Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: MHTELh6jfWd/j5FIQ8EdZMjzWPtLscfDQLVf1XpCkjA=
Subject key identifier: F9:BF:AB:60:20:D5:DC:7E:6A:04:D5:C3:40:2A:68:F2:8B:A9:6F:BE
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 019DAFB3199C1588ABD540EA6047A56C1132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 18D0
Signing time: Tue 21 Apr 2026 11:00:43 +0000
Manifest this update: Tue 21 Apr 2026 11:00:43 +0000
Manifest next update: Wed 22 Apr 2026 11:00:43 +0000
Files and hashes: 1: 2VrXKMaV4hFStFOxu_UQS5okGCc.roa (hash: ysQxFYSk2THDKp3xdvckm0rpXg2xlVHGITzLw9rPwIQ=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: d3wCJPtnIkzLO9llR2Em/J0XeVzwAnqYCcOJVWt5Z40=)
3: Stpleb6OTPqMfH86_X0X4TcY0xw.roa (hash: vOMEgiat3XRiljAMfWkhr6z+Hs+WLCtckYdZXT9W3aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:b3:19:9c:15:88:ab:d5:40:ea:60:47:a5:6c:11:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Apr 21 11:00:43 2026 GMT
Not After : Apr 22 11:00:43 2026 GMT
Subject: CN=f9bfab6020d5dc7e6a04d5c3402a68f28ba96fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:5c:09:11:83:8e:32:a9:be:92:50:d5:95:
c1:62:c7:78:cc:4c:83:86:6e:bc:c2:05:e5:ed:22:
06:81:67:89:68:d0:de:85:5e:6f:f7:88:c6:91:84:
a3:c6:2f:92:43:fe:eb:f8:97:19:8d:db:0d:a1:ed:
a2:4f:bf:46:85:65:c9:2f:c3:92:79:61:ef:ae:8a:
d5:43:99:f7:dd:99:2b:00:7e:4d:e3:57:9a:7d:74:
06:45:82:11:cf:52:a7:19:c1:99:9f:ce:f4:b7:c7:
d2:35:d0:ed:13:68:fc:11:91:8d:63:17:35:fd:c8:
36:45:bb:b0:b5:93:e5:55:54:83:d9:6a:cf:91:7a:
e6:da:2b:07:7c:b7:42:d7:bf:b9:a8:0d:f8:11:a8:
d7:bc:67:dd:cf:b9:e6:c9:20:01:e8:7b:85:99:29:
8b:6d:6a:22:a2:a0:9d:33:bf:2d:fd:d2:9a:4f:ed:
c5:de:13:29:87:97:4e:3d:1b:99:55:44:c0:67:75:
45:c8:85:5e:39:d0:7b:a9:b7:c6:2e:a7:b3:f7:f3:
e4:f5:a0:ea:26:3b:55:01:1f:e8:de:5b:6b:ac:e7:
5e:77:38:ac:e1:bf:f7:d2:cf:99:27:a4:ca:95:da:
8a:2d:a0:a7:aa:12:19:79:72:55:70:9d:e3:e3:9a:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BF:AB:60:20:D5:DC:7E:6A:04:D5:C3:40:2A:68:F2:8B:A9:6F:BE
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e3:cb:45:28:42:d2:d8:40:96:20:4f:70:a6:9c:e7:0a:95:
32:62:cc:fd:8e:31:60:d8:a4:3f:2a:63:85:89:c2:a2:73:a7:
3e:28:4c:83:57:d6:a0:18:5a:5e:fe:1c:4d:16:5d:08:43:4b:
95:6f:4a:81:20:3e:b4:a8:d4:b4:e7:1a:cc:3c:43:c6:1c:6d:
8b:87:d6:ed:f1:f8:08:bf:e4:46:89:a0:87:ef:f2:cd:87:1f:
04:02:9f:d0:e2:83:29:2a:14:e4:9a:d5:c3:ae:99:c2:6a:a7:
4d:17:83:8d:e3:4e:0e:ce:e3:66:f2:18:d4:26:d4:40:d3:90:
6c:69:88:e2:4b:98:68:9b:f5:93:93:34:b6:5c:0f:13:83:ba:
6e:69:83:bd:71:cf:d8:56:ce:c5:d5:bd:79:50:f3:32:7c:dc:
91:f7:da:d8:9b:57:9f:df:58:c2:b4:77:46:94:36:f2:e5:d3:
a0:17:8a:b3:1d:67:a1:51:fc:ee:5a:99:49:ff:d2:f8:f0:8c:
fc:c3:6b:56:5d:cd:6f:94:5c:ee:2e:c5:c3:7d:5e:6d:d8:8c:
47:4b:7b:9b:01:f2:fa:a4:a5:0b:4f:e9:0e:7b:75:a5:e6:c6:
4e:7d:83:ba:42:cd:f7:f9:2f:17:50:41:62:b0:b3:bc:20:a7:
ea:36:aa:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2vsxmcFYir1UDqYEelbBEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzVmMTg1ODIzZGJjNmE4MmQxMDViM2NhMTYwNzdkYjU3
MjkzNzcwHhcNMjYwNDIxMTEwMDQzWhcNMjYwNDIyMTEwMDQzWjAzMTEwLwYDVQQD
EyhmOWJmYWI2MDIwZDVkYzdlNmEwNGQ1YzM0MDJhNjhmMjhiYTk2ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyRcCRGDjjKpvpJQ1ZXBYsd4zEyD
hm68wgXl7SIGgWeJaNDehV5v94jGkYSjxi+SQ/7r+JcZjdsNoe2iT79GhWXJL8OS
eWHvrorVQ5n33ZkrAH5N41eafXQGRYIRz1KnGcGZn870t8fSNdDtE2j8EZGNYxc1
/cg2RbuwtZPlVVSD2WrPkXrm2isHfLdC17+5qA34EajXvGfdz7nmySAB6HuFmSmL
bWoioqCdM78t/dKaT+3F3hMph5dOPRuZVUTAZ3VFyIVeOdB7qbfGLqez9/Pk9aDq
JjtVAR/o3ltrrOdedzis4b/30s+ZJ6TKldqKLaCnqhIZeXJVcJ3j45pATQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm/q2Ag1dx+agTVw0AqaPKLqW++MB8GA1UdIwQY
MBaAFCh18YWCPbxqgtEFs8oWB321cpN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDct
OTRlNWQ0OWNjNjI4LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDctOTRlNWQ0OWNjNjI4
LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaePLRShC
0thAliBPcKac5wqVMmLM/Y4xYNikPypjhYnConOnPihMg1fWoBhaXv4cTRZdCENL
lW9KgSA+tKjUtOcazDxDxhxti4fW7fH4CL/kRomgh+/yzYcfBAKf0OKDKSoU5JrV
w66ZwmqnTReDjeNODs7jZvIY1CbUQNOQbGmI4kuYaJv1k5M0tlwPE4O6bmmDvXHP
2FbOxdW9eVDzMnzckffa2JtXn99YwrR3RpQ28uXToBeKsx1noVH87lqZSf/S+PCM
/MNrVl3Nb5Rc7i7Fw31ebdiMR0t7mwHy+qSlC0/pDnt1pebGTn2DukLN9/kvF1BB
YrCzvCCn6jaqpg==
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:09:09 2026 by rpki-client