Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: LpZjcGevlKLmA0P5I7eCVF8+KIxa/cNXBUf57x6l1pg=
Subject key identifier: EF:EB:02:51:D7:DF:D7:C8:46:32:9E:CE:DD:DD:FF:E1:E6:0E:FA:3B
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 01A18751AA437FF9C1E4B9D92AD08E2514C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 06AF
Signing time: Thu 29 Oct 2026 11:00:38 +0000
Manifest this update: Thu 29 Oct 2026 11:00:38 +0000
Manifest next update: Fri 30 Oct 2026 11:00:38 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: 7mOoHXaGR1xRYL8tUvb+OLyLmIudJih65r3DJBsGZQA=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:aa:43:7f:f9:c1:e4:b9:d9:2a:d0:8e:25:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Oct 29 11:00:38 2026 GMT
Not After : Oct 30 11:00:38 2026 GMT
Subject: CN=efeb0251d7dfd7c846329eceddddffe1e60efa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:8c:ba:c3:7d:6d:a3:b0:ee:d0:94:b0:97:
5d:df:82:01:74:10:5f:2a:4c:09:6d:ac:50:ec:ad:
1c:49:1c:22:41:f5:fe:05:81:50:44:e0:78:cb:95:
d7:b2:21:d5:db:63:d8:6c:5c:20:94:e1:fd:0f:b4:
7f:f0:5c:eb:8e:12:ff:37:4a:73:a3:bf:12:d7:fd:
e3:81:9b:26:d7:8a:41:c6:87:80:62:47:96:e2:88:
22:59:7a:59:33:9f:41:84:37:04:8a:5b:50:8e:a2:
aa:68:03:78:45:b0:c6:6e:f4:12:6f:51:03:0d:f5:
ba:21:59:aa:6a:f4:e6:2c:ae:e6:1c:44:2c:35:97:
4e:78:72:d4:44:df:1b:6f:41:dc:55:9b:31:53:59:
87:0d:a1:a6:f7:78:3b:e0:2e:13:73:ab:25:f7:36:
0f:58:1f:09:08:83:e8:07:1f:48:16:f4:11:01:7f:
59:14:45:60:6a:65:bd:ff:67:85:2e:90:05:1f:9d:
a3:df:0c:a0:09:2a:15:07:3c:52:04:5c:b7:8b:bc:
0e:d8:d3:82:fe:f4:8e:3d:16:97:dc:da:bd:c3:5e:
bb:08:cb:ea:bb:dd:9a:7d:ed:44:8a:79:39:96:8e:
cc:52:70:e6:2c:10:6f:a7:04:e9:5e:87:f0:15:c1:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EB:02:51:D7:DF:D7:C8:46:32:9E:CE:DD:DD:FF:E1:E6:0E:FA:3B
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ef:b6:ed:9e:25:59:49:c6:55:0e:c1:03:23:42:99:cd:be:
8d:20:bc:e4:26:fa:ca:ae:4f:3f:d9:56:ca:af:43:69:0b:64:
22:c0:d7:25:ab:ad:15:b5:a4:ee:b6:80:85:a8:66:54:ae:b3:
5a:8a:ac:24:5f:c3:a4:a4:c5:c3:15:90:de:5e:52:ed:51:84:
bb:65:5f:26:8d:5b:09:5b:6e:94:41:19:fa:0b:fb:6f:ef:e0:
f8:a8:37:22:87:b0:dc:75:6c:50:5c:0e:60:b4:c8:71:14:20:
81:6d:c5:b5:11:18:7d:a5:5d:df:db:b3:ed:28:59:b0:30:20:
31:ec:3a:b7:d7:67:8a:bb:b5:6b:fa:0d:e3:52:36:61:22:c0:
20:1c:a9:fd:4d:fd:53:47:1e:f8:aa:40:08:cf:f4:b6:79:ed:
97:e6:3d:4b:34:27:32:b7:42:dd:8e:ee:68:89:ec:d0:6e:c5:
c6:3f:0c:25:89:16:3c:67:d1:4f:a9:2b:90:7b:aa:79:9e:bd:
6c:e2:36:af:33:e1:21:bd:e0:9b:b5:2b:65:0f:45:3a:86:d3:
f2:d4:a4:16:56:77:d6:52:1f:0d:47:0a:61:df:b2:35:de:8e:
9b:25:bb:5a:e7:52:8d:eb:de:92:39:64:41:82:eb:ff:7e:75:
f0:38:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:06 2026 by rpki-client