Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: idYKdFzFugBrxezWECnhUSRfBzbBLIyj/CYR7o43sdQ=
Subject key identifier: 55:AB:DD:67:E7:DF:A0:55:70:18:E7:13:92:4C:76:E2:BC:F9:F8:43
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019CE6365F569697B31B869BC1695FAE58C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 08:00:48 +0000
Manifest this update: Fri 13 Mar 2026 08:00:48 +0000
Manifest next update: Sat 14 Mar 2026 08:00:48 +0000
Files and hashes: 1: 2SDdZbZHox8NMplwQIrxvgKSu34.roa (hash: kvbkJLaXOyyLA1zVWaE+vWipg18u/BOLkqhk/qFEJP8=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: ZRZpZW2ySoFYyBaBN9xb9/bWASoVTn9qeSH+C6b7v/g=)
3: LcyElSfep6rD8AEBau9p4Ves3zY.roa (hash: cVyB/pcI480WEjCma+PMg1jARTqe0Occ2uE2IiVCZZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:5f:56:96:97:b3:1b:86:9b:c1:69:5f:ae:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Mar 13 08:00:48 2026 GMT
Not After : Mar 14 08:00:48 2026 GMT
Subject: CN=55abdd67e7dfa0557018e713924c76e2bcf9f843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:ba:8f:bb:2c:7a:c3:06:e2:db:95:04:4a:
3f:05:e1:8e:4f:1f:f2:a9:9f:49:b7:71:51:46:a5:
76:82:cb:9c:96:b9:9a:58:c3:71:e2:3e:c5:5a:2f:
f9:8f:da:34:1a:8b:f9:9b:2f:76:2f:23:aa:1e:88:
e7:3c:74:31:39:36:d5:b3:8d:96:40:ee:3b:d2:7a:
da:ab:97:18:f2:64:85:39:5d:c6:20:ce:0b:3f:19:
7a:90:f9:47:57:40:bc:f6:cb:7b:9e:14:ab:07:68:
44:86:05:d6:5f:9f:d9:6e:8d:af:c9:c7:20:78:5f:
f1:c1:3f:d6:00:f0:4f:6e:f3:2f:3e:8c:86:63:8f:
b6:ea:9a:ba:27:93:f1:6f:14:85:1c:35:bf:97:f1:
bf:d1:41:21:8b:06:5b:cc:6f:71:ad:f9:e4:5a:96:
17:f3:70:19:6d:fd:ec:4f:a4:73:2b:e8:b0:19:e7:
9b:dd:c6:81:90:e5:98:63:d3:41:2d:73:67:43:90:
32:c2:af:aa:ad:9d:84:84:61:ed:2e:0a:18:06:87:
68:43:10:15:7b:b5:60:65:e6:53:d9:66:b7:a1:40:
12:e4:55:91:6e:97:dc:65:c7:eb:54:cc:cc:1c:9c:
0a:66:2b:1f:2a:39:64:7c:7d:ba:48:3f:dc:53:33:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:DD:67:E7:DF:A0:55:70:18:E7:13:92:4C:76:E2:BC:F9:F8:43
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e0:cb:2b:64:e5:4b:c5:cb:ea:e1:2d:af:e0:02:e5:24:ab:
5c:87:25:56:4c:98:ef:fa:ac:5d:4b:b6:fc:d3:0b:c9:ba:0e:
cf:6d:06:61:db:70:be:ba:21:d8:4e:ec:e8:6c:6d:3b:09:8e:
b9:38:e5:49:3c:bc:93:4d:1e:f1:d1:eb:2c:02:98:4c:1d:dd:
7d:76:e7:68:15:ec:0d:f9:2b:58:4e:ed:55:55:7a:13:3b:54:
4f:71:f3:da:04:e4:c6:a2:b9:6b:0e:43:c6:5f:f5:3d:a0:7c:
b9:81:2c:c7:19:83:de:a7:bb:41:7c:58:56:d9:a9:e1:12:46:
90:e4:0d:e2:9a:a9:62:5d:ae:f7:91:6a:aa:49:e2:43:ec:88:
03:37:be:6c:21:95:c7:ea:0a:f3:c3:a8:ed:5a:6f:b5:48:98:
44:72:f2:7f:12:8d:4f:f6:0a:70:78:05:c5:bc:82:8f:11:29:
2f:a7:cb:d5:45:4b:3c:70:bd:1e:c3:49:d3:de:3c:4e:57:59:
3b:c3:20:55:54:38:44:ad:fd:1c:45:c0:4f:32:19:f9:0d:90:
49:12:94:87:dd:1f:f8:92:16:6b:fa:49:aa:9a:f6:a6:36:52:
11:d9:1a:00:3c:f5:79:72:2a:ac:78:c1:a1:9c:88:14:8a:63:
39:ec:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:26 2026 by rpki-client