Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: vV0JWw9w4p9F5jowV98030fn4Ti4lUGb1KYicwOYcNg=
Subject key identifier: 11:D0:DC:4F:65:52:57:0F:36:7E:D1:BC:ED:1F:BB:96:9A:B8:97:DA
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 01A1803D3C0B0974288D6177ED4EE86D7C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 02:00:58 +0000
Manifest this update: Wed 28 Oct 2026 02:00:58 +0000
Manifest next update: Thu 29 Oct 2026 02:00:58 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: VMOvakXMO16O5gWH/GPVuRWLcF9aiy2SvxWD1Bbw8C8=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:3c:0b:09:74:28:8d:61:77:ed:4e:e8:6d:7c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Oct 28 02:00:58 2026 GMT
Not After : Oct 29 02:00:58 2026 GMT
Subject: CN=11d0dc4f6552570f367ed1bced1fbb969ab897da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:90:78:21:ab:3f:64:32:13:87:aa:a7:2d:
1e:7a:a6:ee:73:1b:61:82:64:c7:66:de:95:8e:8b:
9d:67:9d:4e:3c:6b:60:10:1a:a8:df:f1:4f:8c:e7:
1b:60:14:ca:fa:3e:d5:f8:d7:c9:53:32:cf:f6:2c:
d5:f0:95:de:58:c1:5d:4a:e6:ad:89:70:8a:ec:a1:
82:bd:84:f5:57:42:e1:61:81:4e:96:59:15:c3:2e:
a4:64:8e:a8:88:f1:01:65:a9:8e:0f:97:5a:70:e9:
d3:88:cc:93:4d:49:ab:bf:97:75:06:65:28:a2:2d:
ad:b0:e7:e7:11:48:1d:34:b0:1d:67:56:d1:86:70:
e9:6f:09:d3:74:c4:f0:48:fe:d9:fe:03:36:5d:05:
bf:4a:c5:8d:9b:0d:93:b5:4f:72:93:be:44:c0:65:
ae:09:a8:d2:b7:83:3e:be:36:0d:7f:f2:a7:28:68:
de:a7:8e:0b:78:bd:a6:0b:64:e8:ba:ca:c5:09:ac:
6d:1d:65:38:48:f4:82:ef:07:91:2b:6d:e8:80:49:
f5:71:47:91:5b:3b:7b:04:c8:77:e8:8e:8f:e5:33:
5d:48:55:46:cd:5f:42:09:f3:e0:6d:80:e7:2c:c2:
7b:20:00:82:d9:3b:0b:65:00:27:f5:a9:9e:0f:96:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:DC:4F:65:52:57:0F:36:7E:D1:BC:ED:1F:BB:96:9A:B8:97:DA
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7d:39:7b:c7:9f:8f:00:60:83:63:53:1b:8a:5f:6d:ac:59:
81:a6:04:83:1d:cc:58:45:48:70:89:3e:f8:de:29:da:f9:c9:
fa:c1:f4:c6:2a:f3:32:cc:86:a8:26:63:4b:78:0b:31:e5:1b:
d2:27:47:76:95:9b:1a:34:be:eb:11:41:80:8e:29:02:64:1c:
ed:89:37:06:56:e5:cd:c6:ed:6b:35:b6:dd:1d:33:07:0d:61:
8c:92:80:81:dd:dc:68:11:f6:32:52:b0:53:ee:7b:69:d8:c5:
21:82:a1:d3:ca:a1:3a:77:87:3e:76:a5:fc:ea:20:08:cb:2d:
f3:bc:94:22:87:42:76:d4:58:52:22:43:62:6f:ba:0e:67:d7:
98:0e:6d:04:01:5c:a2:aa:66:45:a4:c0:f7:bd:6b:6d:39:ba:
86:92:5a:9c:c5:62:00:27:89:57:53:da:36:27:1a:97:53:a0:
f7:ca:cb:0a:18:93:54:98:ea:36:cb:67:84:5d:b6:b5:d7:18:
35:b4:1d:c5:4d:b1:5c:b3:f0:79:bf:98:a9:29:87:e8:45:33:
fc:25:1d:3f:7f:a8:39:39:ab:2f:22:7c:7c:42:1a:15:12:74:
3d:e2:96:49:bc:f0:27:45:f9:28:24:03:72:11:77:2a:5c:35:
1d:e7:5b:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAPTwLCXQojWF37U7obXw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz
MWY1ZjEwHhcNMjYxMDI4MDIwMDU4WhcNMjYxMDI5MDIwMDU4WjAzMTEwLwYDVQQD
EygxMWQwZGM0ZjY1NTI1NzBmMzY3ZWQxYmNlZDFmYmI5NjlhYjg5N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvWQeCGrP2QyE4eqpy0eeqbucxth
gmTHZt6VjoudZ51OPGtgEBqo3/FPjOcbYBTK+j7V+NfJUzLP9izV8JXeWMFdSuat
iXCK7KGCvYT1V0LhYYFOllkVwy6kZI6oiPEBZamOD5dacOnTiMyTTUmrv5d1BmUo
oi2tsOfnEUgdNLAdZ1bRhnDpbwnTdMTwSP7Z/gM2XQW/SsWNmw2TtU9yk75EwGWu
CajSt4M+vjYNf/KnKGjep44LeL2mC2TousrFCaxtHWU4SPSC7weRK23ogEn1cUeR
Wzt7BMh36I6P5TNdSFVGzV9CCfPgbYDnLMJ7IACC2TsLZQAn9ameD5Z7DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHQ3E9lUlcPNn7RvO0fu5aauJfaMB8GA1UdIwQY
MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt
Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3
LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX05e8ef
jwBgg2NTG4pfbaxZgaYEgx3MWEVIcIk++N4p2vnJ+sH0xirzMsyGqCZjS3gLMeUb
0idHdpWbGjS+6xFBgI4pAmQc7Yk3BlblzcbtazW23R0zBw1hjJKAgd3caBH2MlKw
U+57adjFIYKh08qhOneHPnal/OogCMst87yUIodCdtRYUiJDYm+6DmfXmA5tBAFc
oqpmRaTA971rbTm6hpJanMViACeJV1PaNical1Og98rLChiTVJjqNstnhF22tdcY
NbQdxU2xXLPweb+YqSmH6EUz/CUdP3+oOTmrLyJ8fEIaFRJ0PeKWSbzwJ0X5KCQD
chF3Klw1HedbcQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:43 2026 by rpki-client