Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: s7U0K8VEdkamI6vp5cgwyurSYwG71pzZTVVTg0pMSaI=
Subject key identifier: C8:98:62:0B:73:17:DB:4A:58:E8:F3:42:93:75:E3:B4:FB:E7:D4:4F
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 01A16BA4088A6AEDE9B7E848E0BB70748F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 1ABF
Signing time: Sat 24 Oct 2026 02:01:14 +0000
Manifest this update: Sat 24 Oct 2026 02:01:14 +0000
Manifest next update: Sun 25 Oct 2026 02:01:14 +0000
Files and hashes: 1: 2VrXKMaV4hFStFOxu_UQS5okGCc.roa (hash: ysQxFYSk2THDKp3xdvckm0rpXg2xlVHGITzLw9rPwIQ=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: ZJsnbkmsxBsaX/1ujT8qfGnfSLl6EBfZKCDCqdk4Uus=)
3: Stpleb6OTPqMfH86_X0X4TcY0xw.roa (hash: vOMEgiat3XRiljAMfWkhr6z+Hs+WLCtckYdZXT9W3aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:a4:08:8a:6a:ed:e9:b7:e8:48:e0:bb:70:74:8f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Oct 24 02:01:14 2026 GMT
Not After : Oct 25 02:01:14 2026 GMT
Subject: CN=c898620b7317db4a58e8f3429375e3b4fbe7d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:2c:30:e4:aa:33:c3:a2:d7:15:91:11:1c:
89:dd:8a:84:fc:3e:70:fa:08:49:44:cb:87:1e:08:
d7:19:e3:90:8f:c6:8c:78:d2:61:b9:af:c9:15:2c:
96:ed:80:e6:36:63:d0:61:46:79:c3:ed:61:83:36:
e9:71:3f:72:ab:25:c4:b5:1b:a2:3e:4a:41:dd:03:
dd:b2:ba:8a:72:3a:55:7e:88:f0:d8:30:99:14:f5:
69:ad:b5:60:9b:cd:5c:da:a3:c9:a1:dc:18:d6:74:
f5:b1:76:65:40:80:a3:35:92:ea:67:90:d6:01:7c:
52:09:9e:92:3b:36:80:fd:ed:78:71:c1:b0:4e:89:
b2:af:0b:69:df:76:86:ff:21:c5:d1:70:b6:c5:22:
ff:d5:0d:95:e0:17:63:ec:be:bd:83:d5:93:ce:1b:
9d:e8:86:63:f9:1e:23:c8:d1:53:8e:44:fb:d9:d8:
d0:04:b1:08:47:6d:79:b0:e0:94:56:1c:af:66:d2:
b3:cc:54:59:d9:cf:8d:bb:59:83:7a:51:f4:3f:a1:
c4:5c:59:87:35:33:ce:bd:63:2b:0b:44:89:a0:58:
1d:d6:f6:8a:a7:04:5e:18:2b:0e:8f:64:a2:87:ef:
e7:ea:a2:52:7f:6f:df:a8:c0:aa:cb:68:ad:26:4f:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:62:0B:73:17:DB:4A:58:E8:F3:42:93:75:E3:B4:FB:E7:D4:4F
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1b:1d:2a:79:8e:00:40:ca:40:f2:89:4c:1a:e4:e3:04:61:
1a:e9:1d:5b:ca:49:de:71:80:ca:8f:30:c7:51:f0:aa:b3:8f:
cc:dd:8c:fa:d0:5b:e2:78:e3:cd:d2:81:a3:5f:14:ea:a5:ab:
64:76:99:7b:ba:c1:ee:b4:25:a7:5e:24:24:4a:88:99:04:5e:
f4:a0:bd:1b:b3:ef:be:21:93:12:06:b8:c5:46:fa:a6:1b:ff:
1d:5b:a0:19:0a:1b:a6:41:76:cb:61:c7:88:45:af:7d:17:25:
34:20:28:79:09:d2:69:0e:e7:0a:cd:5f:d4:77:66:7d:7c:22:
01:05:76:3d:44:82:aa:06:11:8b:bb:7d:6c:47:58:88:2d:a8:
fb:7a:4a:9b:87:e6:34:12:7c:1e:5a:93:05:2f:f8:cd:b1:f4:
a7:b3:49:82:e7:a5:cd:34:7e:09:7b:bf:b5:dc:3b:b0:7b:00:
28:ef:c3:51:0e:38:63:65:04:f5:fa:16:88:64:39:53:cb:24:
cf:5f:f5:81:da:26:ae:ed:e3:1c:58:4f:05:29:08:33:fe:2f:
4d:d2:8c:04:ef:5e:2a:78:ec:87:4c:5b:7e:03:7c:e3:26:30:
00:82:32:48:44:d7:61:f4:c9:42:72:1d:89:70:cc:54:e1:d5:
53:27:78:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFrpAiKau3pt+hI4LtwdI+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzVmMTg1ODIzZGJjNmE4MmQxMDViM2NhMTYwNzdkYjU3
MjkzNzcwHhcNMjYxMDI0MDIwMTE0WhcNMjYxMDI1MDIwMTE0WjAzMTEwLwYDVQQD
EyhjODk4NjIwYjczMTdkYjRhNThlOGYzNDI5Mzc1ZTNiNGZiZTdkNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUEsMOSqM8Oi1xWRERyJ3YqE/D5w
+ghJRMuHHgjXGeOQj8aMeNJhua/JFSyW7YDmNmPQYUZ5w+1hgzbpcT9yqyXEtRui
PkpB3QPdsrqKcjpVfojw2DCZFPVprbVgm81c2qPJodwY1nT1sXZlQICjNZLqZ5DW
AXxSCZ6SOzaA/e14ccGwTomyrwtp33aG/yHF0XC2xSL/1Q2V4Bdj7L69g9WTzhud
6IZj+R4jyNFTjkT72djQBLEIR215sOCUVhyvZtKzzFRZ2c+Nu1mDelH0P6HEXFmH
NTPOvWMrC0SJoFgd1vaKpwReGCsOj2Sih+/n6qJSf2/fqMCqy2itJk/6CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiYYgtzF9tKWOjzQpN147T759RPMB8GA1UdIwQY
MBaAFCh18YWCPbxqgtEFs8oWB321cpN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDct
OTRlNWQ0OWNjNjI4LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDctOTRlNWQ0OWNjNjI4
LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRsdKnmO
AEDKQPKJTBrk4wRhGukdW8pJ3nGAyo8wx1HwqrOPzN2M+tBb4njjzdKBo18U6qWr
ZHaZe7rB7rQlp14kJEqImQRe9KC9G7PvviGTEga4xUb6phv/HVugGQobpkF2y2HH
iEWvfRclNCAoeQnSaQ7nCs1f1HdmfXwiAQV2PUSCqgYRi7t9bEdYiC2o+3pKm4fm
NBJ8HlqTBS/4zbH0p7NJguelzTR+CXu/tdw7sHsAKO/DUQ44Y2UE9foWiGQ5U8sk
z1/1gdomru3jHFhPBSkIM/4vTdKMBO9eKnjsh0xbfgN84yYwAIIySETXYfTJQnId
iXDMVOHVUyd4Eg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 07:02:38 2026 by rpki-client