Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: y2WenfF7WdLazQfxCq92t7u7C5D3wD8jFc3SoDSTw0U=
Subject key identifier: CB:71:7B:4A:BE:8A:42:26:BB:39:40:B2:F8:93:3A:96:39:D7:D0:45
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019FA0A86B0BB2715AA42CED9263230EECDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 05B3
Signing time: Sun 26 Jul 2026 23:00:19 +0000
Manifest this update: Sun 26 Jul 2026 23:00:19 +0000
Manifest next update: Mon 27 Jul 2026 23:00:19 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: 9gVDdZhe1JdL0n5il3PgXjbUnKQoq4cXwD+iHwQXtBE=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:6b:0b:b2:71:5a:a4:2c:ed:92:63:23:0e:ec:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jul 26 23:00:19 2026 GMT
Not After : Jul 27 23:00:19 2026 GMT
Subject: CN=cb717b4abe8a4226bb3940b2f8933a9639d7d045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:40:96:f8:65:a7:d8:34:0d:43:57:b9:09:
66:e5:74:06:75:8a:af:0f:59:17:99:3a:5f:df:ea:
fd:62:a1:1b:b1:76:99:f8:7a:a6:7b:a2:f1:5f:55:
7e:2f:ac:86:b5:d3:58:8c:21:df:84:17:30:91:83:
ce:33:9c:89:cc:68:23:5a:26:9e:d3:43:b8:41:ac:
a8:2e:ba:7f:04:0a:64:e7:d4:05:6e:e5:05:b3:33:
64:77:98:6e:f8:20:67:a8:84:2b:81:6c:10:52:87:
67:f4:74:a2:84:88:4e:3d:83:2e:78:7a:a7:70:9a:
e8:3e:35:d8:b3:8d:43:d6:3a:e4:9e:b5:b3:b0:85:
62:0d:6e:d7:99:7a:82:a4:25:05:86:34:56:b4:4a:
03:38:6e:ce:c7:b3:21:c2:0a:f6:45:c1:91:bb:30:
48:ab:92:7a:7c:d8:94:59:60:51:af:ce:a8:cf:d8:
4d:6d:ad:90:00:84:79:4f:f9:78:f7:d6:e3:85:c5:
79:fe:d2:82:56:32:31:e8:a3:7a:e7:ba:ac:db:ef:
71:de:7a:8e:11:e7:e2:c5:58:a7:e2:f3:e9:08:e2:
9e:36:19:b8:69:72:0a:43:eb:77:ca:83:db:58:8d:
12:b6:58:6e:9a:bf:6b:f2:07:fa:d8:36:90:2e:84:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:7B:4A:BE:8A:42:26:BB:39:40:B2:F8:93:3A:96:39:D7:D0:45
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:84:05:87:fa:ef:09:bc:2a:56:3a:50:45:b0:0c:e0:13:a9:
eb:17:8d:77:3b:0b:8b:08:b8:fe:45:7c:61:bd:0d:63:f4:ae:
9f:38:1f:5b:76:8e:85:97:3a:61:0b:68:b7:86:8b:5f:be:51:
f9:75:3a:d6:b0:54:fc:84:44:f4:57:e1:c4:86:1d:2b:e8:0c:
04:87:e1:c3:f1:ba:52:84:81:f2:28:8d:9b:6b:0b:51:90:54:
4e:83:e7:16:0a:b4:f3:e3:04:04:62:00:97:84:33:24:74:36:
fe:dd:4d:58:8c:68:7a:5d:f6:ef:be:c3:4b:13:57:c9:72:b1:
be:fc:c1:60:52:22:08:4b:9a:3f:30:84:8a:41:bc:ff:08:79:
0f:c2:15:40:e8:8c:a1:82:26:40:63:7b:39:55:ef:48:b0:2b:
21:f7:6b:b8:4b:b3:95:e6:29:bd:39:c6:63:b8:bb:9c:c3:a0:
be:16:9f:74:c4:0a:96:cc:96:ec:9f:7a:54:41:36:ce:a5:bb:
38:75:04:d0:26:80:c5:16:69:d4:b8:ef:bf:2d:51:11:fe:6e:
70:80:21:02:2a:85:40:1c:14:2b:1a:dd:e0:3b:f7:cb:fd:b1:
6c:8a:ea:7f:a7:3f:79:70:d1:a2:7d:fd:35:b0:09:9c:1c:c7:
9a:bb:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:29 2026 by rpki-client