Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: umTE4GFXGvFmlF75XDWb2e4KmXqRrtNLa/AMlzmKeqk=
Subject key identifier: E2:81:7C:4C:8F:3B:F5:ED:6A:89:90:E4:D3:82:DC:DD:0D:22:B6:88
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 01A188D2442F1B58E3C24517DA6CC9BDEF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 145B
Signing time: Thu 29 Oct 2026 18:00:43 +0000
Manifest this update: Thu 29 Oct 2026 18:00:43 +0000
Manifest next update: Fri 30 Oct 2026 18:00:43 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: gGy0cbzqhFTivZKga3+4rSazlgPeRbsKkJ6smga3+U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:d2:44:2f:1b:58:e3:c2:45:17:da:6c:c9:bd:ef:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Oct 29 18:00:43 2026 GMT
Not After : Oct 30 18:00:43 2026 GMT
Subject: CN=e2817c4c8f3bf5ed6a8990e4d382dcdd0d22b688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:5c:f6:7d:20:4b:2a:bd:88:4f:8e:f8:26:
43:65:1b:04:c3:e9:31:2d:a4:2e:dd:5f:23:21:cc:
b9:67:4e:ce:a9:78:3b:67:4c:e9:e5:da:5b:25:e8:
87:b0:39:eb:4a:b9:c4:c7:cc:a5:18:a7:7d:29:3b:
75:b7:88:0f:06:1c:02:e4:0a:52:c5:be:fc:66:d8:
a4:af:b3:fe:22:97:40:ac:aa:b2:2d:b9:55:1d:f2:
c3:99:5b:65:22:2c:42:78:2e:fc:1c:fe:1d:c4:bd:
a5:7c:8b:7e:4c:68:8c:d5:41:f8:e5:59:27:b2:21:
88:47:ab:07:5d:f5:b6:13:be:b2:2f:d8:14:9e:fb:
b8:55:74:b6:16:8e:21:4a:5d:82:01:9d:f1:a7:23:
61:44:9f:2a:7e:f8:c0:42:94:b4:9b:45:cc:3f:96:
b5:c5:7d:f7:f5:56:f3:f5:e7:11:fb:87:c4:33:41:
67:38:31:af:41:fd:71:9a:b0:0f:66:9f:e2:1a:7a:
8d:3d:06:dd:9f:a9:66:71:f9:0e:82:4f:36:72:6f:
2d:77:e1:a1:cf:96:2a:f0:5f:27:9a:50:b3:a6:f8:
d2:6d:b6:b4:0d:f5:19:06:be:f5:b0:5a:22:06:fd:
81:20:67:5d:1d:4c:3f:1c:5f:b5:ce:59:35:64:9b:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:81:7C:4C:8F:3B:F5:ED:6A:89:90:E4:D3:82:DC:DD:0D:22:B6:88
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e3:cc:c1:45:47:ed:3b:b0:9f:28:7d:d4:03:4f:7f:33:de:
7b:a3:9b:09:31:ec:10:cc:99:97:e9:c9:4a:88:c7:a6:44:c3:
0b:c9:fb:df:cf:c4:1a:ee:d9:87:82:2c:c0:95:ad:40:b0:19:
1f:3c:7c:a0:91:0a:de:99:a7:5e:48:69:d2:c8:89:78:52:0a:
90:f7:8a:10:ca:6f:da:89:f9:e5:e0:ae:87:e8:39:33:f7:f9:
d1:c0:8c:51:e2:3d:66:77:e5:e7:89:1e:2b:26:39:2a:b0:19:
ad:f7:91:da:46:dd:9a:f7:8e:41:8c:e4:70:22:89:2d:88:d0:
77:bc:19:ed:58:05:8a:c4:8d:f8:4f:da:c0:9a:b7:36:d2:50:
87:ae:24:df:d2:e9:dc:80:9e:4f:1a:d9:fc:0e:52:a1:ba:06:
1c:fb:40:c0:73:a9:9b:cb:d2:99:e1:05:c1:61:bb:0e:a8:73:
83:ae:a1:d7:31:9f:df:73:26:a2:99:4b:09:c1:f0:5a:d9:9c:
4e:38:9a:7e:a6:a4:bb:df:9f:be:9a:bc:99:31:db:8a:e8:ef:
07:07:3c:2b:8c:ba:50:3a:87:7e:b7:e7:4c:17:df:54:62:44:
04:c2:b9:c5:eb:eb:c8:2d:74:9a:fc:ee:18:b2:af:06:6b:11:
e2:20:85:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGI0kQvG1jjwkUX2mzJve8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNzZmNzdkYTg0MWI3Yjk0MjE1YjZmYWMyZDQxYTcxYzIx
NTE2MDEwHhcNMjYxMDI5MTgwMDQzWhcNMjYxMDMwMTgwMDQzWjAzMTEwLwYDVQQD
EyhlMjgxN2M0YzhmM2JmNWVkNmE4OTkwZTRkMzgyZGNkZDBkMjJiNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dpc9n0gSyq9iE+O+CZDZRsEw+kx
LaQu3V8jIcy5Z07OqXg7Z0zp5dpbJeiHsDnrSrnEx8ylGKd9KTt1t4gPBhwC5ApS
xb78Ztikr7P+IpdArKqyLblVHfLDmVtlIixCeC78HP4dxL2lfIt+TGiM1UH45Vkn
siGIR6sHXfW2E76yL9gUnvu4VXS2Fo4hSl2CAZ3xpyNhRJ8qfvjAQpS0m0XMP5a1
xX339Vbz9ecR+4fEM0FnODGvQf1xmrAPZp/iGnqNPQbdn6lmcfkOgk82cm8td+Gh
z5Yq8F8nmlCzpvjSbba0DfUZBr71sFoiBv2BIGddHUw/HF+1zlk1ZJuWvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKBfEyPO/XtaomQ5NOC3N0NIraIMB8GA1UdIwQY
MBaAFJB2932oQbe5QhW2+sLUGnHCFRYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEt
ZTYzY2U1NTM3MGViLzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEtZTYzY2U1NTM3MGVi
LzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzuPMwUVH
7Tuwnyh91ANPfzPee6ObCTHsEMyZl+nJSojHpkTDC8n738/EGu7Zh4IswJWtQLAZ
Hzx8oJEK3pmnXkhp0siJeFIKkPeKEMpv2on55eCuh+g5M/f50cCMUeI9Znfl54ke
KyY5KrAZrfeR2kbdmveOQYzkcCKJLYjQd7wZ7VgFisSN+E/awJq3NtJQh64k39Lp
3ICeTxrZ/A5SoboGHPtAwHOpm8vSmeEFwWG7Dqhzg66h1zGf33MmoplLCcHwWtmc
Tjiafqaku9+fvpq8mTHbiujvBwc8K4y6UDqHfrfnTBffVGJEBMK5xevryC10mvzu
GLKvBmsR4iCFIQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 05:08:08 2026 by rpki-client