Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: JwczvDC4WbPkU6DKvICe97vf6iqdpykBcMLLR4l6vEE=
Subject key identifier: 8C:EE:42:35:52:DA:24:57:FB:80:39:3B:16:B4:94:A8:53:97:12:22
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 01A1773A0A3193FB58BC86888109064E9CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0F0E
Signing time: Mon 26 Oct 2026 08:00:54 +0000
Manifest this update: Mon 26 Oct 2026 08:00:54 +0000
Manifest next update: Tue 27 Oct 2026 08:00:54 +0000
Files and hashes: 1: 4VL55TR7n8zY5sjEwyy-tDqTfgs.roa (hash: 7BDvUnPmZt5rM/QuBJhcT4U2nlJB/FKzg2OukOPZ9uQ=)
2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: oXZmUjK+l8cmmV15gTPQ54HTzC6gTBtW8hwAkyHC6Pw=)
3: KnCfg8nTQsfpTcM_cEW8Uzz8x5M.roa (hash: 2VYLtBiQmGKXrUCSv3SxyNnrS3C6FcV2aiRtsHxSXSI=)
4: arOEcwZhUNm3Hj36Uwng_wKeV9E.roa (hash: B20xitz9JymuHol/jxxjXdJ6lXpi2xW/yyUd53yf3d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:3a:0a:31:93:fb:58:bc:86:88:81:09:06:4e:9c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Oct 26 08:00:54 2026 GMT
Not After : Oct 27 08:00:54 2026 GMT
Subject: CN=8cee423552da2457fb80393b16b494a853971222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:4c:b1:b1:8c:a2:f2:ad:ff:87:2b:f0:5f:
c5:be:db:22:53:20:da:5e:91:59:53:01:29:41:15:
2d:5f:d5:01:fb:7e:11:bd:5c:e4:3f:00:31:df:fb:
72:1a:58:54:e4:5b:a4:7c:df:d3:ed:4c:15:37:97:
64:ce:e2:a1:f6:29:13:2a:66:11:88:fd:7c:d2:af:
17:fd:4f:96:2d:a6:a9:18:ab:c1:04:44:ab:7d:96:
12:8c:01:e5:15:03:ea:21:42:e6:fa:63:68:cc:48:
36:18:1c:2f:1a:45:e2:1f:66:69:8b:e7:b6:24:df:
e4:ae:38:39:61:72:1b:fb:59:ae:fc:66:e0:9d:39:
0b:bc:83:f0:67:93:e1:84:5f:d5:b5:6a:e1:e2:1a:
d7:2e:0c:21:c1:8a:8f:29:2e:90:54:f6:a0:8c:f3:
77:62:6f:33:a6:22:85:35:7d:a4:20:5b:e9:33:6a:
fc:65:be:5c:2f:47:4a:a7:26:67:05:86:68:ec:3d:
fe:91:e4:20:b6:65:de:27:f3:13:ca:40:1c:9d:e9:
a1:ae:17:f8:f2:ee:58:5b:07:e8:9a:3a:44:07:cd:
88:f1:43:96:e8:31:98:5f:e1:21:4c:bb:f9:dd:5b:
c6:68:64:10:11:47:f0:a8:9f:7a:92:7c:c4:36:05:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:42:35:52:DA:24:57:FB:80:39:3B:16:B4:94:A8:53:97:12:22
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8a:86:19:b4:4c:09:b0:52:c4:7c:d3:80:ed:bd:04:98:e9:
c2:ea:e7:85:cf:a3:0c:c4:8d:7f:32:48:1d:73:57:cd:fe:5c:
77:ab:8c:b1:49:db:cd:ba:39:6b:44:6d:4d:17:3c:6c:db:9f:
07:7d:fe:a6:68:51:ef:b7:65:7f:68:bf:91:05:6d:8e:a1:c3:
26:44:c7:13:7f:f8:ea:0e:b2:2b:ce:bb:2a:18:80:6f:d0:f2:
b3:56:a3:d0:14:3f:7d:fb:ea:71:bb:7a:9c:71:26:48:21:4c:
25:43:78:b5:d1:9f:ce:1f:cf:e4:ed:22:f3:1d:0d:19:f3:c6:
65:96:f6:e7:5c:1b:62:08:97:9f:fb:97:ed:44:58:7b:74:c4:
ca:9f:28:5d:62:40:08:60:57:c7:8f:3f:2a:fe:49:43:cf:c8:
18:9a:5a:e8:0b:8e:fb:b9:58:96:e7:ef:8f:2a:d4:a9:16:74:
ab:0e:83:1e:86:52:ed:76:08:79:5c:18:ef:33:f6:8d:3f:bc:
fd:aa:1f:25:e8:66:40:50:f6:e6:b2:d8:a5:68:25:12:40:1f:
57:b7:3f:3a:14:9e:b2:4c:51:e9:e6:0e:b6:5f:9d:53:ae:d7:
5c:ef:62:8f:82:35:8a:af:63:96:83:50:e6:9b:7d:b2:58:96:
52:18:64:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3Ogoxk/tYvIaIgQkGTpy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4N2UxYzk3ZjcxZjM1NTg2N2UzZmI4NzdmMjFhYTUxMzBi
NmNmNWQwHhcNMjYxMDI2MDgwMDU0WhcNMjYxMDI3MDgwMDU0WjAzMTEwLwYDVQQD
Eyg4Y2VlNDIzNTUyZGEyNDU3ZmI4MDM5M2IxNmI0OTRhODUzOTcxMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JNMsbGMovKt/4cr8F/FvtsiUyDa
XpFZUwEpQRUtX9UB+34RvVzkPwAx3/tyGlhU5FukfN/T7UwVN5dkzuKh9ikTKmYR
iP180q8X/U+WLaapGKvBBESrfZYSjAHlFQPqIULm+mNozEg2GBwvGkXiH2Zpi+e2
JN/krjg5YXIb+1mu/GbgnTkLvIPwZ5PhhF/VtWrh4hrXLgwhwYqPKS6QVPagjPN3
Ym8zpiKFNX2kIFvpM2r8Zb5cL0dKpyZnBYZo7D3+keQgtmXeJ/MTykAcnemhrhf4
8u5YWwfomjpEB82I8UOW6DGYX+EhTLv53VvGaGQQEUfwqJ96knzENgXb9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzuQjVS2iRX+4A5Oxa0lKhTlxIiMB8GA1UdIwQY
MBaAFCh+HJf3HzVYZ+P7h38hqlEwts9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEt
OWViM2M2ODJiMDA5LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEtOWViM2M2ODJiMDA5
LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYqGGbRM
CbBSxHzTgO29BJjpwurnhc+jDMSNfzJIHXNXzf5cd6uMsUnbzbo5a0RtTRc8bNuf
B33+pmhR77dlf2i/kQVtjqHDJkTHE3/46g6yK867KhiAb9Dys1aj0BQ/ffvqcbt6
nHEmSCFMJUN4tdGfzh/P5O0i8x0NGfPGZZb251wbYgiXn/uX7URYe3TEyp8oXWJA
CGBXx48/Kv5JQ8/IGJpa6AuO+7lYlufvjyrUqRZ0qw6DHoZS7XYIeVwY7zP2jT+8
/aofJehmQFD25rLYpWglEkAfV7c/OhSeskxR6eYOtl+dU67XXO9ij4I1iq9jloNQ
5pt9sliWUhhkcg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:58:56 2026 by rpki-client