Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: /a+lAUIGchmGQYzZzgBboxE4G0dn+4BGGviVq89YTW4=
Subject key identifier: 09:07:99:D1:A4:24:A0:2B:CD:77:4D:CE:8F:53:28:1E:E4:9D:C6:E6
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 01A08A55AF3173ACF277C1DDB8AE2794E28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 062C
Signing time: Thu 10 Sep 2026 08:01:06 +0000
Manifest this update: Thu 10 Sep 2026 08:01:06 +0000
Manifest next update: Fri 11 Sep 2026 08:01:06 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: YOLaPjI/ieAfZEuh41wtJkxawOal5ROZ1hEklHRfmlI=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:af:31:73:ac:f2:77:c1:dd:b8:ae:27:94:e2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Sep 10 08:01:06 2026 GMT
Not After : Sep 11 08:01:06 2026 GMT
Subject: CN=090799d1a424a02bcd774dce8f53281ee49dc6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:f4:b5:a4:15:5d:5c:cd:ad:62:44:ea:98:
6f:91:2b:85:69:09:41:73:27:c8:a6:6f:d5:23:9e:
6b:bf:a3:1a:22:a9:8b:cc:68:fe:75:80:ed:57:00:
ab:08:5f:0c:cd:75:db:48:d4:88:fd:dc:c1:bf:7e:
73:0b:e8:67:84:46:4c:56:2c:37:1d:80:02:8a:04:
4b:85:df:6c:7a:e3:3c:32:2f:76:13:dd:68:cf:38:
22:ee:e0:f9:0f:91:60:ef:b4:b6:28:7e:cb:94:79:
43:3d:8a:ba:f1:44:0b:27:2c:25:cd:6d:2b:83:9f:
c8:8c:3b:a6:48:61:d8:5e:19:70:48:ee:d5:5c:84:
20:d9:09:59:d1:ba:97:3a:5a:c7:6c:8f:a4:ab:39:
9a:c7:1a:50:93:a0:15:05:09:3a:56:41:b2:76:4b:
88:19:cc:b3:70:23:5d:0b:0f:62:06:0d:6f:aa:87:
81:df:c0:95:7f:7d:a2:e3:22:d1:e7:f0:0d:11:69:
b0:41:b4:88:7a:20:40:f3:f4:7f:b6:f7:83:c1:a3:
15:c5:57:07:1f:0d:3d:c6:b8:08:96:e7:bb:79:95:
ef:9c:e1:62:37:91:b0:41:28:47:6b:29:1a:71:a2:
39:f0:65:e0:a8:0a:40:19:ee:16:1d:b3:6d:c0:d9:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:07:99:D1:A4:24:A0:2B:CD:77:4D:CE:8F:53:28:1E:E4:9D:C6:E6
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1b:f9:53:71:d7:dc:c0:9b:44:f7:b8:d2:88:ff:61:a1:c0:
b8:1f:f7:cc:0a:40:02:1f:5a:46:f0:25:1e:d2:12:b8:cb:82:
a0:99:3b:4f:c5:99:02:a5:7b:03:8c:7a:b6:9e:ae:0f:8e:2a:
c1:27:72:2b:d5:07:54:3e:52:51:a7:a1:1e:48:37:e3:98:a5:
1d:cd:ee:e2:07:42:aa:e6:04:9f:e9:d7:23:25:44:aa:e2:f4:
f8:15:2a:d6:f8:54:5f:7f:c5:7e:eb:1c:12:45:aa:8b:bd:65:
7f:ef:af:19:be:d1:5a:b5:22:79:aa:7f:96:04:83:5f:17:e9:
a5:d9:eb:45:3a:79:3a:5e:83:eb:12:ce:34:2a:be:c6:28:7e:
cc:d1:dc:ae:e0:79:52:2f:a3:78:7b:22:2a:c9:57:cd:f6:d9:
d4:3b:3d:d4:9b:c6:7e:c9:aa:44:66:6d:20:95:3b:16:e0:e3:
95:86:94:b4:48:10:ea:be:ac:a6:ca:5d:7d:37:2d:5a:a3:62:
95:42:a0:d3:48:95:24:40:43:63:f0:6d:eb:24:ef:d7:eb:69:
a9:b2:34:33:3c:2b:db:28:ba:9c:0a:2d:e1:74:7b:0f:b3:35:
25:54:44:67:e2:a9:40:2d:68:29:a4:12:58:9c:f7:11:19:f7:
00:68:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:12 2026 by rpki-client