Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: sLuDUySKbGMUdjRC31kTBJDSz49wfIEkVSYTNDi5Vio=
Subject key identifier: 28:73:04:95:27:23:72:AF:8A:CD:F7:21:A8:25:0F:EA:4E:B3:8B:61
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019CE3A33426CBD54807ED11EC4A0B8F81A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 0448
Signing time: Thu 12 Mar 2026 20:00:49 +0000
Manifest this update: Thu 12 Mar 2026 20:00:49 +0000
Manifest next update: Fri 13 Mar 2026 20:00:49 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: +VLrH4Zj0G0C7rc/jsUE6LGSGve2vIrzgSdVKLbno7w=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:34:26:cb:d5:48:07:ed:11:ec:4a:0b:8f:81:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Mar 12 20:00:49 2026 GMT
Not After : Mar 13 20:00:49 2026 GMT
Subject: CN=28730495272372af8acdf721a8250fea4eb38b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:1a:71:38:06:af:24:5a:17:47:87:e2:99:
6b:b7:1e:68:36:e5:fd:8c:7a:e5:da:52:a5:54:89:
91:0e:5d:08:61:c0:a0:62:54:fe:d4:81:8d:02:e3:
39:87:cc:dc:b1:b7:a4:da:aa:ca:15:df:bc:00:04:
2d:7d:d5:72:1d:65:65:1e:80:5f:8c:e6:98:08:33:
d5:9b:bc:2f:c4:79:30:1b:8a:9b:72:30:b2:22:7d:
38:f8:2e:ec:bc:ad:91:e1:04:a8:c8:18:52:55:e8:
42:83:23:52:b1:c3:7d:40:9e:3b:1f:bf:09:66:e4:
b8:14:25:83:f6:b2:ee:f1:75:96:aa:a2:bf:66:72:
36:11:95:1e:91:df:02:4d:96:6e:c7:c8:c8:2e:74:
bd:bf:83:8c:44:07:64:0d:54:23:51:45:ce:1f:55:
85:98:e9:ad:b5:06:5b:7c:fe:40:04:c2:fd:22:6a:
be:37:22:11:9a:7f:30:6a:56:38:22:42:99:01:ac:
7e:6d:5d:0a:fd:ec:b6:2e:c7:05:41:ab:36:33:67:
93:71:da:4b:fb:05:3c:bd:3a:60:1d:e3:34:fd:58:
e6:fd:df:51:1d:00:f8:86:12:d8:c3:5f:36:7f:5f:
af:fe:90:38:d6:2c:0e:b4:bb:27:3c:e5:55:9b:cb:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:73:04:95:27:23:72:AF:8A:CD:F7:21:A8:25:0F:EA:4E:B3:8B:61
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:40:88:37:26:22:8c:d0:df:38:16:de:61:ac:28:d8:0e:79:
d3:61:bd:c2:75:92:75:74:a7:df:f7:fb:17:5e:c1:94:96:cb:
64:9b:0a:5b:98:3e:bf:58:28:1f:90:52:4d:22:33:c1:f3:02:
3c:93:6a:e2:ec:da:b6:1e:62:e2:ad:73:6d:c9:72:c4:07:bb:
27:5c:d9:29:61:c0:16:de:d5:49:e8:be:90:4e:95:f9:6e:39:
ba:33:98:7a:b3:1b:bc:be:d1:cf:f6:51:fd:a6:15:ba:ba:0d:
4a:1e:14:fc:f4:f4:96:40:0a:9d:4a:67:27:af:ef:fd:b6:df:
a8:74:42:f3:4a:f9:9f:d4:c2:07:82:0b:3e:6f:3a:6b:35:d0:
3f:bc:6b:8f:d2:b0:a3:20:0a:07:c3:80:18:82:34:2e:df:e6:
4e:28:0d:d6:0f:46:e6:5b:18:49:1e:18:c7:c4:c9:f1:9f:d1:
18:83:e3:85:0d:9c:03:a3:c4:1a:1c:79:0f:ed:95:9e:ed:39:
af:c2:b2:c5:6f:8a:fc:3d:9b:e4:6f:68:3b:ca:d2:75:4e:91:
31:13:4e:f6:ce:00:27:97:e0:25:27:97:b8:a1:bc:ff:fd:af:
ce:e9:bb:98:d8:4a:e4:3a:4a:d1:75:c6:0a:f0:ca:70:e3:bc:
36:e5:7b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjozQmy9VIB+0R7EoLj4GhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew
ZGViNzAwHhcNMjYwMzEyMjAwMDQ5WhcNMjYwMzEzMjAwMDQ5WjAzMTEwLwYDVQQD
EygyODczMDQ5NTI3MjM3MmFmOGFjZGY3MjFhODI1MGZlYTRlYjM4YjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndEacTgGryRaF0eH4plrtx5oNuX9
jHrl2lKlVImRDl0IYcCgYlT+1IGNAuM5h8zcsbek2qrKFd+8AAQtfdVyHWVlHoBf
jOaYCDPVm7wvxHkwG4qbcjCyIn04+C7svK2R4QSoyBhSVehCgyNSscN9QJ47H78J
ZuS4FCWD9rLu8XWWqqK/ZnI2EZUekd8CTZZux8jILnS9v4OMRAdkDVQjUUXOH1WF
mOmttQZbfP5ABML9Imq+NyIRmn8walY4IkKZAax+bV0K/ey2LscFQas2M2eTcdpL
+wU8vTpgHeM0/Vjm/d9RHQD4hhLYw182f1+v/pA41iwOtLsnPOVVm8tHpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChzBJUnI3Kvis33IaglD+pOs4thMB8GA1UdIwQY
MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt
MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi
LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0CINyYi
jNDfOBbeYawo2A5502G9wnWSdXSn3/f7F17BlJbLZJsKW5g+v1goH5BSTSIzwfMC
PJNq4uzath5i4q1zbclyxAe7J1zZKWHAFt7VSei+kE6V+W45ujOYerMbvL7Rz/ZR
/aYVuroNSh4U/PT0lkAKnUpnJ6/v/bbfqHRC80r5n9TCB4ILPm86azXQP7xrj9Kw
oyAKB8OAGII0Lt/mTigN1g9G5lsYSR4Yx8TJ8Z/RGIPjhQ2cA6PEGhx5D+2Vnu05
r8KyxW+K/D2b5G9oO8rSdU6RMRNO9s4AJ5fgJSeXuKG8//2vzum7mNhK5DpK0XXG
CvDKcOO8NuV7gA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:31:59 2026 by rpki-client