Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
File: KhH6IvVmXbh21C9wHdf0uikMoWs.mft (raw, json)
Hash identifier: H4o8dzcL3mUq1mOmjiFBJTKJwKM/ebhxkyx1qcHIxwI=
Subject key identifier: 14:7D:91:F5:97:83:7F:01:D2:EF:52:80:B0:69:AB:63:8B:DD:5F:CC
Authority key identifier: 2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
Certificate issuer: /CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Certificate serial: 01A06EA7C37B5748067568E83585B498AFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
Manifest number: 11
Signing time: Fri 04 Sep 2026 23:01:23 +0000
Manifest this update: Fri 04 Sep 2026 23:01:23 +0000
Manifest next update: Sat 05 Sep 2026 23:01:23 +0000
Files and hashes: 1: KhH6IvVmXbh21C9wHdf0uikMoWs.crl (hash: M/7RE8ao3r4Vz9oweE3Kk5cfjeYXRM6/1uCQOsNDHCk=)
2: ehnz7mg_oQ2vy8uW7-EY6KjMfv8.asa (hash: sLCKF9FnIe6mVq71g7Z1KhrNB/Y5bi6HgjGXEqBr/Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:c3:7b:57:48:06:75:68:e8:35:85:b4:98:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Validity
Not Before: Sep 4 23:01:23 2026 GMT
Not After : Sep 5 23:01:23 2026 GMT
Subject: CN=147d91f597837f01d2ef5280b069ab638bdd5fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:48:df:cb:f8:45:7d:bd:c2:8f:09:76:7f:
5d:cd:65:7c:28:09:a9:a3:70:6b:a9:d3:bb:ee:15:
9e:3c:57:eb:05:98:c1:f2:8e:21:8a:c2:3e:aa:6e:
c0:0d:e6:de:0b:d5:a4:04:73:78:72:d4:0c:cc:57:
8c:b9:86:00:4e:a5:44:29:dc:d3:d8:4f:4e:2e:f2:
8c:67:1f:87:7c:ca:0c:3b:67:4e:e6:f5:32:fe:ff:
ca:45:95:31:f6:03:5b:e0:19:ec:9d:be:07:16:fb:
2a:c3:b4:fe:a9:45:49:54:f6:6b:89:13:99:08:9d:
dd:52:84:db:92:b0:7e:3e:85:68:58:5b:38:42:a9:
e5:7f:1c:40:84:2b:b7:7c:f7:01:80:e1:c7:b8:43:
c6:7b:19:48:30:e5:09:2d:4c:45:57:e6:74:fb:b7:
00:b8:4a:99:b8:67:01:12:e9:9f:38:f8:11:e3:f5:
7b:c6:f6:8c:9e:8a:77:11:12:b8:48:f5:c0:0a:b0:
7e:29:e0:cf:c7:cf:5c:bc:a4:60:46:08:5f:97:90:
01:9c:b4:ca:5b:e6:b6:84:f4:88:9d:49:a8:f6:3e:
26:f3:a3:70:a3:80:eb:4a:a4:42:64:d2:18:7a:06:
d8:fb:ec:e7:4b:de:27:ce:8c:ed:13:df:f4:00:6a:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:91:F5:97:83:7F:01:D2:EF:52:80:B0:69:AB:63:8B:DD:5F:CC
X509v3 Authority Key Identifier:
keyid:2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c0:65:5d:52:00:0f:16:78:85:1a:f4:f5:46:e9:52:56:7e:
66:03:2f:56:6e:92:89:97:cf:6e:d9:bf:e5:10:74:39:d1:c8:
95:df:da:27:b8:ec:bc:29:b0:9b:7e:aa:fc:e3:1c:43:3b:fb:
be:54:74:5a:f4:d0:03:4d:bf:b3:0c:ca:6e:7b:62:5c:c5:1e:
3f:29:63:fc:86:03:a4:33:1c:f1:55:10:82:2f:63:a2:72:0c:
af:fc:87:5f:dd:54:4d:dd:5c:a0:d4:ba:f0:72:fe:ad:3f:f6:
ad:8c:bf:97:9d:cc:2c:8e:1e:6e:43:dc:b0:e5:c2:1f:70:40:
a0:b2:ef:cf:11:64:2a:59:be:70:0c:4d:c5:e2:b9:ae:86:a5:
60:da:02:97:c9:52:e8:c3:5d:c6:91:12:e6:15:ae:1a:3e:6d:
89:3a:34:58:a1:46:40:65:c3:00:fe:d5:16:30:ff:a2:1b:a1:
05:4c:8a:53:c4:31:72:62:7d:52:0d:ba:4d:99:4f:dd:19:ba:
41:ac:55:d4:68:b4:21:3a:2b:3f:33:b6:cd:f0:f4:b7:49:02:
83:73:fe:18:7b:4a:82:0c:ca:4d:4b:1d:fd:00:a7:91:b3:09:
0a:35:9d:72:a1:d0:d7:e3:c3:fb:c8:51:09:66:10:ad:0b:2d:
53:e5:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:48:54 2026 by rpki-client