Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: yxEoGcjoCMy9tYoo6+T7iF8/A7ssotp5yv0mnMCLyWU=
Subject key identifier: D0:DF:FD:CE:7C:0D:56:94:7D:AD:74:2F:0F:EF:71:BE:4F:E3:D4:37
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 01A06EA76E5A0123D431FD98FBB59CC41EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 1A3C
Signing time: Fri 04 Sep 2026 23:01:01 +0000
Manifest this update: Fri 04 Sep 2026 23:01:01 +0000
Manifest next update: Sat 05 Sep 2026 23:01:01 +0000
Files and hashes: 1: 2VrXKMaV4hFStFOxu_UQS5okGCc.roa (hash: ysQxFYSk2THDKp3xdvckm0rpXg2xlVHGITzLw9rPwIQ=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: Wf91j8PBU1l+lZvrDRdy8uZK3CzKcPIByayGyZFI4OM=)
3: Stpleb6OTPqMfH86_X0X4TcY0xw.roa (hash: vOMEgiat3XRiljAMfWkhr6z+Hs+WLCtckYdZXT9W3aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:6e:5a:01:23:d4:31:fd:98:fb:b5:9c:c4:1e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Sep 4 23:01:01 2026 GMT
Not After : Sep 5 23:01:01 2026 GMT
Subject: CN=d0dffdce7c0d56947dad742f0fef71be4fe3d437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:27:94:e6:99:a1:d5:97:74:cd:4a:7e:c0:
a7:68:05:15:be:a9:ce:80:2f:64:40:cf:43:02:df:
b5:67:ad:29:42:12:cf:9f:69:77:7a:a4:05:fa:ab:
2a:b2:fd:45:ac:45:84:5a:6e:92:be:38:62:c3:c5:
b1:65:6e:b8:b7:9b:d9:5f:b6:70:de:b8:12:08:00:
e5:2d:39:58:04:6f:51:b1:95:5c:a6:49:35:d7:c4:
8d:95:ee:c6:f5:ed:cc:9b:5b:fe:fe:fe:3b:90:44:
12:30:40:04:63:3c:b7:46:f6:5e:e5:30:f4:b2:f3:
b4:ca:91:65:08:87:c2:c9:55:f9:b5:22:1f:9d:f7:
14:dc:54:07:63:af:79:bc:8d:91:4c:e6:c7:02:e0:
2f:93:1d:be:f8:cf:66:6d:42:3c:5b:c2:2f:01:6e:
24:f3:2e:a6:19:4c:a1:e8:d6:7f:a1:38:dc:54:eb:
11:ce:7f:7b:5a:1e:51:de:0d:91:6d:05:fb:25:7e:
0c:2b:1b:93:11:3b:75:10:3c:92:b6:bd:0e:16:a6:
08:59:71:bc:97:46:e5:5d:f4:30:b7:77:36:3a:88:
98:e4:84:c5:38:79:07:71:02:98:c6:a5:36:56:74:
1d:35:ec:ec:fb:8e:7c:d0:5d:53:e0:91:a0:f1:a6:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:FD:CE:7C:0D:56:94:7D:AD:74:2F:0F:EF:71:BE:4F:E3:D4:37
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:08:eb:c7:8c:08:2e:e9:99:51:ff:49:4c:68:4f:fe:89:6f:
ae:1b:9f:8b:2f:65:bf:fb:ac:6d:76:1b:12:bc:11:e0:37:0a:
f9:d3:02:81:55:e1:70:c9:e2:df:03:66:a1:d2:03:e8:75:8f:
3c:1d:2a:77:e9:a6:3f:2b:e7:f5:e8:45:f8:b3:cb:4f:06:53:
1e:39:e4:20:be:14:f7:6a:b1:2e:79:05:4e:00:a6:c2:a8:b7:
52:e2:c6:0d:b1:f0:59:98:f3:7c:9b:86:33:40:ca:42:93:f4:
9f:1a:59:32:24:c6:28:ff:ed:62:bc:56:c6:5e:a4:18:ab:0a:
60:0d:65:bb:6f:6c:70:82:ac:9f:4a:25:1e:75:ad:4b:c9:8a:
14:fa:41:06:8f:39:17:eb:49:10:c0:b5:0d:cb:2a:4d:eb:0d:
c7:6e:62:69:41:91:80:db:5f:cf:99:0f:b7:33:a2:67:5d:6a:
31:d7:e4:3f:ff:62:7a:d1:b9:a6:2f:f8:e2:8b:4c:fa:59:3a:
53:be:fe:1c:42:7e:bb:33:8d:6a:fc:e7:87:19:4c:7e:fc:d9:
d5:3a:1c:c0:3c:fe:01:1e:ff:0a:63:40:a3:f9:90:d6:94:db:
b8:25:a8:2d:b4:f3:c9:30:fe:3a:63:83:48:89:1b:77:42:05:
be:b3:93:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup25aASPUMf2Y+7WcxB6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzVmMTg1ODIzZGJjNmE4MmQxMDViM2NhMTYwNzdkYjU3
MjkzNzcwHhcNMjYwOTA0MjMwMTAxWhcNMjYwOTA1MjMwMTAxWjAzMTEwLwYDVQQD
EyhkMGRmZmRjZTdjMGQ1Njk0N2RhZDc0MmYwZmVmNzFiZTRmZTNkNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSYnlOaZodWXdM1KfsCnaAUVvqnO
gC9kQM9DAt+1Z60pQhLPn2l3eqQF+qsqsv1FrEWEWm6Svjhiw8WxZW64t5vZX7Zw
3rgSCADlLTlYBG9RsZVcpkk118SNle7G9e3Mm1v+/v47kEQSMEAEYzy3RvZe5TD0
svO0ypFlCIfCyVX5tSIfnfcU3FQHY695vI2RTObHAuAvkx2++M9mbUI8W8IvAW4k
8y6mGUyh6NZ/oTjcVOsRzn97Wh5R3g2RbQX7JX4MKxuTETt1EDyStr0OFqYIWXG8
l0blXfQwt3c2OoiY5ITFOHkHcQKYxqU2VnQdNezs+4580F1T4JGg8aZP7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDf/c58DVaUfa10Lw/vcb5P49Q3MB8GA1UdIwQY
MBaAFCh18YWCPbxqgtEFs8oWB321cpN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDct
OTRlNWQ0OWNjNjI4LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDctOTRlNWQ0OWNjNjI4
LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAjrx4wI
LumZUf9JTGhP/olvrhufiy9lv/usbXYbErwR4DcK+dMCgVXhcMni3wNmodID6HWP
PB0qd+mmPyvn9ehF+LPLTwZTHjnkIL4U92qxLnkFTgCmwqi3UuLGDbHwWZjzfJuG
M0DKQpP0nxpZMiTGKP/tYrxWxl6kGKsKYA1lu29scIKsn0olHnWtS8mKFPpBBo85
F+tJEMC1DcsqTesNx25iaUGRgNtfz5kPtzOiZ11qMdfkP/9ietG5pi/44otM+lk6
U77+HEJ+uzONavznhxlMfvzZ1TocwDz+AR7/CmNAo/mQ1pTbuCWoLbTzyTD+OmOD
SIkbd0IFvrOTNw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:11:45 2026 by rpki-client