Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: 3/jjO4DeA8XUp8Ng+xAkEXUkWy+J1vrCMjxbQH/2D9M=
Subject key identifier: FC:73:05:B5:52:EB:37:69:FC:1B:88:82:4F:3E:80:39:64:50:1E:14
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019D3865D32CBDF70C999E2A08C37AAF8B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 12DB
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: DrIlC2gAjiHMS5PxVbexip4Yu4Y.roa (hash: SgZUep6gaG10ZpC2hI1Q2bopt3f37k+OuHhh+4P/NqE=)
2: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: yk79AWsH8gMOf/CVlx+V0ZYb3uJ4YwwOm8VGC62CktY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d3:2c:bd:f7:0c:99:9e:2a:08:c3:7a:af:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=fc7305b552eb3769fc1b88824f3e803964501e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:19:ef:04:79:29:8e:d1:cf:b1:fd:bf:1e:27:
de:a6:c8:3c:70:6d:70:85:d8:33:2c:ab:1e:83:a9:
65:7e:09:b3:ea:60:e8:29:f0:a1:79:e5:69:bf:9a:
3f:58:56:68:f9:2a:6c:cd:7f:98:9a:fa:7c:9e:f4:
67:1a:a2:96:55:e2:23:c3:5d:7c:55:a0:21:01:83:
ff:67:f5:84:00:50:df:a0:f6:29:24:be:14:26:f0:
d4:8a:5f:e6:67:f7:47:55:7a:2e:51:b5:c4:8a:89:
0b:72:0e:93:80:52:5c:c1:85:cb:0f:c1:96:8c:1b:
3a:68:81:3e:5e:b7:df:67:29:fd:b8:d8:fe:b8:ce:
2d:78:d7:56:2f:51:62:ec:bc:ca:f7:2d:c7:7a:37:
c7:67:ca:f6:13:93:03:17:54:8c:39:1b:35:50:6a:
60:57:94:c4:f1:dc:90:a9:61:86:0f:50:e2:96:7c:
fc:0a:5e:ac:21:6b:5e:74:3c:48:14:1e:5b:fe:ea:
ca:82:93:08:c9:fc:f1:24:4e:ea:8d:e1:62:8e:07:
6e:6e:3b:4b:94:8f:56:db:17:84:01:58:45:49:bc:
ff:61:85:42:07:3d:59:53:14:41:61:f0:b8:b3:ca:
60:9d:9c:a4:a7:8a:eb:b6:eb:2f:c2:db:cd:1c:4b:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:73:05:B5:52:EB:37:69:FC:1B:88:82:4F:3E:80:39:64:50:1E:14
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:b3:fd:ca:78:38:c5:31:4a:a3:cc:07:e0:e3:73:e1:f5:
29:64:8b:9c:31:0e:af:18:4c:1b:e3:81:88:ba:da:8b:fa:57:
63:27:4c:70:4d:36:c1:a0:c4:a3:8d:38:1c:8f:58:1d:36:1c:
64:1a:80:88:1e:69:71:50:d9:90:a2:07:db:e8:05:ee:d4:d8:
8a:c0:b8:1b:22:7a:6a:bc:55:d9:18:b0:cd:6e:ed:45:0a:69:
64:13:8b:43:0c:0d:cf:88:66:54:74:5c:cf:4d:c8:51:02:d2:
37:03:ee:d9:84:92:90:1f:fa:23:aa:dd:b6:e6:4e:60:a0:98:
5b:4e:a7:b2:87:5e:5c:1a:73:3e:88:a5:ce:95:c8:7b:a1:e4:
ca:29:84:6a:83:05:5e:4c:66:bb:ad:9e:3b:d0:5b:ec:c0:2f:
a2:ea:97:86:67:39:78:31:fc:f7:58:1a:08:71:f2:6f:96:fd:
87:95:3a:63:81:fc:0d:37:41:44:56:b9:52:e6:b0:d5:ad:a8:
58:02:44:b0:b1:5f:07:02:3c:58:9e:76:a3:52:03:31:29:bf:
cd:e3:d9:17:09:79:4c:05:f8:1c:18:82:2c:66:94:06:c1:f9:
db:a6:57:46:ea:47:5f:cc:32:ef:c0:f2:5f:ee:ee:6c:a4:80:
ef:9e:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:22 2026 by rpki-client