Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: cXUPA/KxnCLOeWMggc9+acGUEKuOZ/nRx+b3czITrFs=
Subject key identifier: B5:BB:F4:82:65:C3:65:09:16:FC:BB:4C:A3:37:43:54:C3:C2:78:81
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019E31F3CA249CFFF3AE97E324927D22B155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 135D
Signing time: Sat 16 May 2026 18:02:00 +0000
Manifest this update: Sat 16 May 2026 18:02:00 +0000
Manifest next update: Sun 17 May 2026 18:02:00 +0000
Files and hashes: 1: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=)
2: cuKBdXTr4qzygMyG_xdsVAondIc.roa (hash: gx6P2REt7/T1YdadU0I1WyXfvK+m2EoLKxa8au7Wlyw=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: 75flUls3mxr5SwMY/ytcWdDnu+c5zGSVh6SXgTZGI5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:ca:24:9c:ff:f3:ae:97:e3:24:92:7d:22:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: May 16 18:02:00 2026 GMT
Not After : May 17 18:02:00 2026 GMT
Subject: CN=b5bbf48265c3650916fcbb4ca3374354c3c27881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b8:50:6d:a7:74:3c:02:95:ec:64:e8:80:2b:
8f:67:ab:da:7f:5e:e3:16:3b:b0:34:17:3d:61:93:
6a:ef:19:26:f9:87:a2:cf:d2:16:93:6f:a1:6c:fb:
44:03:82:7e:5f:9c:92:ed:8e:b3:b2:4a:40:5b:13:
1b:ee:ea:b2:db:2c:4c:5e:c8:03:b7:1f:d0:a9:99:
8f:46:cd:ea:c1:e2:cd:48:ad:42:e0:26:ef:e7:a8:
a0:e8:a4:cc:40:6e:a4:89:cc:3d:b3:e2:75:9b:27:
f5:34:0a:cf:d6:c8:a9:11:e3:0f:02:ae:cc:a7:c6:
18:25:eb:cd:aa:ac:ae:ee:63:71:99:c9:b4:85:41:
4a:f4:f6:2f:f8:d0:0a:c7:a9:7b:14:d9:64:22:51:
df:5d:45:ad:e7:7c:40:5d:c7:2a:a9:c4:89:ae:60:
7e:d4:d3:dc:84:f5:29:d2:87:91:86:95:d8:fd:4a:
72:b7:2f:ad:d8:90:4c:dc:ce:89:85:8e:77:dc:73:
b1:05:c8:43:5c:2f:39:f9:2d:24:53:b8:84:b3:4a:
49:b8:49:48:27:99:22:f4:fe:08:9f:9b:55:a6:b0:
6f:f6:77:a3:d6:4d:00:ef:50:74:e2:4b:72:55:83:
bb:90:03:d3:d4:8b:9e:c6:17:58:13:45:78:6f:50:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:F4:82:65:C3:65:09:16:FC:BB:4C:A3:37:43:54:C3:C2:78:81
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:63:38:dd:38:88:8a:81:49:18:46:98:78:0d:d4:c1:ed:e0:
6b:55:b1:4a:24:bc:9e:69:a1:e5:ae:64:9b:9d:a2:f6:85:74:
c6:4c:9d:f1:5e:ec:a4:1f:31:ef:9b:2f:4c:c8:d8:1c:6e:32:
35:2f:35:cd:13:4d:91:44:42:55:ee:6d:b8:61:b9:ef:b3:92:
d0:95:00:27:c7:ea:16:a0:88:e3:b1:5c:55:30:02:8b:4a:cd:
b0:bc:3b:53:ef:b4:f7:e1:af:40:f1:b4:8d:67:83:75:11:cf:
19:3f:45:86:4e:e8:b9:b5:73:09:cb:bf:1d:04:8b:ab:0d:a6:
70:a4:b9:bc:ef:5b:56:86:a0:86:23:fc:5c:dd:88:61:67:70:
a2:f6:f3:0c:3b:a5:aa:6d:ef:e9:c4:18:67:7a:5d:96:bf:c3:
f9:af:d2:c1:e5:c0:e9:7d:93:39:28:68:95:d7:5a:c2:2b:de:
18:36:37:21:7e:4b:53:45:88:a0:64:24:6b:e2:71:e1:56:c3:
09:42:55:da:f6:62:86:6a:1d:d7:ca:87:7f:03:f1:c1:35:e4:
21:d9:0a:a9:29:c4:eb:75:9b:81:eb:7d:bd:3b:06:e0:0a:ef:
1c:6b:76:11:f8:0d:56:88:0e:ab:0c:f0:84:9c:f8:e2:3f:88:
80:fb:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:20 2026 by rpki-client