Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: N9wWkII7vkkBsKk2dz9ubgDgzFZ42GUnW24Hp55wOQE=
Subject key identifier: 90:AD:36:79:85:FE:A9:C1:2A:A1:39:78:23:FB:99:6F:C9:F4:05:CE
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019D992B4145666D2E48B39247797B3C765A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 04A6
Signing time: Fri 17 Apr 2026 02:00:41 +0000
Manifest this update: Fri 17 Apr 2026 02:00:41 +0000
Manifest next update: Sat 18 Apr 2026 02:00:41 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: iZOF0MeIgaAjTWpmt9AYPG3Xqmaf33xf23kL2wGH5Co=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:41:45:66:6d:2e:48:b3:92:47:79:7b:3c:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Apr 17 02:00:41 2026 GMT
Not After : Apr 18 02:00:41 2026 GMT
Subject: CN=90ad367985fea9c12aa1397823fb996fc9f405ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:88:ea:80:f8:3e:a0:d8:d9:33:05:28:75:
38:8f:8f:9c:ab:52:34:bc:81:cd:78:d6:a5:86:d0:
f0:03:2a:67:08:10:e3:b8:1c:cd:d6:d8:ed:ab:c0:
78:51:80:f5:99:32:cc:4f:37:13:eb:4a:da:ee:3e:
cf:1b:df:0e:79:b2:b9:1d:cf:4b:bc:0c:38:fb:0b:
73:4e:38:3c:25:2d:e8:5e:d3:83:da:e7:87:8d:d8:
26:39:1e:3d:bd:d5:f6:90:31:ff:e5:f3:61:f8:0a:
a0:e0:1b:d5:4f:49:66:4c:9d:dc:29:d2:96:62:8f:
c0:01:47:42:25:c5:95:c2:02:88:44:19:db:24:2f:
3f:2f:40:0f:93:cc:53:08:2e:99:a5:8b:e9:6f:8b:
6d:86:4c:b6:41:ce:d2:0b:b8:7f:b7:ac:ea:9c:93:
3a:79:15:85:48:32:5d:67:45:6a:4a:cd:0d:d0:91:
dd:24:a1:c5:6e:5a:c6:07:5e:e1:c6:c0:c3:3d:32:
0f:56:79:47:44:b4:e9:70:87:24:4d:ec:e8:47:1c:
8f:ec:12:b8:94:21:7d:9a:d6:86:30:93:42:a5:a6:
57:1b:95:6b:b2:0b:b2:ee:17:11:7a:cd:8a:ad:b3:
c3:05:a8:22:75:e8:c8:ea:6d:21:74:4c:2e:e7:32:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:36:79:85:FE:A9:C1:2A:A1:39:78:23:FB:99:6F:C9:F4:05:CE
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0d:d6:59:23:f9:7e:10:d1:d2:3e:49:7c:75:18:00:d1:2c:
04:44:4d:7c:12:7e:0c:12:76:ca:2a:5c:a4:19:09:5d:ae:f8:
66:c2:1e:01:05:ae:f9:92:53:b3:92:34:e1:1d:15:0b:28:86:
f4:cc:8d:71:8d:88:9a:fb:6b:4e:11:68:24:71:17:5d:80:6f:
26:60:80:64:11:2f:4a:77:4e:4f:9a:1d:56:82:dc:73:7a:eb:
5d:b6:93:7e:5d:b0:c9:b4:4c:e7:b9:32:60:59:b6:1c:c6:f7:
c5:54:1f:6c:32:7c:8f:15:d7:7d:f0:48:0d:cc:ba:7d:52:2e:
8d:73:b2:2c:aa:96:ad:b1:2b:67:a2:0a:b7:17:02:13:9c:99:
28:66:ae:aa:15:d9:07:3b:e3:eb:7b:66:62:04:fd:e3:a4:cc:
e2:37:1d:4f:09:3e:73:28:d9:a6:5c:b4:e5:48:24:a8:21:da:
cb:5f:32:0a:22:b5:2e:eb:c8:bd:b6:93:7c:68:95:30:88:78:
dc:a1:69:32:52:5f:30:2c:cf:b9:0b:b5:5b:10:97:23:5b:ec:
e6:98:10:5b:83:b6:28:0f:86:5e:39:30:90:57:d4:a6:13:a6:
67:23:66:b1:bc:bd:81:d3:75:73:6c:1a:ba:41:41:68:b2:73:
31:03:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:44 2026 by rpki-client