Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: Tl7FuFFM9CZBRGulfqlFJom5VBtE3ypMcvq4wD2t69I=
Subject key identifier: 2F:9F:DB:72:5B:0F:E6:A9:5F:06:FB:3B:9A:A7:9F:58:CF:50:48:0D
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 019D9962204D6E0F96B363D09DEE7309590B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 15D4
Signing time: Fri 17 Apr 2026 03:00:37 +0000
Manifest this update: Fri 17 Apr 2026 03:00:37 +0000
Manifest next update: Sat 18 Apr 2026 03:00:37 +0000
Files and hashes: 1: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: 2+6G2W7b9Zd9QAXl02vcpZxowHRIj96IGhclPvKjTIo=)
2: wzQ_1HuFlBCWtBgTiIg-4_ON4Ec.roa (hash: Po5isFSJ0zw1oEwxSbVlxEIJ6Q1+V1FNWqf4intCsK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:20:4d:6e:0f:96:b3:63:d0:9d:ee:73:09:59:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Apr 17 03:00:37 2026 GMT
Not After : Apr 18 03:00:37 2026 GMT
Subject: CN=2f9fdb725b0fe6a95f06fb3b9aa79f58cf50480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:96:47:bb:f3:32:a7:2a:43:44:13:89:52:
92:7f:c0:a1:a7:22:42:89:0c:1a:84:f9:8c:51:cb:
61:a1:ac:a5:bc:21:8c:dd:ff:b3:21:f5:3e:93:3d:
4e:4d:b8:3d:be:1f:60:3a:bc:f8:13:d2:a4:e8:58:
80:cc:8c:cf:8b:f4:f7:2b:54:ff:c5:97:74:65:4c:
2e:49:90:66:64:84:f3:b9:59:21:13:5e:81:28:f8:
8e:09:7a:f9:a3:51:16:78:2d:47:22:e0:7e:8e:77:
a4:36:98:e2:00:4e:d0:3f:41:ee:f6:78:d1:60:ef:
2b:76:15:ac:1e:71:4f:94:0d:a3:e0:3a:02:c4:a0:
a3:4c:9c:35:c1:3c:20:0f:f6:a9:e7:7c:65:53:53:
e6:27:0b:97:a4:26:81:72:24:40:23:eb:ab:51:06:
3f:ee:a4:6b:51:f4:a3:79:7c:45:b0:e1:08:22:f5:
0d:a8:86:41:29:4e:3c:48:cc:4b:19:eb:9a:86:6c:
b8:57:44:16:78:26:3d:14:ff:45:13:7d:a8:89:c3:
9f:a7:aa:4d:74:75:df:6b:a5:0c:ab:7e:3f:5a:2f:
38:63:02:c2:c6:57:0e:12:0f:4c:45:0c:f8:7a:ec:
12:64:aa:d5:8a:08:04:92:01:31:49:02:e8:15:6a:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9F:DB:72:5B:0F:E6:A9:5F:06:FB:3B:9A:A7:9F:58:CF:50:48:0D
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:49:49:bc:54:7c:b3:cf:78:79:7f:7d:86:67:ab:5c:5a:33:
07:cd:cf:18:8b:39:10:59:43:eb:a8:57:dc:ca:0c:c7:f9:62:
8d:e8:7b:16:af:5b:cc:c0:d3:08:d0:2a:bc:40:cd:4c:e3:b4:
51:54:a6:3b:dc:ef:86:00:9d:e0:75:62:4e:19:81:aa:15:a9:
af:a0:b2:28:f2:34:ab:dc:5e:26:e6:be:61:46:a5:65:04:c0:
5d:2c:61:04:89:0e:c4:9a:26:17:f3:1f:77:44:88:06:1a:ff:
ec:41:4e:ae:de:7a:b3:b1:09:59:bb:97:34:bc:28:99:af:7f:
60:c1:d2:a7:7a:e0:93:ae:72:9a:49:0f:90:65:8d:c5:ef:9f:
22:ac:6e:61:5f:ef:6c:f8:20:05:ed:e9:cd:89:a6:76:0d:cc:
e1:90:10:6a:0e:e6:fc:89:10:b6:55:2e:2b:65:a8:5c:7e:d1:
d7:59:d1:55:c6:18:24:39:f0:88:33:97:22:38:9f:85:6e:06:
dc:76:41:e4:a9:f7:79:c8:ca:92:aa:5b:8a:df:31:83:9d:07:
78:a9:5b:75:4f:6e:fa:83:92:80:c1:be:25:d2:ad:1d:b4:7c:
0f:88:12:9f:ed:64:2e:33:b1:0a:31:31:b2:db:bc:06:cf:bd:
84:65:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:02 2026 by rpki-client