Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: vbYM5vsq8pIrebZxlZHpJ8ZO8cwUVi404EU3N/FzYyQ=
Subject key identifier: 42:8C:A7:B6:FA:05:B3:4E:1D:CA:8A:3B:B9:03:09:AC:4C:0E:B1:14
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019EB6FC0BF33B80060B5000A5969A37AD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 053A
Signing time: Thu 11 Jun 2026 14:00:31 +0000
Manifest this update: Thu 11 Jun 2026 14:00:31 +0000
Manifest next update: Fri 12 Jun 2026 14:00:31 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: F6IfljonYf4HegMejm1jPEo9ZQhN+noqqjsyzPsEr6A=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:0b:f3:3b:80:06:0b:50:00:a5:96:9a:37:ad:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jun 11 14:00:31 2026 GMT
Not After : Jun 12 14:00:31 2026 GMT
Subject: CN=428ca7b6fa05b34e1dca8a3bb90309ac4c0eb114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:b2:7a:e2:13:84:c3:24:1d:33:fa:fe:c1:
2d:f1:41:b9:fe:e8:1f:eb:ae:71:19:20:c9:32:88:
83:a0:6c:a7:ec:c7:d3:2f:46:6d:6a:98:8e:51:a1:
4f:ff:45:97:7b:f8:da:d5:ac:ed:3d:77:69:30:df:
a0:f5:a3:dd:8c:d8:83:9a:57:6a:07:23:ef:61:c3:
04:02:6e:bb:93:68:a8:96:ad:44:6d:51:34:86:22:
e2:0c:5a:ca:bc:e7:8e:71:46:d0:6f:f3:5b:0d:bc:
6a:59:11:9a:ca:11:47:84:31:7f:f3:bc:51:a2:d3:
6f:41:25:c2:db:a3:58:07:a5:ff:3a:44:68:3a:6d:
35:8d:21:d5:fc:e1:ba:82:ab:e8:f4:21:a1:7a:5c:
39:0e:6d:94:88:fd:32:8e:ca:32:dc:0b:e7:08:11:
11:68:fe:11:1d:fc:4c:4b:2b:db:5f:0d:de:d8:9b:
f7:37:8d:ac:d5:66:ff:c7:9b:8b:66:a8:b4:41:2b:
2a:4e:55:f9:1a:5e:ba:15:9e:1a:fb:6f:d5:d1:4d:
3e:86:12:f1:9f:05:e1:8c:8c:7c:28:e0:8a:00:92:
c8:b2:01:34:20:b1:23:5f:00:c9:77:6c:9e:df:ff:
f9:5b:b2:92:80:77:ac:22:83:95:7b:ff:26:01:98:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:A7:B6:FA:05:B3:4E:1D:CA:8A:3B:B9:03:09:AC:4C:0E:B1:14
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:30:c1:53:bd:ca:f6:83:b3:64:7a:a4:75:77:4b:46:23:58:
c9:e8:75:56:46:28:e9:cb:62:df:39:21:11:9f:16:2c:ab:61:
5c:aa:6d:05:4b:93:19:e8:6a:6c:b5:67:59:3e:cd:9c:07:81:
90:d0:52:80:97:27:5d:de:e1:f5:29:df:f6:56:6c:61:e8:3b:
d2:c0:41:12:87:ae:9f:d2:b4:a2:f0:a7:96:fc:62:26:2e:b5:
cb:fe:9c:95:c5:99:47:8d:eb:b1:dd:a1:d8:a5:b2:42:b5:66:
47:68:3c:3c:a0:06:47:49:cf:6b:c4:e4:58:a5:76:16:a7:48:
90:41:82:75:83:0a:ce:53:b2:e6:77:da:ef:9e:b3:6f:4f:67:
05:bc:7a:20:6e:57:7a:2c:b0:0f:a7:96:e1:80:28:4c:6d:30:
11:c2:8e:1d:e4:42:70:33:20:21:3d:7c:5a:4b:a9:60:41:38:
98:1f:92:76:f7:c1:63:7c:bb:41:57:3d:17:e9:ce:24:4f:35:
84:a5:01:86:48:20:de:3e:b5:6a:1d:9a:d0:80:59:c4:a2:cc:
c5:3d:4c:26:47:7c:2c:bf:7b:c5:8d:2d:75:ae:1d:47:a9:25:
1d:f8:7b:03:17:71:af:37:75:19:9b:b4:2b:46:82:6a:b8:38:
64:a6:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:58 2026 by rpki-client