Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
File: KhH6IvVmXbh21C9wHdf0uikMoWs.mft (raw, json)
Hash identifier: h57P1x3n9LktX+f/tbUPaAeJz05xc2Yva87ioRZELQQ=
Subject key identifier: D7:35:0A:78:50:E8:D6:74:B1:6A:D7:94:80:2B:80:F6:2D:60:F8:97
Authority key identifier: 2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
Certificate issuer: /CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Certificate serial: 01A1754B848735A195A16F4E43E6E0DE91A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
Manifest number: 99
Signing time: Sun 25 Oct 2026 23:00:45 +0000
Manifest this update: Sun 25 Oct 2026 23:00:45 +0000
Manifest next update: Mon 26 Oct 2026 23:00:45 +0000
Files and hashes: 1: KhH6IvVmXbh21C9wHdf0uikMoWs.crl (hash: o7WeNIOC/v6C+sfZursfQget4f+FSA33gF6NgzLQpIE=)
2: ehnz7mg_oQ2vy8uW7-EY6KjMfv8.asa (hash: sLCKF9FnIe6mVq71g7Z1KhrNB/Y5bi6HgjGXEqBr/Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:84:87:35:a1:95:a1:6f:4e:43:e6:e0:de:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Validity
Not Before: Oct 25 23:00:45 2026 GMT
Not After : Oct 26 23:00:45 2026 GMT
Subject: CN=d7350a7850e8d674b16ad794802b80f62d60f897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:ae:5a:8a:6e:c7:65:75:37:9b:91:a3:41:
9a:0f:f9:65:7e:29:72:88:d0:86:b3:6b:c3:fa:1d:
51:32:0a:8b:14:df:27:c1:fc:9f:d5:13:63:f2:c8:
3d:69:1d:b7:46:44:94:e1:95:d6:23:d8:c4:53:58:
60:af:f8:3a:74:f5:70:66:74:41:57:f3:37:4a:3d:
91:dd:68:b7:4e:01:d7:5a:5c:30:30:49:ea:4c:db:
31:a6:38:8a:4b:30:f5:7c:c1:7e:6d:45:f6:b3:ff:
fd:c6:51:61:dc:79:5d:ee:ad:79:65:fe:bc:98:21:
9c:c7:ba:2d:3a:33:87:bb:d7:b6:62:ca:99:4a:42:
13:f3:a1:f5:36:e3:59:db:6d:6a:01:de:05:e8:ad:
8b:6b:5e:86:e8:ab:90:a0:e5:19:2b:9a:8d:ca:77:
3b:96:ac:db:f4:26:fc:4b:8f:65:a4:9e:6f:95:d8:
52:16:16:09:95:ea:e5:56:2e:31:4f:56:a1:44:ed:
43:31:91:86:1f:8f:df:3d:c0:94:2c:75:f8:b4:3c:
cf:ac:fa:dc:df:50:e4:d3:74:2c:c4:46:b4:13:24:
e3:3b:eb:b8:c3:a5:1c:6f:25:14:a6:71:74:32:d7:
fa:67:b7:c4:11:f3:39:8b:e6:d8:28:5d:92:a1:a6:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:0A:78:50:E8:D6:74:B1:6A:D7:94:80:2B:80:F6:2D:60:F8:97
X509v3 Authority Key Identifier:
keyid:2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:df:c4:5f:13:a0:1b:fb:75:f9:eb:6e:ad:10:85:e9:e2:e2:
d3:bd:a9:94:9d:41:ba:4f:62:fb:31:19:13:5c:bc:cb:16:97:
4c:56:eb:60:21:ba:fa:b7:31:69:c7:59:f6:7e:02:bd:53:04:
fb:aa:df:97:41:0e:59:84:3d:ca:b1:78:30:64:6c:03:90:d7:
be:59:16:9a:0d:01:a3:dc:10:c9:63:a0:cc:06:2e:ec:de:8f:
53:68:af:00:ac:f4:7d:62:4c:08:65:71:5a:dd:7b:8a:50:07:
3c:4a:95:43:95:f3:ad:64:7d:61:f9:2c:a3:10:aa:a2:76:1f:
9f:62:da:d4:4c:5a:5a:b5:00:af:aa:07:77:fd:d3:19:4f:16:
be:03:e6:29:19:45:7b:16:bc:83:3c:e2:be:04:de:f2:92:74:
cc:73:30:d4:cc:e8:bb:60:d3:ae:01:a2:20:e4:cc:fc:eb:7a:
be:08:e9:56:9b:60:77:99:c8:cd:01:e0:0f:05:d6:99:09:2c:
8b:9c:12:b7:d7:7d:0c:97:19:0a:d8:2c:0c:a6:45:98:f8:84:
20:df:fc:e7:d0:4f:6c:3f:a4:c2:17:c0:f9:5f:ec:18:ae:82:
cd:8a:40:9a:e1:79:0d:55:92:ae:f2:09:98:95:d7:fa:c6:9e:
95:be:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:21:15 2026 by rpki-client