Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json)
Hash identifier: F4OtXZGETgK3PSqAF03gGCHm+KteQGo3g6+4O9pN/uk=
Subject key identifier: 22:EA:38:43:98:D5:79:97:1A:D0:DB:36:BD:7B:3B:AD:33:2F:2D:DE
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 01A0CA7E27CAD73C89650A88522489E7AEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
Manifest number: 03AE
Signing time: Tue 22 Sep 2026 19:01:00 +0000
Manifest this update: Tue 22 Sep 2026 19:01:00 +0000
Manifest next update: Wed 23 Sep 2026 19:01:00 +0000
Files and hashes: 1: 9h6W4r2ZUmSWR3rPAISEaioyTnA.roa (hash: YXizQOzPpOHcnczJqxPHErnPR6o/jvzp0veayf1oTFI=)
2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: S9cDWWFMoVIxRQPkwhWqbgNChi6wjqdPt5KdnxvBiUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:27:ca:d7:3c:89:65:0a:88:52:24:89:e7:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Sep 22 19:01:00 2026 GMT
Not After : Sep 23 19:01:00 2026 GMT
Subject: CN=22ea384398d579971ad0db36bd7b3bad332f2dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:6a:90:15:62:7d:d5:16:f7:01:0d:23:61:
20:35:49:36:b5:88:62:e3:76:7e:97:db:60:9f:aa:
6b:6b:9f:3f:74:b3:bb:ab:68:92:d0:20:f2:4c:0c:
98:6c:1f:23:c8:6c:b8:52:63:47:d4:bd:61:ee:5b:
a1:16:8e:c0:2b:33:93:a9:a6:6d:91:ae:fb:44:35:
33:e9:4b:d8:a6:88:03:99:56:26:d8:08:89:86:de:
ca:93:8a:f2:bd:7e:55:39:02:08:c6:c1:64:b7:78:
44:f1:c0:e1:db:d7:ed:32:d3:fa:44:86:ae:9a:1a:
b6:38:25:c0:a7:20:d3:a6:e5:c3:a9:6b:65:6b:e6:
5b:4b:86:8a:17:e4:3b:5b:67:17:eb:43:82:31:75:
55:8f:e5:9f:9d:13:0e:c7:d4:54:3a:28:c7:da:bb:
c0:ba:a9:e3:74:42:a0:b2:18:50:cc:0d:78:15:3b:
07:34:f5:f3:ca:d4:ca:7b:a7:27:cb:dd:95:0f:a1:
c9:43:21:2d:38:79:98:92:7e:bd:69:d3:1b:61:73:
41:da:cd:c1:08:47:c3:95:bf:9b:e9:7b:cb:35:21:
28:43:72:dc:2c:c2:4a:f8:8f:5d:92:c5:32:96:c6:
ad:44:25:1d:e8:1d:f0:77:d9:c8:c6:0a:17:b6:f4:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:38:43:98:D5:79:97:1A:D0:DB:36:BD:7B:3B:AD:33:2F:2D:DE
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2b:ca:b6:80:3e:f8:f5:05:b1:a4:b7:46:18:88:98:84:dc:
9c:aa:5b:43:02:8a:cb:e7:68:28:60:2d:fb:1a:7c:6e:81:b6:
a1:33:b7:eb:32:75:ab:bd:50:de:a5:98:69:23:d9:44:48:8a:
be:a5:96:c1:97:d5:a2:a7:39:cb:ec:4f:21:a2:40:a9:3f:09:
f2:28:24:7f:06:73:b9:11:28:00:20:10:2d:f3:a5:d8:be:fe:
78:d4:ce:9b:03:73:cb:e0:ca:52:6c:2d:cc:99:4f:54:61:82:
a4:ed:1e:80:f9:88:30:fb:be:b5:f1:83:05:c5:9d:a5:64:95:
1c:28:a7:c8:0b:3f:8f:16:4d:86:92:67:10:d7:e5:e9:1f:20:
40:c7:b8:5c:71:69:34:1b:17:52:e5:1b:78:88:36:3f:06:64:
93:1f:a7:0c:70:c1:0b:b5:f4:b9:01:b7:5b:8a:31:c4:96:30:
ac:57:7f:1a:e3:ad:4c:f1:07:3e:95:4e:04:f5:08:fd:d4:97:
5a:94:38:fa:9b:a9:45:bd:e7:da:b7:ed:1c:51:9d:c7:6a:ca:
4d:1d:bc:2b:c0:f3:9d:fd:08:dc:63:95:2e:c9:4c:ab:a8:ce:
c6:fc:1b:2e:19:e8:87:15:71:d5:41:36:6a:29:d9:d7:4d:55:
05:ec:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:28:16 2026 by rpki-client