Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: msWGiaE6aj2OtVRbCwo4EupPUEr0/7JqKd3E5kxeylo=
Subject key identifier: 8A:6E:85:3A:07:DF:BD:A8:77:A7:5A:9B:53:81:18:FC:FC:AA:89:14
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019DCD501591F53852C9AA6F295193D9B05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 04C1
Signing time: Mon 27 Apr 2026 05:01:10 +0000
Manifest this update: Mon 27 Apr 2026 05:01:10 +0000
Manifest next update: Tue 28 Apr 2026 05:01:10 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: JOUjVPsmNNEjZPUoWdUDbYnEjP+3KeUzIBH2DeqstWw=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:15:91:f5:38:52:c9:aa:6f:29:51:93:d9:b0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Apr 27 05:01:10 2026 GMT
Not After : Apr 28 05:01:10 2026 GMT
Subject: CN=8a6e853a07dfbda877a75a9b538118fcfcaa8914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:3f:eb:66:fc:47:6e:05:bf:5c:7e:2c:82:
8d:24:d8:b0:e1:0e:27:28:0c:46:a9:84:6f:75:fe:
0e:b7:a0:f8:1f:b2:31:f7:71:bc:c2:6b:cd:75:6d:
5a:f5:f0:28:2c:76:60:6c:1b:96:e3:13:ce:d2:67:
a0:1f:c7:78:cd:9d:07:7c:e7:6d:7c:c6:fe:a7:be:
81:f8:8f:9b:3d:7c:e8:ba:a5:66:02:91:ac:30:2c:
bc:4e:c5:1e:39:21:1f:ec:f2:e3:2c:24:44:5f:a7:
74:e3:cf:0e:d1:a1:73:8d:58:56:b6:dd:36:48:dd:
9d:47:c6:55:2e:0e:c4:44:89:95:66:e7:ad:d9:8f:
29:43:0b:8b:82:83:2e:d2:63:2c:d5:ba:f0:63:0c:
9b:4c:81:77:29:76:55:e6:9b:24:12:c6:cd:80:8d:
5e:e5:0e:ea:ff:d4:24:be:7b:f7:8b:9f:20:09:5a:
7a:8d:e0:3a:53:ba:2d:96:36:8b:4e:14:8d:ea:70:
77:59:96:c1:ad:55:02:9b:08:86:11:c9:af:6f:ed:
2b:80:43:21:0d:5d:2c:32:4d:d0:bd:cc:7d:48:f4:
8a:3d:dc:91:c7:a9:da:79:0f:70:fe:02:29:78:51:
ec:8b:31:c7:c2:35:24:30:21:d8:29:0e:38:95:1b:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:85:3A:07:DF:BD:A8:77:A7:5A:9B:53:81:18:FC:FC:AA:89:14
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:75:f9:37:bf:8d:df:3a:db:6d:21:b0:be:f7:38:dd:48:3a:
d4:7e:6c:b7:b1:24:5e:e5:3a:c7:79:7b:4a:c8:08:ac:3c:9d:
d8:dc:26:05:e8:67:7b:6e:18:da:38:58:15:2c:53:c3:ba:0b:
76:61:bc:08:17:5b:86:06:89:d8:83:94:c2:20:17:44:a7:7f:
d1:5d:3d:b5:37:0f:69:09:0f:2f:94:49:35:ff:cf:c8:0a:f5:
f9:29:88:65:68:cb:57:c8:a3:1f:64:b8:64:e3:74:e0:fb:29:
be:18:d9:0b:09:d0:cc:aa:a3:24:03:50:b4:6a:22:99:d7:3d:
00:be:c4:c1:68:97:af:e9:4b:10:37:84:1b:12:f1:d7:28:d9:
67:3b:68:7e:e0:4f:b8:7a:b8:d2:49:d5:dc:f2:b1:e6:6f:bf:
3a:37:b3:02:60:e5:e6:f7:6d:b8:c4:2e:4e:53:5a:97:62:21:
ce:98:37:90:00:59:22:f7:97:7d:c2:38:2c:a7:d4:76:39:ad:
0c:67:1c:e9:5f:b1:6b:ff:8f:2d:85:6c:df:5a:50:2e:af:dd:
8f:d9:c7:a2:fd:91:a8:26:c1:f3:6a:2a:88:cc:98:21:b8:69:
99:96:e4:c5:17:9e:e9:6d:02:44:af:7b:10:48:c3:19:af:62:
54:54:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:29 2026 by rpki-client