Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: Mjt1BezzVVwAUB0ZZAkQD6NH6O2MyDZweQHk++ePHgw=
Subject key identifier: 9B:F1:2B:AA:7D:3A:2D:B6:AC:49:DE:66:96:8F:61:65:03:57:2F:68
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 019D992B71620FFE086BCE0D4B83C239C5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 06F0
Signing time: Fri 17 Apr 2026 02:00:54 +0000
Manifest this update: Fri 17 Apr 2026 02:00:54 +0000
Manifest next update: Sat 18 Apr 2026 02:00:54 +0000
Files and hashes: 1: 5AdJAtotSZ6-3RjcAlYlJ7tU3r0.roa (hash: Jfwedi1GqsNw78sfU1IyKbpy27gfbSz+DOrazFRB1dc=)
2: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: KAlxjRGMXqDMXYQgfiO56VS0X/YuBK/y/iQiZ7EI2ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:71:62:0f:fe:08:6b:ce:0d:4b:83:c2:39:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Apr 17 02:00:54 2026 GMT
Not After : Apr 18 02:00:54 2026 GMT
Subject: CN=9bf12baa7d3a2db6ac49de66968f616503572f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:a5:c5:9f:68:f1:76:d8:bc:e7:a2:4c:34:
07:9e:d5:04:7f:30:ba:fd:1a:44:d6:52:ad:33:e5:
eb:b2:a5:cd:c6:00:2a:9a:30:7a:4f:75:6f:7f:8b:
ac:32:ed:0a:5c:0a:83:70:7e:e1:d5:80:5f:d9:9a:
01:cf:95:25:d6:43:44:a7:4f:d4:1d:21:65:ba:d4:
96:5e:93:91:bb:af:36:f7:72:1f:0f:af:9d:0a:d0:
e5:4f:a8:80:c0:7e:e5:40:36:e3:1d:62:1f:bf:8f:
75:36:64:fd:ba:e8:ac:bb:8d:e5:7b:0a:32:28:38:
0e:f0:4a:d3:61:7b:b8:8c:96:d9:0d:1e:92:17:f0:
af:2d:9d:35:62:ac:a4:3a:7e:df:73:83:a6:60:9c:
47:1b:31:07:da:26:03:63:26:03:d0:e8:4a:d2:1b:
3f:8b:7a:9f:a8:22:8c:2f:be:a2:87:dc:c5:bb:98:
e9:5e:f0:33:c8:60:ed:b0:bc:25:1e:a8:59:f9:74:
5d:6c:af:50:97:6c:9f:eb:14:81:fa:48:f0:99:79:
05:7e:b2:34:28:41:05:2d:80:4d:8e:df:5e:c3:d0:
34:82:20:09:0a:cc:c0:40:28:b3:74:24:b0:b1:bc:
ef:be:45:8b:f9:f6:28:e3:04:3d:36:9d:1f:f1:e3:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:2B:AA:7D:3A:2D:B6:AC:49:DE:66:96:8F:61:65:03:57:2F:68
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:aa:4f:07:32:f5:2c:4d:5d:dd:84:ef:02:b8:1a:b3:c7:a6:
a5:d1:67:dc:84:af:9a:d2:c8:5a:fd:d8:b8:c6:ff:55:b4:c6:
b9:ba:95:77:01:fd:43:12:ae:fd:94:86:aa:ae:ca:61:de:16:
3f:90:53:ae:05:0e:0d:b9:16:b5:45:55:d0:f6:5c:4c:37:21:
e7:74:d0:0f:f1:78:71:2f:08:68:f6:e2:16:f6:b8:c6:a5:b7:
ee:c6:04:a3:f0:c4:18:1d:5e:ff:78:60:97:3c:15:4a:f9:fb:
b0:1a:3e:7d:b7:ae:2c:a2:92:88:5a:c8:5b:a4:81:8a:1d:6e:
6a:38:e1:ee:8d:2f:d6:c0:55:61:36:a7:50:33:d6:65:3b:0b:
95:32:b0:e6:63:90:7c:a4:10:0f:54:fd:8e:6e:d9:bb:47:e8:
78:ea:21:07:67:6c:08:c3:38:6d:46:f5:36:71:a2:a5:7e:13:
88:20:94:8f:7b:08:19:96:2c:8c:bc:36:80:89:f7:11:49:56:
81:eb:0a:72:b5:64:b4:28:be:12:06:fe:13:5e:25:9d:1b:ef:
56:92:3e:f4:86:59:28:db:9f:15:03:db:6f:14:de:5d:b0:3e:
b3:62:0a:dc:d5:f1:59:2d:40:fe:f7:98:97:7e:ca:df:91:b6:
17:16:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:59:25 2026 by rpki-client