Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: CZ/o+uskz+wT5UYEWcZsCUTiwAdfME08bBEng7Uj2sc=
Subject key identifier: 53:4A:F9:EF:86:3C:FE:75:E9:5F:14:23:61:21:E3:9A:36:B7:69:77
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 01A08BD610097FE3ACE19376AF18959E42AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 13D8
Signing time: Thu 10 Sep 2026 15:00:56 +0000
Manifest this update: Thu 10 Sep 2026 15:00:56 +0000
Manifest next update: Fri 11 Sep 2026 15:00:56 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: m3akStkyNcq7oYWmb1zn9ILnGoq4TMWAQ8VxhpHVEbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:10:09:7f:e3:ac:e1:93:76:af:18:95:9e:42:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Sep 10 15:00:56 2026 GMT
Not After : Sep 11 15:00:56 2026 GMT
Subject: CN=534af9ef863cfe75e95f14236121e39a36b76977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:38:71:32:37:0b:e2:c9:3f:a7:f7:89:6a:
ab:e2:a0:cb:be:88:ca:dd:5a:3b:87:e7:22:64:d4:
5c:d4:09:19:e7:ef:09:4b:45:8c:f2:a5:4e:63:c8:
ad:7c:08:a5:97:97:1e:66:ce:c6:89:8b:f7:7a:a2:
53:f8:d3:06:9d:2e:45:a2:08:91:95:dd:ba:ba:e9:
f6:5d:44:76:33:07:bf:48:fd:a3:89:b1:39:5a:28:
e2:fe:32:3d:9f:25:07:cb:c8:8e:72:64:65:1d:ee:
e6:5b:ea:62:5e:96:65:1c:86:63:07:11:48:59:b6:
c5:5f:2e:bf:26:44:b5:51:70:de:7f:5e:35:95:70:
4b:20:fe:4a:06:92:e4:b6:0e:b4:38:f5:01:aa:4e:
f2:2f:1b:55:51:bc:5c:1b:10:d5:d8:dd:50:32:9c:
a5:30:e8:d5:fa:2b:38:d5:fe:d0:96:ca:8b:bb:dd:
ee:2d:d9:cc:27:14:30:b6:ea:c1:fa:aa:a6:3c:c4:
1c:aa:76:4b:a4:2d:fb:92:5e:71:23:9e:d7:e3:b1:
52:bd:cd:fd:63:2a:67:0a:97:da:1f:57:fc:13:51:
c8:a1:30:f7:78:0c:62:04:ec:b0:a8:d0:a5:a4:9b:
2a:b8:80:79:3d:f0:de:ae:9c:ba:90:ba:cc:31:3a:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4A:F9:EF:86:3C:FE:75:E9:5F:14:23:61:21:E3:9A:36:B7:69:77
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:bb:52:b9:38:70:a0:ff:80:3c:7a:95:a5:f0:d7:5f:3f:fb:
bb:fd:68:7e:5a:50:3a:e4:30:49:d1:22:76:d2:bd:0d:b3:e0:
ee:2a:6b:0b:19:a3:9b:c6:a8:49:25:e3:f0:90:53:46:56:1a:
0b:4d:69:9a:9e:65:29:f0:e0:3f:5c:d5:7c:da:29:38:02:d5:
70:61:f4:ed:f2:aa:2c:08:ed:57:4a:d7:34:63:92:1f:e9:66:
07:d6:49:8c:d6:90:40:78:ca:1f:17:ce:a4:eb:4f:bb:a6:7a:
66:81:ef:5c:d3:5e:9a:0d:83:ad:1f:4a:c9:cf:8e:1e:7a:ca:
01:de:3e:39:f1:78:21:3b:e8:6b:fa:f1:17:78:b4:13:a5:01:
d4:02:0e:ab:64:bb:47:aa:75:6f:bf:a2:24:c8:d4:31:69:be:
c6:d3:18:b2:56:a6:18:d9:42:db:f6:77:f5:89:b8:cb:d5:4a:
5e:b4:e9:19:cd:d0:c4:8c:41:f7:08:69:23:36:a9:5e:07:b5:
12:19:5e:0a:20:68:35:59:9f:0a:03:2e:32:74:94:42:36:a9:
94:bc:bd:77:8d:14:e3:d0:e3:30:27:53:da:44:71:83:ce:3b:
ce:25:1d:50:c5:36:eb:ef:44:d8:65:07:9f:36:fd:52:f0:2f:
14:ea:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:02:44 2026 by rpki-client