Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
File: KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft (raw, json)
Hash identifier: +bLEGaJxlWdAtRhb/zvRbmDeJV50O7PzVZQb+N4oIxc=
Subject key identifier: 3B:37:1A:92:D3:64:F8:9B:D9:1C:D2:6B:BE:B1:C5:38:95:BA:09:66
Authority key identifier: 28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
Certificate issuer: /CN=287b8e2b920bff440a8f518744527146fb87e930
Certificate serial: 01A0FC7DE020517FDCFBB9FCCC9AA4444FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
Manifest number: FC
Signing time: Fri 02 Oct 2026 12:01:42 +0000
Manifest this update: Fri 02 Oct 2026 12:01:42 +0000
Manifest next update: Sat 03 Oct 2026 12:01:42 +0000
Files and hashes: 1: IFW7hqO5GTL9KLcDfHf9JjuxeUc.asa (hash: WD3Stybi3qSMyZoe+Iv7eOPoBR7+JFZjhBMR2qYQzEs=)
2: KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl (hash: EtjeQqHr2POE7H+lvR5cOvcGiRnAgQIprunhXQ1dQLc=)
3: ju68EpXZevf4Hb2wWFqdPmV352k.roa (hash: Ck2VmIwjqmui7Sus7741mQyUCGm4+who9Co6bDTtcl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:e0:20:51:7f:dc:fb:b9:fc:cc:9a:a4:44:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287b8e2b920bff440a8f518744527146fb87e930
Validity
Not Before: Oct 2 12:01:42 2026 GMT
Not After : Oct 3 12:01:42 2026 GMT
Subject: CN=3b371a92d364f89bd91cd26bbeb1c53895ba0966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:c3:76:87:09:e2:85:8d:22:82:fe:c2:2b:
b3:08:86:6a:2a:e6:e0:60:5b:8e:ee:f2:c8:6b:f3:
99:40:3d:a8:b3:6d:35:31:9d:5e:e2:79:de:da:ca:
e0:be:de:63:59:3f:87:c1:ba:1a:12:8d:e8:cf:95:
74:70:e3:ed:aa:d6:95:aa:e0:3e:b1:a4:d0:be:5e:
e7:80:31:35:2d:64:1e:a8:af:a0:8f:ab:9c:10:1f:
95:73:6f:f1:6c:e6:45:26:ad:10:cd:d1:cb:82:6d:
44:18:32:05:7c:b0:d9:0a:46:eb:fc:25:71:17:33:
94:ac:20:b9:de:ca:4c:cc:06:ef:1f:bf:5a:00:d9:
c9:8e:ff:07:84:98:40:7a:17:ed:91:06:5c:4d:59:
9c:b2:3c:e2:46:88:b0:da:af:c0:cc:2d:41:5c:5c:
7f:5f:61:76:4d:e7:ab:93:16:4d:9b:83:d5:9d:f4:
a6:cd:88:3b:ba:54:23:98:a1:ab:30:16:d1:18:22:
4e:83:e2:e3:6f:dd:06:3a:07:1d:d7:d7:de:2c:12:
16:90:09:89:d0:24:f0:74:54:88:dd:b5:69:2f:1e:
21:4e:d8:58:35:93:f2:ef:7c:80:7f:09:08:6a:ff:
bc:06:86:27:98:ad:20:ca:39:92:a8:4e:2d:8c:4c:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:1A:92:D3:64:F8:9B:D9:1C:D2:6B:BE:B1:C5:38:95:BA:09:66
X509v3 Authority Key Identifier:
keyid:28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:84:66:e3:70:5e:5b:77:6e:38:2d:ba:6b:78:70:be:dc:29:
06:21:f8:f0:d6:83:68:36:93:47:b2:3d:c6:2a:08:5b:e5:fb:
59:81:62:a1:e9:8b:45:de:9b:74:81:27:18:3b:2a:22:61:15:
aa:74:e0:6d:59:f8:e9:b1:55:13:ab:7c:08:d4:8b:c3:ce:45:
e2:30:2d:7e:10:42:3f:e0:ad:f5:0f:23:94:20:89:e5:17:c0:
4c:cf:c7:85:19:fc:d9:1f:ce:8a:12:be:fa:47:e7:aa:15:ac:
2d:6e:fa:1b:c1:13:48:c2:0f:68:4e:f0:b9:c8:2b:5c:89:3f:
f8:4a:b8:5d:b2:75:1c:17:4b:3f:23:f2:fd:ec:46:d6:66:a8:
1e:26:a8:43:04:ea:48:1d:73:ea:a3:0c:48:83:3b:bf:cb:05:
91:62:12:7a:82:23:3a:cd:9a:30:e8:1b:f0:f8:09:ab:fc:ff:
76:c4:bd:23:06:b7:c9:4d:31:d9:40:a1:1c:ef:cb:56:f8:e9:
ad:38:c3:d5:54:d3:db:bc:e4:76:f3:e2:45:a4:c8:a9:cc:2c:
73:09:a8:e6:91:ba:69:a1:12:27:c2:e9:3e:0e:3a:d9:2b:23:
e1:f0:e5:d9:0a:9d:cd:16:52:3c:96:79:c9:a9:23:be:fb:8c:
89:ea:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 23:23:55 2026 by rpki-client