Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: iv/vjILSf+g9Owib16Sw3tn/3q9Dux4ewUerJdmtLeU=
Subject key identifier: F5:89:D0:BF:75:E8:95:7C:36:85:F1:B8:B5:68:25:C8:CF:79:1E:B8
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 01A08CE8D22A31A1FC994E03AFC19E71EA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 20:01:03 +0000
Manifest this update: Thu 10 Sep 2026 20:01:03 +0000
Manifest next update: Fri 11 Sep 2026 20:01:03 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: cclROVHm4r265FTFv3E8mq4jj5fY7KkrEY4ryt6kuAQ=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:d2:2a:31:a1:fc:99:4e:03:af:c1:9e:71:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Sep 10 20:01:03 2026 GMT
Not After : Sep 11 20:01:03 2026 GMT
Subject: CN=f589d0bf75e8957c3685f1b8b56825c8cf791eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:59:43:fd:5a:55:2f:2f:fe:44:9f:60:e3:
f5:5b:b9:0a:16:ee:a4:c9:5d:d8:21:ca:10:0f:9c:
8e:fa:50:de:5c:85:97:d9:77:27:d4:a8:70:a0:0c:
62:29:f5:2c:e6:c8:5f:8e:6c:32:7d:ad:fb:cb:bb:
f3:a6:90:6c:13:c3:ce:2f:0e:3c:bf:a4:f9:e2:71:
19:41:8b:1c:f5:b0:bc:d8:f3:a0:84:31:60:28:8d:
ad:a8:06:83:d2:04:6a:fb:b6:2f:0c:c4:cd:fc:b2:
00:d6:bb:ef:6d:97:db:0e:d2:7a:05:41:66:fe:67:
b2:3f:11:0d:ac:33:3f:0a:9b:23:78:c1:c2:3d:c0:
37:1f:ff:68:74:d0:5e:ab:a7:bc:83:14:47:ae:bc:
2a:03:b7:c2:7c:86:5e:c7:17:40:fb:52:06:0c:6b:
9a:0c:a4:11:28:41:4d:4b:be:de:e2:ca:ad:41:d7:
db:7c:39:17:a4:f6:cb:17:53:a4:12:b3:c9:3a:ad:
f2:66:f0:f8:bf:ba:f5:52:75:2e:01:c0:f3:4f:da:
a9:fd:a3:c0:85:d4:fa:0f:74:02:81:77:a7:e7:2a:
8a:5a:0e:bc:e6:43:84:ae:71:26:f9:63:58:70:a1:
a0:ff:c2:65:79:6b:f7:b0:c2:00:5f:55:0a:aa:a4:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:D0:BF:75:E8:95:7C:36:85:F1:B8:B5:68:25:C8:CF:79:1E:B8
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:98:4c:21:4b:d4:c2:d6:66:a7:e2:93:b0:2d:bd:44:c3:e6:
77:3d:73:f8:5c:87:60:7e:96:58:23:3d:1d:3d:af:94:7f:fe:
34:9c:16:40:9b:e4:e9:a6:a6:ed:f7:33:4f:fe:8b:b6:d5:d5:
5d:b9:fa:4f:4e:81:dc:24:4b:38:9f:d2:21:9d:43:00:4c:9c:
6d:f7:33:08:50:46:7b:97:0a:40:d0:79:83:c2:f4:70:2a:fa:
3d:5d:13:b5:23:02:5d:28:17:b9:3b:d6:86:ab:26:ec:57:4c:
e9:8b:ea:8f:26:9b:3d:64:04:4c:c9:28:12:fb:07:7b:36:e1:
b2:94:37:04:70:60:f6:44:c5:e6:fd:b1:aa:b5:aa:17:93:d8:
66:d5:ca:58:4a:8c:14:02:6a:3a:57:a8:6d:00:ce:37:af:5e:
21:e8:f1:39:92:ab:7d:23:74:c3:b2:36:7b:58:2a:52:5e:e8:
05:7f:82:80:42:1b:ba:a7:01:eb:33:6a:0a:ac:65:a5:ec:21:
1d:6d:4d:21:d6:16:54:64:da:12:8c:0a:ce:41:97:8e:d7:12:
4e:f2:60:9d:bd:33:dd:d6:22:d7:8c:8c:23:39:ed:df:e8:a5:
da:7e:c7:ee:bc:43:24:c3:87:2b:91:d8:62:e2:8c:a2:62:f7:
c5:8e:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:32:28 2026 by rpki-client