Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
File: kh48kn45Yv5XJu2z8kay29kldxY.mft (raw, json)
Hash identifier: kbr3Z0fxMyiZMTp0diGWwvKCuO1Y73V6P+kRvC7bElw=
Subject key identifier: D4:8D:4A:E9:6A:65:E2:B1:93:DE:05:A6:8C:2C:15:14:6F:BA:CC:59
Authority key identifier: 92:1E:3C:92:7E:39:62:FE:57:26:ED:B3:F2:46:B2:DB:D9:25:77:16
Certificate issuer: /CN=921e3c927e3962fe5726edb3f246b2dbd9257716
Certificate serial: 01A137B630948AFF17A12603BC78C1D18E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
Manifest number: 61
Signing time: Wed 14 Oct 2026 00:00:49 +0000
Manifest this update: Wed 14 Oct 2026 00:00:49 +0000
Manifest next update: Thu 15 Oct 2026 00:00:49 +0000
Files and hashes: 1: RWe6i-Qv49bqcb6RZi-CLCwj3HY.roa (hash: IAsCRcrNfl36HxqP4OK+c8W8gr6kQGmxpXJ06yNbYFE=)
2: kh48kn45Yv5XJu2z8kay29kldxY.crl (hash: Q70cPYpVViYG5BkeAvWH7mowwkNfrSmYg3jw4KCa5Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b6:30:94:8a:ff:17:a1:26:03:bc:78:c1:d1:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921e3c927e3962fe5726edb3f246b2dbd9257716
Validity
Not Before: Oct 14 00:00:49 2026 GMT
Not After : Oct 15 00:00:49 2026 GMT
Subject: CN=d48d4ae96a65e2b193de05a68c2c15146fbacc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:ee:8b:54:8c:82:ce:2f:44:1b:2c:86:d0:
cd:f8:43:a2:a8:67:03:ea:3a:61:5d:e4:82:2d:7b:
02:5f:8f:5c:1a:e3:0a:b0:e2:86:ac:74:97:45:e3:
f5:ce:be:2e:f5:de:04:37:d0:75:28:33:c6:8e:00:
ec:b3:85:29:a3:a1:92:17:5d:c8:a9:a4:ac:fd:2b:
11:8f:21:0a:15:08:4b:69:4a:79:6b:09:26:ea:93:
f9:be:9b:83:cb:f8:d2:bc:9b:b9:ad:ec:d8:48:87:
4f:5b:6c:ca:ca:fc:78:00:9a:08:84:e1:4d:86:2e:
06:34:28:02:55:e0:e2:b3:08:22:f5:7c:90:7b:66:
b1:c9:d2:0b:aa:1c:56:d3:4e:97:0e:e1:5b:3a:99:
ce:18:6e:f3:f0:cb:de:34:c5:65:80:c4:08:46:a0:
0a:83:48:58:bf:0f:fe:00:ef:65:be:df:db:af:bd:
70:7d:56:83:79:44:12:81:af:61:44:0d:74:96:23:
93:4e:bc:47:70:99:30:ff:39:08:c8:87:73:31:d5:
b0:6f:fe:b3:78:08:9b:54:be:47:c4:02:06:f7:9e:
d2:3d:1f:be:a5:4f:c1:64:74:2f:40:2e:0e:a4:56:
43:b2:94:69:c3:32:c6:c9:47:09:4c:0e:4b:57:48:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:4A:E9:6A:65:E2:B1:93:DE:05:A6:8C:2C:15:14:6F:BA:CC:59
X509v3 Authority Key Identifier:
keyid:92:1E:3C:92:7E:39:62:FE:57:26:ED:B3:F2:46:B2:DB:D9:25:77:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:00:e3:a0:8b:6a:aa:e0:95:d3:5c:ff:4e:31:fe:34:26:2f:
3f:16:77:c3:31:74:c4:5c:38:0f:e8:44:b6:61:33:24:4e:7c:
cd:8b:65:6a:61:c1:ea:d8:d8:21:ae:a7:6e:c4:d0:80:35:0e:
ea:68:0f:c7:4e:47:41:7a:dd:2a:12:67:a7:8f:cf:ab:df:bc:
04:38:62:d8:83:89:47:ec:36:e7:88:84:b8:98:db:5c:d6:42:
24:01:6d:31:51:e0:8d:f1:0a:95:f0:02:9d:53:57:9c:45:8d:
88:00:9f:67:17:fb:1c:68:94:92:9a:c2:c9:60:3a:5b:fb:bc:
93:ae:33:a8:bb:8d:1c:88:5c:e5:32:fa:2f:ab:db:30:4b:25:
c7:84:76:73:70:6d:3f:59:14:b6:84:20:55:35:11:f8:1a:fb:
27:66:38:ba:0a:bd:61:b3:92:82:f7:57:58:e2:03:ee:aa:1a:
bb:4d:83:28:c9:87:d2:74:c6:d8:06:42:25:68:6c:e5:aa:a3:
cf:e5:3d:18:90:48:20:78:ac:85:bc:a6:a2:89:9c:f3:a1:53:
6b:74:9c:13:91:4a:29:42:4b:47:7a:5b:f6:eb:cc:80:4e:b6:
58:15:bc:0d:9e:1e:f4:0f:b4:3a:f5:be:af:37:d9:74:03:fb:
37:fb:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:18 2026 by rpki-client