Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: JaiHjLv3RGhGhNU2lExBGY2UCIYlrArRsdtzm5I2xJQ=
Subject key identifier: 6D:D4:9A:15:22:7B:14:07:C4:CB:AE:13:93:EA:DC:79:A2:4A:86:26
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 019CABA206E5E23574A62E83AF3646393F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 0675
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: 5AdJAtotSZ6-3RjcAlYlJ7tU3r0.roa (hash: Jfwedi1GqsNw78sfU1IyKbpy27gfbSz+DOrazFRB1dc=)
2: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: g7N0m+LKd8A8Oww2A8La3ZnU+qDzItHuT/XoROQuyeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:06:e5:e2:35:74:a6:2e:83:af:36:46:39:3f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=6dd49a15227b1407c4cbae1393eadc79a24a8626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:37:3b:76:9a:b6:33:80:c7:77:74:40:db:
df:1a:86:e0:e4:2b:a6:c4:11:54:c7:01:53:a6:da:
75:27:ae:64:25:2c:51:c3:6c:94:48:9e:8d:34:e5:
12:27:8a:e7:c5:72:83:de:a6:46:58:4f:23:97:a9:
2c:49:73:8b:05:d2:b1:75:d3:40:3c:1a:34:9d:0c:
4e:fb:81:51:60:59:11:62:4c:cf:66:71:0d:fb:d3:
e7:f1:79:95:c3:70:7a:04:90:e6:3b:d1:11:03:a9:
32:ae:32:10:2a:cb:96:65:83:db:d2:0a:bf:4f:7b:
91:22:28:d2:7c:0e:09:e4:e7:06:ab:2f:1e:89:a9:
d9:bd:36:d0:ed:54:13:be:a9:08:45:45:a8:7a:76:
13:10:9c:27:cb:8c:ef:5b:a4:88:67:d6:c7:aa:23:
9f:1b:10:ed:b4:07:d6:a5:17:cc:38:d0:f1:da:0e:
37:77:9c:3b:38:7c:db:26:0a:5a:db:46:10:c4:6b:
c1:c0:46:d7:73:97:ed:c7:0d:49:4e:ac:58:44:e7:
f9:57:7e:31:6f:f9:f3:93:85:e1:19:de:8c:02:27:
08:db:d5:3d:4b:21:cd:79:f3:b5:45:09:5f:4c:4f:
62:46:ec:af:b2:b9:3f:44:f4:0c:04:5e:de:39:90:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D4:9A:15:22:7B:14:07:C4:CB:AE:13:93:EA:DC:79:A2:4A:86:26
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:c0:88:96:de:69:0c:dd:42:dc:5f:2b:fe:bd:b6:f8:6e:
4c:71:bf:4f:19:61:ef:98:97:e9:87:dd:cc:0f:d6:6c:62:12:
8b:23:ef:99:c1:20:3c:a8:7b:63:4e:8f:04:e6:e4:f3:f4:b5:
88:ca:e0:a0:e3:64:0b:55:10:2b:ab:09:b1:19:f5:6a:2a:f4:
f4:de:4d:66:91:e3:7f:11:a9:29:db:0b:26:a9:76:80:e2:a1:
a9:61:5d:84:76:db:7c:74:bb:40:19:30:56:bc:77:7d:40:7d:
ae:0c:eb:8d:4b:36:b1:91:c3:4f:6d:34:c2:6c:c4:96:51:95:
33:5d:c6:3b:74:aa:55:97:43:3e:d5:6b:8c:9e:9f:fd:c6:de:
3b:db:42:b5:31:09:c5:c2:74:ef:76:61:04:e6:62:fe:4a:36:
ee:92:ac:cc:4f:a4:e7:4e:62:69:d3:21:67:1d:f2:a7:89:c4:
94:df:5f:b3:8f:d7:ae:18:b0:79:cf:b4:c6:3f:cd:60:4e:35:
b7:7b:2a:fd:79:f4:4b:ad:36:00:c2:f7:af:be:fb:a2:3c:70:
7c:0e:13:f4:f9:26:e5:bc:89:39:f9:da:2b:dd:13:0a:77:3f:
24:ce:10:8c:07:1d:ee:d9:dd:7c:17:30:41:f4:9a:09:e3:93:
54:b7:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:21 2026 by rpki-client