Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: TR0GVgXwbQa9Ex/VgPHtTQb+J68vy/1ON0N0kKFD4K4=
Subject key identifier: 54:F9:87:CD:AD:64:87:EA:59:EB:29:53:55:30:B5:EF:DB:CB:CB:D5
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019FAC3F34AF7C24DF13651EE0E9749D45AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 05B9
Signing time: Wed 29 Jul 2026 05:00:51 +0000
Manifest this update: Wed 29 Jul 2026 05:00:51 +0000
Manifest next update: Thu 30 Jul 2026 05:00:51 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: 8X4QTg6MeEmjBoPOa2DK+2TfhlDTpN5YQiV5kWuKQzk=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:34:af:7c:24:df:13:65:1e:e0:e9:74:9d:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jul 29 05:00:51 2026 GMT
Not After : Jul 30 05:00:51 2026 GMT
Subject: CN=54f987cdad6487ea59eb29535530b5efdbcbcbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:de:94:b6:76:15:99:eb:d7:da:9c:f6:fd:
63:85:6a:a6:52:47:ec:60:ac:24:f5:d8:42:68:0a:
d8:23:ff:62:4f:8a:c5:16:b3:e8:7e:dc:a9:56:77:
0a:b3:b3:b8:73:c0:88:58:b4:fa:36:d7:ae:5a:ad:
38:d1:d2:f6:e3:31:bb:7b:8f:ba:59:3b:d8:71:0f:
eb:19:8e:33:f8:61:75:36:a9:36:75:d1:8e:ec:7c:
69:33:32:70:c8:75:6c:05:85:3a:e6:ca:9a:b5:65:
1e:e9:eb:ea:7e:0f:68:4c:2d:be:35:50:e1:82:d1:
23:22:17:95:c8:64:74:4f:42:09:08:dc:26:93:c4:
64:55:30:23:4b:43:e3:16:90:c3:01:ff:c7:8d:35:
1a:6b:01:0b:24:c9:43:02:10:ca:86:f5:df:3c:94:
1f:8e:52:c4:44:30:aa:63:f3:7e:3e:95:b4:ee:09:
c4:d6:12:a2:9d:8a:fb:cd:6a:26:c4:72:a9:ff:d0:
0c:03:30:4f:15:04:49:60:51:69:3d:ad:66:ec:12:
c1:d7:cf:f8:bb:e8:9e:e5:41:e9:f2:67:2c:b4:bd:
e5:3c:8f:fd:e9:3b:69:0d:80:26:98:78:63:58:21:
3f:93:cf:cd:2f:af:d1:ef:0b:ea:db:a5:0e:71:a0:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:87:CD:AD:64:87:EA:59:EB:29:53:55:30:B5:EF:DB:CB:CB:D5
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c1:8c:f1:69:0b:ab:99:4a:6e:4e:58:b4:8a:d5:66:bc:46:
cb:91:e4:96:51:31:49:44:8c:9a:bd:a4:9f:66:23:e0:6d:16:
99:a8:76:85:d3:47:b7:7e:13:8b:d7:ff:b5:d6:60:bf:51:59:
66:ec:78:3e:86:ce:69:85:14:06:29:42:33:ec:d8:61:d1:69:
92:f3:23:29:e4:1a:f1:ca:e5:b8:b9:f9:fe:13:08:2e:77:97:
82:6a:5e:ec:e8:ba:24:28:2e:0d:4d:78:40:e9:f9:90:9b:d3:
b6:59:25:63:ca:c6:30:86:26:c5:fb:f6:16:ed:27:72:85:df:
b4:a0:c7:5e:92:c3:fd:25:d7:43:b5:6a:3f:9e:bd:fe:b6:b4:
44:1d:10:39:53:12:2e:a9:af:32:40:10:01:ba:8f:89:ee:07:
6e:29:0f:68:d4:e8:8b:b7:b1:9d:b6:fe:c9:a3:a5:b2:93:fe:
d6:74:58:2d:c2:fc:b1:91:ad:99:51:0a:9e:0e:a2:9d:a5:03:
5c:6f:a1:e1:e5:51:e1:b6:aa:11:a4:c8:89:8a:5e:76:d1:f8:
ae:0c:79:a7:25:e8:c8:21:2c:f0:e4:63:59:5e:39:5a:cc:58:
14:0e:b8:e6:e9:79:a8:54:f0:7c:c3:a9:e3:3d:25:42:6a:56:
88:ca:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:11 2026 by rpki-client