Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: 8RGXBkXDkbqdBTRsH8T7HdAsixw//3IQ1mX5sp9tfNY=
Subject key identifier: 12:31:E7:C0:59:32:F6:57:06:AD:24:6C:19:0F:B2:D3:84:79:83:8C
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 019CABD9C901C46A6B36A764FC972D9221B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 1559
Signing time: Mon 02 Mar 2026 00:01:42 +0000
Manifest this update: Mon 02 Mar 2026 00:01:42 +0000
Manifest next update: Tue 03 Mar 2026 00:01:42 +0000
Files and hashes: 1: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: LqVpi4Ayq5NsxlFUC9iUQiUINkikPcsFAtlgC03MNV8=)
2: wzQ_1HuFlBCWtBgTiIg-4_ON4Ec.roa (hash: Po5isFSJ0zw1oEwxSbVlxEIJ6Q1+V1FNWqf4intCsK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c9:01:c4:6a:6b:36:a7:64:fc:97:2d:92:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Mar 2 00:01:42 2026 GMT
Not After : Mar 3 00:01:42 2026 GMT
Subject: CN=1231e7c05932f65706ad246c190fb2d38479838c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:79:ed:a2:39:e4:42:51:80:07:86:ec:11:
92:87:56:45:91:80:da:a9:5c:ed:bb:8a:c5:61:5e:
af:ed:53:75:f9:38:0a:a5:9a:ee:a1:d8:19:0f:5e:
2f:6b:05:c7:b4:bd:0c:d9:ac:6c:ed:d0:8b:5d:77:
35:bd:16:92:92:54:ea:8e:e2:85:f4:a5:ff:2e:cf:
80:1d:5d:71:38:76:23:43:4a:88:f0:15:ba:e7:d8:
61:5a:b9:f3:85:91:59:90:35:d9:20:3a:a0:59:9b:
09:aa:6d:84:52:0a:2b:81:d9:ea:22:6a:87:5f:0f:
88:b4:bb:23:b6:0c:dc:1f:66:57:73:57:b2:2f:9a:
f1:63:3a:fe:55:d0:58:7b:2f:23:71:76:4e:ef:69:
c1:85:e3:59:33:85:17:ac:5f:ce:17:3b:e8:84:1e:
b2:4a:8d:2e:aa:83:f6:68:48:a6:38:ac:d6:ce:a4:
45:de:05:a0:cc:0b:a5:1a:6e:0a:77:84:3c:59:6c:
a5:ad:d4:ca:5c:08:e0:5a:94:db:41:d6:78:4c:6e:
bc:ab:55:d8:73:72:ff:e3:f7:0c:61:cc:ec:02:a4:
2b:0c:0b:55:2e:1a:aa:50:99:54:17:10:d4:70:e0:
e6:c3:19:76:94:ba:fe:e0:92:d0:09:fc:7b:b2:02:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:E7:C0:59:32:F6:57:06:AD:24:6C:19:0F:B2:D3:84:79:83:8C
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ab:df:28:5c:5c:17:95:cb:85:bb:68:f6:fb:97:27:72:49:
51:08:17:61:3f:08:ad:77:aa:cb:34:0b:ba:c9:5f:9e:76:80:
52:29:d0:f1:4b:90:dd:13:91:ff:e4:50:5c:c8:61:ac:1e:9e:
a5:4a:79:61:68:5a:42:5c:07:6f:d4:7b:ed:57:f3:45:af:38:
fe:cd:66:05:d5:e8:9c:dd:77:88:1e:0e:6e:64:ae:5d:93:2b:
ed:a1:08:34:0f:ee:a2:b2:7e:8e:b3:f7:da:09:f0:e4:78:87:
30:26:68:42:ae:f0:26:b6:bc:3d:7b:0d:a9:9c:3a:b3:d3:09:
33:cf:e8:f8:bf:a5:91:dd:0d:0b:45:f9:b5:03:45:62:d3:c6:
07:2b:f4:9e:84:cc:7a:42:e5:ab:ac:c9:5e:76:c2:9c:47:02:
e7:13:85:80:13:a9:03:88:4f:64:ac:ec:c3:cd:e9:3b:d6:ae:
aa:88:07:0a:de:a6:1d:4e:ee:4d:4a:da:7a:62:8d:11:6f:d3:
9d:3f:49:6e:b0:17:08:2f:c2:71:fe:b6:55:27:3f:97:bc:09:
fa:70:53:34:d9:8d:14:84:d2:85:65:65:a9:f0:58:19:e7:3e:
93:c4:7f:e9:a3:ab:3d:71:69:04:b0:43:25:6b:15:bd:9d:bc:
81:db:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:36 2026 by rpki-client