Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: 2u30l7WKFgMRtwrsSvADGiHjN5Mcu9v2EMFa6V5/zIE=
Subject key identifier: A4:82:C8:D9:37:40:E9:27:43:7A:08:83:6F:DE:D0:6F:0C:73:80:D9
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 019FA41818707D17EE946633EE8AD40722C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 1360
Signing time: Mon 27 Jul 2026 15:01:10 +0000
Manifest this update: Mon 27 Jul 2026 15:01:10 +0000
Manifest next update: Tue 28 Jul 2026 15:01:10 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: Sp1ORujlCEuFBL7JSXh03q61ONQxpVgqXrDlUvejMm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:18:18:70:7d:17:ee:94:66:33:ee:8a:d4:07:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Jul 27 15:01:10 2026 GMT
Not After : Jul 28 15:01:10 2026 GMT
Subject: CN=a482c8d93740e927437a08836fded06f0c7380d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:04:17:93:4e:56:c2:f0:b7:bf:79:53:8c:
0b:98:a3:ec:06:83:62:ba:3f:45:d9:72:7b:c0:f0:
9d:6c:28:af:86:63:55:c7:e5:d1:e2:66:94:15:bb:
d2:68:ef:b7:17:0e:43:90:04:47:8b:e0:2c:11:ee:
f6:6b:b7:3f:d0:58:69:59:ba:c6:4d:5b:37:f3:4b:
16:6e:0f:fa:ec:9f:77:ab:6b:9a:a2:0c:41:7d:db:
98:23:27:70:9f:cc:94:d4:30:df:9e:68:4a:25:a5:
ed:a2:81:87:a9:22:a6:6c:be:69:5e:80:91:3d:84:
35:85:e1:7b:b1:ab:1d:df:d4:55:3b:29:b1:ba:1d:
16:09:c0:0d:6c:b1:b9:7e:8b:6e:f4:8e:dc:4a:5a:
b6:07:25:aa:9c:65:12:ef:33:12:4f:34:1e:31:1c:
27:0c:47:50:12:90:ea:29:ca:a2:b7:b8:a0:0e:5e:
17:c7:62:a7:3e:e8:84:c8:98:bf:3d:41:0b:bb:3c:
a9:00:85:bc:79:9f:80:a6:19:5b:bb:a5:4d:34:7f:
c2:63:26:3e:85:8e:8f:63:ad:f7:be:6b:90:bb:a9:
67:79:c4:79:ca:d0:53:73:e7:40:de:18:0a:03:25:
2d:e4:dc:a8:ed:d0:2f:f9:3a:f2:3d:c5:57:13:38:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:82:C8:D9:37:40:E9:27:43:7A:08:83:6F:DE:D0:6F:0C:73:80:D9
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ed:63:15:18:fd:5c:e2:2d:c2:3a:ae:0e:69:e2:9c:2f:01:
bc:cd:0c:6a:8d:4f:72:a3:ba:bd:25:16:17:97:2f:1e:bf:49:
6e:b1:6c:75:d5:04:f4:68:63:20:02:44:b2:03:4a:58:0d:79:
a1:9e:26:83:39:93:fb:00:53:57:0f:e2:3e:0d:a5:61:d3:de:
57:59:12:ff:62:30:21:4f:7c:3f:f8:d3:8e:72:e8:20:f1:e8:
62:1d:c3:82:c0:aa:0b:10:46:91:73:3d:d3:b0:fb:9a:11:e0:
55:61:1c:3f:d6:23:f2:d4:ea:9b:eb:65:26:25:45:7f:82:57:
31:8f:ec:8f:0b:bd:0e:4e:05:da:e0:f1:24:0f:68:fc:f4:1d:
9e:b6:ca:14:a3:6e:38:de:24:4f:a3:55:96:1f:8f:bf:8f:18:
f6:c6:d3:c4:20:67:08:e2:0d:aa:21:2c:c0:a4:45:bd:be:b8:
93:45:0a:21:79:d4:c1:57:ad:c7:10:8a:08:fc:74:f4:92:05:
b0:f5:f1:f2:e0:4d:ee:89:35:84:2a:37:ee:c2:f4:75:dc:21:
7b:09:27:bf:ba:00:d4:30:6e:44:c3:48:54:64:bd:e9:04:31:
d6:0a:b0:98:1d:27:34:ab:0b:b6:fa:ac:a6:c7:55:eb:59:aa:
c4:2a:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:49:13 2026 by rpki-client