Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: U+Z8/wCht3o3P2+z1oarRL9OQHd881+iaD1RwGwxnGM=
Subject key identifier: 78:6D:D3:9F:F9:5A:39:8A:AD:18:28:27:6E:5C:66:F4:50:76:06:FB
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019EB98FD4542AC7BAC726EF1481E6B3ED6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 02:01:11 +0000
Manifest this update: Fri 12 Jun 2026 02:01:11 +0000
Manifest next update: Sat 13 Jun 2026 02:01:11 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: 3/xezfmvLtfOKC8T9MYMaOZUl9FSausUS93LG2rWv2M=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:d4:54:2a:c7:ba:c7:26:ef:14:81:e6:b3:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Jun 12 02:01:11 2026 GMT
Not After : Jun 13 02:01:11 2026 GMT
Subject: CN=786dd39ff95a398aad1828276e5c66f4507606fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:4e:62:bc:ab:5c:9b:66:63:ab:84:f5:7f:
50:8f:08:48:ca:42:d2:ef:f3:25:a0:ea:66:44:6b:
ba:b7:aa:07:83:9a:70:5c:2a:94:e3:7d:7e:e1:db:
2b:b6:44:b0:e2:fb:3b:31:32:dd:c0:7a:7b:45:6b:
ca:86:76:b2:58:dc:96:9a:a0:04:ad:c6:d7:e7:34:
28:a9:c6:50:61:43:8e:b1:37:dc:5f:44:cd:56:43:
95:f6:b1:a5:6f:e1:f0:44:e2:00:9d:43:da:33:39:
7f:61:d7:63:cf:34:0f:57:7a:b7:cc:9a:ba:0e:c7:
30:43:37:eb:cd:54:cf:17:9a:64:5e:1a:f5:23:4a:
d6:e1:f9:6d:be:48:1e:56:99:1c:52:a0:4b:0e:6c:
6c:ca:04:2c:6d:97:e6:85:24:35:c5:8a:d6:2b:b9:
b0:08:32:22:6d:62:6e:59:a2:a3:6f:a1:bf:70:58:
b9:66:60:db:d1:8a:cf:e8:d1:7f:6e:5f:e4:57:87:
31:75:4d:f9:21:1e:14:69:af:29:bf:81:ff:9d:8e:
77:40:6f:3f:90:2e:6d:d2:13:e0:80:73:44:a5:19:
67:1b:3f:29:2f:de:23:2d:f8:20:2a:84:a4:93:b4:
03:82:10:f5:83:7f:ce:06:7b:c1:f8:a9:a2:a7:13:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:D3:9F:F9:5A:39:8A:AD:18:28:27:6E:5C:66:F4:50:76:06:FB
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:62:ff:bb:11:94:17:a0:88:79:f2:46:95:fa:b1:fd:ee:85:
a7:41:9d:60:f4:40:63:99:99:5a:f5:0a:f2:3b:cf:72:f5:32:
47:8c:25:2f:65:ba:03:2e:b2:0a:e7:7c:76:8d:8a:b4:ae:cb:
03:42:1a:50:fe:44:ba:8a:40:78:db:67:46:48:57:d9:ae:bf:
d7:7a:86:29:85:5c:a9:b3:31:ac:d0:fd:42:7b:1c:e1:07:2b:
da:82:ce:b8:08:e8:a6:34:79:36:f0:bf:99:f1:70:b1:ad:00:
12:99:8a:dd:b6:98:a4:22:1b:13:62:07:c7:53:cb:b1:d8:f8:
95:f3:e1:cd:b1:b6:dd:df:82:70:49:f6:ff:37:18:d4:19:94:
fd:92:67:48:de:5c:4d:c1:fa:74:31:3a:f9:a3:17:92:bb:7c:
7c:00:d1:b0:dd:f6:fc:61:b7:56:af:38:32:ce:51:d1:40:d3:
8e:41:60:3c:f3:d7:b5:3e:42:99:87:0e:3b:88:4a:db:3e:ec:
cc:b0:bd:32:cf:db:de:40:26:82:d4:5a:a3:c6:1a:9a:d9:c7:
fb:c8:f7:e6:18:f8:58:1b:5e:49:bf:7f:c2:a1:d5:81:b9:5b:
73:9d:bf:37:1c:90:40:3b:77:f8:1b:ef:b3:a9:5f:5a:cc:af:
93:ff:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:06:28 2026 by rpki-client