Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: vlGljaQ5BCEMIpeEwIEwjMH/3TZQxH7YPD678U0bXcE=
Subject key identifier: FD:4F:8F:54:16:5B:27:FB:6F:E1:96:D7:CB:78:1F:B7:83:A5:60:06
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 01A0D1C935A5313EB61307EA3DE69C3F9BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 0651
Signing time: Thu 24 Sep 2026 05:00:19 +0000
Manifest this update: Thu 24 Sep 2026 05:00:19 +0000
Manifest next update: Fri 25 Sep 2026 05:00:19 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: 1MdyAXDrNZu11KAr1QmLl/7FtZwIVe9zu3+YjeSJOnY=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:35:a5:31:3e:b6:13:07:ea:3d:e6:9c:3f:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Sep 24 05:00:19 2026 GMT
Not After : Sep 25 05:00:19 2026 GMT
Subject: CN=fd4f8f54165b27fb6fe196d7cb781fb783a56006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:39:48:cc:8b:43:42:0e:07:cf:45:a7:9e:
d0:48:77:6f:29:06:46:67:0a:9e:c4:6c:75:e5:ec:
7a:4b:11:89:6e:bf:ed:c3:39:66:e4:c0:c9:d5:da:
ce:bc:35:a9:77:46:de:88:4a:db:72:b3:bf:dd:1d:
15:05:0c:13:cc:0e:62:05:bb:fd:92:d3:18:b4:c8:
ee:98:b5:ce:30:c5:f9:2a:0a:00:d1:c9:e4:f5:e0:
13:0d:23:e8:6c:db:a3:a7:71:3c:d4:a9:f5:8e:89:
78:ab:32:52:68:09:4a:75:c8:b5:ac:11:f0:e2:e2:
37:2f:8b:e4:5e:93:b6:9a:6a:6a:d4:b8:27:ec:7d:
fc:4e:65:4f:6e:b2:7b:10:09:08:0f:bc:b9:9f:33:
95:16:ab:10:a6:d4:24:64:b9:4d:e0:98:c0:8b:f6:
37:12:3b:ea:8a:8d:86:61:d9:f3:29:c9:c3:61:d6:
78:5e:88:09:45:e6:cc:e3:de:e6:92:c9:7d:98:3e:
53:05:d5:61:9d:4f:2f:59:19:21:19:4b:42:5d:6e:
9b:15:5f:c8:61:8d:3d:49:d4:69:64:24:96:5a:10:
56:71:fa:0a:50:8f:3d:98:ca:a0:5e:84:8f:14:34:
88:2e:12:e8:e6:06:e9:9e:7a:e9:34:52:ec:b6:38:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4F:8F:54:16:5B:27:FB:6F:E1:96:D7:CB:78:1F:B7:83:A5:60:06
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:98:5e:41:4a:8a:c3:ee:49:af:dd:7e:82:32:7c:e4:dc:9c:
15:09:a3:b7:0d:b0:75:c7:da:4d:5c:68:30:8b:14:92:4f:b5:
2c:f7:8b:0d:0f:b4:84:7d:2b:45:29:55:93:b5:50:67:fb:26:
f4:f0:65:77:ba:05:97:59:2d:2d:03:71:86:d6:d6:97:ac:2a:
2e:ca:55:fa:b9:9c:1e:3c:98:eb:7f:27:a3:67:34:4a:58:e7:
1b:61:11:bc:fb:cd:04:e6:f2:20:12:28:e4:4f:aa:2d:4b:f6:
db:88:f4:76:f5:c8:6e:af:18:b1:cf:a4:7c:fc:cd:16:a4:6a:
bb:c5:58:28:77:52:e4:e1:02:70:5c:b4:01:08:78:22:c0:12:
3d:2e:02:a4:1d:0b:50:89:4d:95:54:41:e9:aa:5b:77:22:f2:
9e:4f:af:21:9b:71:5b:57:ec:c0:0b:dc:5d:63:35:a0:72:78:
28:dd:d2:a5:89:b8:d8:fc:2f:00:c1:ed:a9:2e:3d:d0:91:c0:
ab:95:fc:c4:3b:3c:fd:77:91:6d:0c:4f:83:4c:75:53:c3:f9:
8f:06:3c:16:0e:24:f5:7d:dc:04:99:08:b0:fc:f9:7b:2e:01:
7b:39:a0:cc:90:33:ad:31:64:45:b4:b7:52:14:53:78:7d:14:
23:13:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:09:40 2026 by rpki-client