Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: 908xw0Urph5LlKxGrvFq67X/XVaH2PVviKOhWDHib70=
Subject key identifier: 32:B9:06:9A:04:E5:EE:05:9F:A5:1F:12:AC:97:6F:B5:63:D7:58:8B
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 019FAB9AC7A8B846A11257BBF8C4A5899177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0E20
Signing time: Wed 29 Jul 2026 02:01:15 +0000
Manifest this update: Wed 29 Jul 2026 02:01:15 +0000
Manifest next update: Thu 30 Jul 2026 02:01:15 +0000
Files and hashes: 1: 4VL55TR7n8zY5sjEwyy-tDqTfgs.roa (hash: 7BDvUnPmZt5rM/QuBJhcT4U2nlJB/FKzg2OukOPZ9uQ=)
2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: ZzJpeIJ+45fVKBeoxNh8DghANFC2QEkUJBwZpBYP74Q=)
3: KnCfg8nTQsfpTcM_cEW8Uzz8x5M.roa (hash: 2VYLtBiQmGKXrUCSv3SxyNnrS3C6FcV2aiRtsHxSXSI=)
4: arOEcwZhUNm3Hj36Uwng_wKeV9E.roa (hash: B20xitz9JymuHol/jxxjXdJ6lXpi2xW/yyUd53yf3d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:c7:a8:b8:46:a1:12:57:bb:f8:c4:a5:89:91:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Jul 29 02:01:15 2026 GMT
Not After : Jul 30 02:01:15 2026 GMT
Subject: CN=32b9069a04e5ee059fa51f12ac976fb563d7588b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:35:81:cf:68:21:c1:eb:76:71:ed:fa:73:
c5:bf:3b:f1:c4:8c:c0:83:e9:f1:37:10:a1:58:2a:
02:e0:ba:5a:35:1a:3e:dc:c1:a9:71:cc:c0:7a:d7:
f7:8c:b2:60:e7:05:20:a7:9c:61:dc:7c:62:24:5b:
bb:9c:3e:04:67:4a:24:85:45:18:c0:33:71:74:fc:
b8:80:d7:df:88:2c:4e:10:16:23:cf:af:51:c3:83:
4d:ff:d1:13:c8:28:8d:2b:d1:e6:0e:4d:32:d7:fb:
88:b9:dd:01:e9:85:7d:0c:1c:2a:71:b8:7e:5f:97:
6c:9a:7d:d4:0c:d0:ad:37:47:ec:55:94:ed:f1:a6:
34:b7:ef:26:50:48:62:56:86:55:25:d4:d3:58:8e:
7c:eb:33:cf:54:75:fa:94:bd:79:a2:a9:c5:89:0d:
e8:d7:51:55:2f:cb:e8:08:c1:4c:28:f8:95:d4:77:
62:79:ea:e8:f0:62:a1:ee:ac:2b:33:ee:8f:bc:57:
04:13:9f:f2:05:88:a7:6b:8b:b8:e9:cf:98:29:cd:
ed:27:f5:a3:14:8b:a4:aa:07:f6:82:d8:14:4e:39:
b3:7f:0a:11:3d:9d:f5:47:ad:84:d1:7b:a7:79:f2:
29:a0:d7:ff:85:49:80:a1:32:a7:eb:a5:a0:df:e2:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:06:9A:04:E5:EE:05:9F:A5:1F:12:AC:97:6F:B5:63:D7:58:8B
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:c7:7b:18:4a:6e:e4:06:d7:8d:ba:ef:c3:cb:0b:ba:24:
c4:9c:ae:e7:ec:11:c9:c2:f3:16:58:1c:60:b2:73:15:ed:25:
ed:93:13:fb:b4:9d:5b:e7:60:64:c6:fa:00:c3:01:92:7a:86:
65:9b:e6:25:a1:27:52:b8:43:3a:2e:f0:23:15:1c:aa:3e:18:
33:8b:1f:e8:8c:05:9f:c8:bd:93:11:a1:26:3c:06:95:e8:f2:
c9:00:74:d8:99:1e:55:c2:5f:17:72:7b:fc:6a:bc:35:0c:96:
17:3c:bc:d9:30:27:6a:b3:42:52:76:d3:33:bf:27:10:06:d0:
e9:b2:d2:93:e6:5a:46:06:bb:6f:e2:8e:7e:b9:9a:fe:42:6e:
71:5e:ca:e8:9e:58:1c:21:95:11:f5:07:9b:ce:1d:97:e1:1c:
3e:e8:35:2f:a4:f0:c2:a6:c2:d2:f3:e5:c8:f4:f9:5d:aa:f1:
b3:98:21:de:7a:0a:81:58:29:57:c8:d5:ec:33:fd:a4:ce:e2:
4c:d0:af:cf:8e:3d:f4:52:65:1c:5b:bf:84:a1:d2:da:73:bc:
b2:fd:f1:f1:9b:35:3f:51:e6:39:65:24:23:2c:b9:80:2a:fc:
34:95:9f:28:00:e6:6d:eb:74:d3:93:d7:3b:9c:81:f6:5e:72:
12:94:27:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmseouEahEle7+MSliZF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4N2UxYzk3ZjcxZjM1NTg2N2UzZmI4NzdmMjFhYTUxMzBi
NmNmNWQwHhcNMjYwNzI5MDIwMTE1WhcNMjYwNzMwMDIwMTE1WjAzMTEwLwYDVQQD
EygzMmI5MDY5YTA0ZTVlZTA1OWZhNTFmMTJhYzk3NmZiNTYzZDc1ODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqg1gc9oIcHrdnHt+nPFvzvxxIzA
g+nxNxChWCoC4LpaNRo+3MGpcczAetf3jLJg5wUgp5xh3HxiJFu7nD4EZ0okhUUY
wDNxdPy4gNffiCxOEBYjz69Rw4NN/9ETyCiNK9HmDk0y1/uIud0B6YV9DBwqcbh+
X5dsmn3UDNCtN0fsVZTt8aY0t+8mUEhiVoZVJdTTWI586zPPVHX6lL15oqnFiQ3o
11FVL8voCMFMKPiV1Hdieero8GKh7qwrM+6PvFcEE5/yBYina4u46c+YKc3tJ/Wj
FIukqgf2gtgUTjmzfwoRPZ31R62E0XunefIpoNf/hUmAoTKn66Wg3+LrFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK5BpoE5e4Fn6UfEqyXb7Vj11iLMB8GA1UdIwQY
MBaAFCh+HJf3HzVYZ+P7h38hqlEwts9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEt
OWViM2M2ODJiMDA5LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEtOWViM2M2ODJiMDA5
LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdXHexhK
buQG142678PLC7okxJyu5+wRycLzFlgcYLJzFe0l7ZMT+7SdW+dgZMb6AMMBknqG
ZZvmJaEnUrhDOi7wIxUcqj4YM4sf6IwFn8i9kxGhJjwGlejyyQB02JkeVcJfF3J7
/Gq8NQyWFzy82TAnarNCUnbTM78nEAbQ6bLSk+ZaRga7b+KOfrma/kJucV7K6J5Y
HCGVEfUHm84dl+EcPug1L6TwwqbC0vPlyPT5Xarxs5gh3noKgVgpV8jV7DP9pM7i
TNCvz4499FJlHFu/hKHS2nO8sv3x8Zs1P1HmOWUkIyy5gCr8NJWfKADmbet005PX
O5yB9l5yEpQnXw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:20 2026 by rpki-client