Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File: KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier: JqvuOVlSaLbEUnNVIImup8pjZ7BrEAYzMkKqVK6nKpY=
Subject key identifier: 7A:77:A9:47:74:41:04:0B:0B:97:B6:D8:8B:79:3F:C7:53:89:B5:F5
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer: /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial: 019D38D3BECBDFE6F1CEF57069D420268091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number: 0AD5
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: 8Se9ZBHZ2o65rpVmaFnDabLDxUvj9/4ntaA1p2WNfj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:be:cb:df:e6:f1:ce:f5:70:69:d4:20:26:80:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=7a77a9477441040b0b97b6d88b793fc75389b5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:f9:81:e6:9a:fa:4d:83:fa:61:33:6d:56:
96:98:27:a2:4e:cf:b0:d8:a8:e6:ca:a6:a6:03:c0:
d0:b2:fb:a6:30:62:c8:e3:46:32:b6:e8:59:fc:26:
f3:03:0c:94:95:11:76:a2:fa:af:8b:04:b4:77:f2:
8e:fd:35:7e:09:19:8a:cc:93:93:c7:02:61:46:83:
13:57:ef:80:0c:cf:c8:d4:fc:f8:a4:fc:ec:c2:22:
19:ba:da:3f:aa:84:ca:da:21:60:9e:eb:7b:22:9b:
a6:44:24:70:98:61:07:74:e6:ab:80:ef:c0:8a:a1:
fe:c1:86:f5:5b:b5:c9:e7:40:c0:6b:79:2a:66:e0:
d5:7b:a8:c7:03:96:63:f8:b0:56:84:ba:b4:80:d0:
da:8b:d1:12:77:59:a2:fc:e3:89:f4:64:2e:f0:b1:
a7:4a:a4:32:86:88:23:60:9a:d8:7c:a6:19:16:9a:
bf:40:0b:6f:47:a9:d2:d6:f1:c5:63:95:cd:5d:73:
b4:40:8b:b8:c7:4e:c3:1d:5f:a4:f7:fc:10:5f:66:
05:b5:db:c9:5e:2d:56:6f:ec:9f:82:41:0c:03:a3:
61:f7:69:a9:c8:38:9f:b2:a9:1c:1b:88:7b:e5:a0:
73:1d:c7:2f:d9:24:fe:54:0f:c6:78:e1:33:1a:47:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:77:A9:47:74:41:04:0B:0B:97:B6:D8:8B:79:3F:C7:53:89:B5:F5
X509v3 Authority Key Identifier:
keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:f4:80:f8:69:4e:ac:78:37:de:59:bc:76:53:c5:ae:b2:
e7:84:ca:62:18:ec:a0:cf:b9:8c:c4:93:a9:5c:37:d6:72:eb:
6a:55:bd:44:c9:9c:3c:34:8e:8a:ef:dd:bc:5c:25:82:ee:43:
22:48:53:f8:a1:5f:52:ad:0a:28:af:eb:82:fc:c7:cb:e1:1a:
63:cc:66:7c:36:d6:44:c7:f7:9f:8e:35:ec:d1:ed:8f:6f:d1:
39:47:ba:eb:39:13:d1:4e:aa:e9:6d:08:cb:b4:83:75:4a:07:
da:80:bc:28:89:da:5e:d5:b1:f6:ad:fb:e6:d7:26:4a:68:e7:
07:6a:5c:21:f4:8e:bd:21:6e:30:05:ac:c3:12:97:2f:0c:69:
fc:4b:c7:e2:6b:a1:79:39:e5:12:44:74:a9:26:3d:70:83:95:
aa:b4:56:12:5d:4b:b7:29:04:f6:bc:bd:93:27:d8:35:92:f6:
34:70:00:16:a5:14:40:bb:c6:62:17:d5:12:f9:49:4c:e3:11:
d4:d1:c7:f0:8a:e8:c3:ae:03:0e:da:ca:d6:be:40:ac:60:04:
83:47:7f:dc:e8:91:61:00:5a:55:fc:05:a9:a0:35:ca:d1:55:
d3:81:49:91:c0:0a:12:a1:ca:7d:e0:b4:35:ca:0d:ff:90:04:
ab:84:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:42 2026 by rpki-client