Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: 8tYfCT4NP8i6JupzyKSBhuVS9U9LIjKmh07BUAUj9Gc=
Subject key identifier: 98:55:81:E9:DC:57:2B:AC:ED:4E:9F:3B:D6:66:C4:2B:F2:E7:AA:C6
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 01A00282030BBC6AE29A3B6F3EF5274CA5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0E4D
Signing time: Fri 14 Aug 2026 23:01:09 +0000
Manifest this update: Fri 14 Aug 2026 23:01:09 +0000
Manifest next update: Sat 15 Aug 2026 23:01:09 +0000
Files and hashes: 1: 4VL55TR7n8zY5sjEwyy-tDqTfgs.roa (hash: 7BDvUnPmZt5rM/QuBJhcT4U2nlJB/FKzg2OukOPZ9uQ=)
2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: VojauoVyobMPScbO9w3yDrfJS7TS6nWLF510bMzTTUo=)
3: KnCfg8nTQsfpTcM_cEW8Uzz8x5M.roa (hash: 2VYLtBiQmGKXrUCSv3SxyNnrS3C6FcV2aiRtsHxSXSI=)
4: arOEcwZhUNm3Hj36Uwng_wKeV9E.roa (hash: B20xitz9JymuHol/jxxjXdJ6lXpi2xW/yyUd53yf3d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:03:0b:bc:6a:e2:9a:3b:6f:3e:f5:27:4c:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Aug 14 23:01:09 2026 GMT
Not After : Aug 15 23:01:09 2026 GMT
Subject: CN=985581e9dc572baced4e9f3bd666c42bf2e7aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:32:3e:71:b4:c7:ff:27:9c:4f:a9:dd:a1:
3f:e7:f6:20:f3:10:72:f4:0f:9f:18:86:38:f7:7d:
00:07:d3:da:d0:df:7f:0d:9c:93:c3:1b:c3:f8:1e:
e3:6a:e9:74:86:ed:63:b9:19:0a:b1:84:1d:b0:39:
d2:db:54:55:c6:9b:b6:80:1f:16:4e:7e:b1:4a:38:
bb:fa:ee:aa:78:7b:08:d2:f7:fe:c2:ec:b1:e4:38:
1d:4d:36:47:b2:f3:6a:d6:ba:09:05:cb:9b:e9:86:
82:d8:7c:ab:df:57:35:e0:f9:01:fc:e3:56:80:7a:
2f:87:36:9e:32:ed:4e:58:56:93:03:33:7c:29:c1:
c1:b7:4c:6b:bd:45:ef:2a:2a:f8:d3:c1:41:89:8f:
6d:71:02:fe:25:45:69:c8:9b:dd:20:25:05:36:2d:
af:57:fb:9d:3f:c5:29:1c:25:09:91:17:ce:0b:b1:
a6:7c:61:54:6a:cc:c3:9c:a4:0b:ac:b3:0f:e0:07:
2e:5e:1f:c4:4d:bb:cb:35:1c:ee:7f:ec:62:c0:95:
86:a1:2a:66:51:3b:d3:ea:41:fd:c8:46:08:f8:3d:
36:ad:08:73:47:19:de:e6:84:a9:e8:00:d6:9d:0e:
1c:f3:36:3b:05:bc:9a:ea:ec:63:e1:07:eb:72:59:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:81:E9:DC:57:2B:AC:ED:4E:9F:3B:D6:66:C4:2B:F2:E7:AA:C6
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:14:e0:1d:c6:bc:5b:99:b4:6e:d3:be:5e:c2:a0:f2:ae:90:
6b:bc:6b:58:3d:69:60:69:64:3a:21:2d:d5:b3:f3:4a:53:80:
14:81:45:ea:54:4f:9e:47:45:22:e0:21:f8:04:3a:b7:7f:7d:
f1:54:7f:44:f0:07:06:8d:cb:11:a7:99:c8:db:71:19:af:73:
27:26:b0:38:f3:e4:69:c1:2b:6b:1d:c4:23:08:c6:3f:69:a8:
ff:40:c0:d5:99:4e:d0:6e:ec:0d:7a:5b:ae:38:f1:e5:ae:35:
bb:07:c2:a9:2e:86:8b:52:1f:d0:7c:c7:87:13:44:b3:e0:7d:
c3:d7:22:6c:86:44:d2:e0:2a:d3:d4:a2:32:46:fa:b8:c9:16:
f5:3d:17:05:19:87:a7:c0:84:81:f4:2a:ae:2d:95:4e:11:20:
df:c1:38:26:2f:a6:46:35:eb:7a:cf:ef:11:b3:80:aa:eb:63:
51:28:b6:10:72:09:ad:e8:16:65:83:48:cc:3a:db:d4:85:65:
eb:a9:af:96:e5:23:85:c3:fa:1a:d6:26:74:16:fc:c7:99:31:
64:5e:2e:15:f5:66:25:db:1b:fb:e3:19:3b:9a:c0:27:09:30:
57:df:40:4b:c8:b5:70:dc:5f:70:60:04:c9:11:34:67:06:d7:
1c:12:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:31 2026 by rpki-client