Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
File: KHSJcFRraILv-bc41w7-BsYBwzU.mft (raw, json)
Hash identifier: cdBg5X2jKcXQJzprIsgDyg2Wdn0UInAMl9t5UmDGPzs=
Subject key identifier: BD:D2:E6:D9:66:5C:22:14:2F:2E:0D:80:9C:30:F3:33:86:17:81:AC
Authority key identifier: 28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
Certificate issuer: /CN=28748970546b6882eff9b738d70efe06c601c335
Certificate serial: 01A12EEA6108EF9DCCF137B6F240829BB8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
Manifest number: 93
Signing time: Mon 12 Oct 2026 07:01:14 +0000
Manifest this update: Mon 12 Oct 2026 07:01:14 +0000
Manifest next update: Tue 13 Oct 2026 07:01:14 +0000
Files and hashes: 1: KHSJcFRraILv-bc41w7-BsYBwzU.crl (hash: qr91m2O+PtE4+j/TZ6ud8XOgyF6mnLwPVynMt0oN8B4=)
2: toC9TpCejZGoS5Aiy088ROsAylA.roa (hash: A+HnAnljtqd9QqU3SU6STVhVY4cLg0aMMIYBL3Zi0nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:ea:61:08:ef:9d:cc:f1:37:b6:f2:40:82:9b:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28748970546b6882eff9b738d70efe06c601c335
Validity
Not Before: Oct 12 07:01:14 2026 GMT
Not After : Oct 13 07:01:14 2026 GMT
Subject: CN=bdd2e6d9665c22142f2e0d809c30f333861781ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:5d:a9:53:b7:7d:cd:a0:85:8f:5f:bb:f7:
09:60:3c:59:54:04:0a:52:11:64:a7:30:f4:4a:76:
3a:91:0d:59:05:12:2b:24:5d:12:8b:5d:f7:e3:eb:
76:8f:ce:86:a6:39:75:30:9c:60:1c:65:21:ca:e3:
64:b2:c7:40:d8:59:db:f5:70:e7:15:3c:bc:33:1a:
b3:ef:8f:0b:ee:b4:2d:ce:12:f1:78:de:fd:20:91:
33:cb:25:fa:e9:78:d1:dd:e4:b2:d0:ec:6c:ec:37:
1d:4b:de:1f:9d:86:3c:8f:33:50:2a:c4:95:c8:ca:
7a:5a:4c:a7:3e:08:bf:6c:85:ad:52:40:bd:51:55:
19:16:66:a2:e2:45:1b:78:7b:64:dc:c7:90:b7:a5:
3b:9f:62:7b:74:44:db:e9:8d:ce:6f:c8:b6:ce:21:
50:7d:b7:bd:ae:fe:6a:da:06:e0:c3:16:9a:2c:69:
ce:e8:1c:8b:7c:dd:0c:cd:d3:2d:35:ec:31:d7:8e:
66:85:4a:57:5d:88:ee:55:1c:2a:47:df:2d:1b:8f:
27:df:7d:c9:d0:61:1b:22:51:3e:83:42:5e:cb:9f:
17:9a:d1:c8:a6:84:0f:92:ad:d7:64:48:f9:34:14:
3d:f0:cf:c2:9f:0f:18:48:a6:ec:54:fd:d0:c7:1e:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:E6:D9:66:5C:22:14:2F:2E:0D:80:9C:30:F3:33:86:17:81:AC
X509v3 Authority Key Identifier:
keyid:28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e4:76:fb:0c:1b:38:7c:e8:30:87:ed:37:08:68:9a:d2:ae:
49:6c:14:0c:64:1c:4a:1b:50:16:62:0b:11:93:91:ca:7f:a5:
7a:e7:1a:8c:90:99:0e:6f:16:79:bf:63:06:42:c6:eb:90:e4:
bd:6c:69:f8:af:5e:5e:e7:3d:5c:e8:da:fa:f1:88:24:cd:26:
bc:a4:9e:79:e6:69:fa:a5:bc:fa:78:c9:f3:f2:86:60:00:44:
1d:32:ad:ca:be:ae:3e:44:18:0d:ab:43:c9:95:37:69:bb:b2:
88:9a:74:3d:ed:bb:82:a9:47:0d:dc:6e:c8:56:11:86:ce:79:
e6:36:8f:a3:b5:3d:24:2e:b0:ad:85:1c:69:70:cb:01:e9:a8:
d6:79:25:18:cc:64:9f:33:7f:73:df:1a:c4:79:dc:1e:24:26:
88:45:f9:b9:7f:ad:64:f1:a5:af:e8:ac:9c:3c:eb:bd:ac:69:
9c:cf:b7:1c:e7:0b:f1:72:2c:32:c6:10:c5:11:75:e0:24:ae:
3f:d7:f0:e3:fd:b4:8e:a1:eb:4b:d8:aa:95:39:2a:07:37:21:
40:34:ca:69:68:51:60:45:5f:3d:90:47:27:f5:b6:41:d6:20:
b8:bd:7d:8f:b1:96:1e:30:6b:7e:fe:6e:38:05:0b:2e:24:78:
2f:45:ac:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEu6mEI753M8Te28kCCm7jTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzQ4OTcwNTQ2YjY4ODJlZmY5YjczOGQ3MGVmZTA2YzYw
MWMzMzUwHhcNMjYxMDEyMDcwMTE0WhcNMjYxMDEzMDcwMTE0WjAzMTEwLwYDVQQD
EyhiZGQyZTZkOTY2NWMyMjE0MmYyZTBkODA5YzMwZjMzMzg2MTc4MWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmddqVO3fc2ghY9fu/cJYDxZVAQK
UhFkpzD0SnY6kQ1ZBRIrJF0Si1334+t2j86Gpjl1MJxgHGUhyuNkssdA2Fnb9XDn
FTy8Mxqz748L7rQtzhLxeN79IJEzyyX66XjR3eSy0Oxs7DcdS94fnYY8jzNQKsSV
yMp6WkynPgi/bIWtUkC9UVUZFmai4kUbeHtk3MeQt6U7n2J7dETb6Y3Ob8i2ziFQ
fbe9rv5q2gbgwxaaLGnO6ByLfN0MzdMtNewx145mhUpXXYjuVRwqR98tG48n333J
0GEbIlE+g0Jey58XmtHIpoQPkq3XZEj5NBQ98M/Cnw8YSKbsVP3Qxx5cFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3S5tlmXCIULy4NgJww8zOGF4GsMB8GA1UdIwQY
MBaAFCh0iXBUa2iC7/m3ONcO/gbGAcM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hTSmNGUnJhSUx2LWJjNDF3Ny1Cc1lCd3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wNzgzZDQtNTQxMy00ZDZkLTkxYjMt
N2JjNDJjMTliNDhlLzEvS0hTSmNGUnJhSUx2LWJjNDF3Ny1Cc1lCd3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wNzgzZDQtNTQxMy00ZDZkLTkxYjMtN2JjNDJjMTliNDhl
LzEvS0hTSmNGUnJhSUx2LWJjNDF3Ny1Cc1lCd3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauR2+wwb
OHzoMIftNwhomtKuSWwUDGQcShtQFmILEZORyn+leucajJCZDm8Web9jBkLG65Dk
vWxp+K9eXuc9XOja+vGIJM0mvKSeeeZp+qW8+njJ8/KGYABEHTKtyr6uPkQYDatD
yZU3abuyiJp0Pe27gqlHDdxuyFYRhs555jaPo7U9JC6wrYUcaXDLAemo1nklGMxk
nzN/c98axHncHiQmiEX5uX+tZPGlr+isnDzrvaxpnM+3HOcL8XIsMsYQxRF14CSu
P9fw4/20jqHrS9iqlTkqBzchQDTKaWhRYEVfPZBHJ/W2QdYguL19j7GWHjBrfv5u
OAULLiR4L0WsgQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 16:31:10 2026 by rpki-client