhVIo2ufl++BhcyiLPO/WdRPwVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:ea:d5:8f:79:c2:b3:24:a9:2c:78:ec:5e:37:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Aug 26 19:01:30 2026 GMT
Not After : Aug 27 19:01:30 2026 GMT
Subject: CN=5a358b947644bf711b6d63f6842a3de93d292d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:da:2e:a1:fc:8d:62:ce:43:b1:3a:49:f1:
21:bf:48:07:f3:86:e0:84:2c:47:87:b0:36:1b:f8:
59:d6:ce:cd:c9:7a:a0:00:b9:ad:30:77:7b:ca:33:
f1:43:1c:fd:a7:99:c5:b9:6b:65:81:79:35:7e:17:
35:b4:25:09:12:f9:9b:27:f7:90:ac:48:53:34:ea:
a5:71:f1:be:f2:1c:1d:7c:5c:e7:03:cb:d3:f9:51:
09:e9:72:f2:73:17:7c:bd:e0:4d:12:d7:d8:a0:b8:
69:42:c7:9b:bd:6f:53:5d:06:0f:0c:b0:2f:78:be:
5e:69:76:0c:06:c7:dc:40:30:8d:54:3d:3b:d8:5b:
ba:4d:e5:8e:bb:3e:c5:a0:43:58:aa:c0:e5:70:58:
85:2e:b8:53:25:fe:cd:05:9c:6a:da:32:8f:44:7a:
f4:4c:7f:7e:47:fc:1e:62:cd:8d:34:ac:c1:8c:2d:
64:a6:1f:8e:7c:ea:d2:3a:ed:57:6f:4c:40:5f:49:
90:fc:2d:3b:4e:82:59:79:07:2b:f3:ca:fb:c9:65:
c5:a7:fb:c8:5a:ca:1c:1b:8e:3f:91:a4:2a:8a:5d:
a0:2a:48:48:15:bc:64:81:93:71:70:f3:28:89:2d:
c9:eb:a8:7d:ed:35:9b:68:bf:39:0b:79:bc:e0:76:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:8B:94:76:44:BF:71:1B:6D:63:F6:84:2A:3D:E9:3D:29:2D:3F
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:21:e5:2f:da:f1:58:b0:c0:08:4a:12:f5:40:22:94:45:aa:
e8:6d:e1:5d:d2:d6:b6:5c:82:8a:57:b8:20:a3:29:5b:7d:d1:
55:28:76:c5:07:dc:fc:2d:b7:d4:a4:3c:79:b0:06:50:4d:91:
32:76:08:b3:0f:f8:3d:ec:be:2c:50:6f:da:6e:9f:23:86:37:
1b:8e:c1:44:db:49:fa:4c:1d:25:3b:cf:79:a1:ab:81:b7:f1:
5d:b2:fe:77:19:fe:44:17:83:0c:07:a3:86:11:ed:f1:14:5a:
a9:d0:69:46:82:1e:14:6c:18:a2:17:97:7b:3f:16:9a:16:77:
df:b2:7d:c0:24:1c:c9:8b:f8:6b:c5:2d:85:20:ed:9d:1c:06:
ba:e0:d4:05:49:5c:7a:93:76:d9:08:c7:9f:ed:60:9a:de:f0:
e6:7b:9a:47:3f:ac:bd:d9:f0:f0:0c:34:18:f9:8d:5b:2a:ed:
7c:84:46:a0:ca:23:87:77:1c:ed:1a:07:01:77:d2:f1:20:3c:
d6:79:f5:00:93:fa:d7:95:67:e8:ad:97:da:02:51:93:d8:21:
ff:08:83:36:d7:33:f8:cc:03:ec:99:83:18:aa:c5:df:ca:17:
d9:fc:a6:cc:58:96:0b:a0:39:7d:28:a4:91:c6:6e:60:d7:d8:
58:33:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:11:27 2026 by rpki-client