Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: lXAMT/2vkZuGgyGNemIg1mruKpWly072OS4nZD2GHy8=
Subject key identifier: D8:EF:AE:2D:F5:A5:51:60:8C:32:9A:02:BB:D6:0B:C5:13:5E:DC:D0
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019EC29298F47EF7AFBAB3BD1472B4B7FE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 0540
Signing time: Sat 13 Jun 2026 20:00:47 +0000
Manifest this update: Sat 13 Jun 2026 20:00:47 +0000
Manifest next update: Sun 14 Jun 2026 20:00:47 +0000
Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: 81Swfa+hRIbRoKpKCmXf2auZNEAoMWe/0LpydpgARf4=)
2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=)
3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:98:f4:7e:f7:af:ba:b3:bd:14:72:b4:b7:fe:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jun 13 20:00:47 2026 GMT
Not After : Jun 14 20:00:47 2026 GMT
Subject: CN=d8efae2df5a551608c329a02bbd60bc5135edcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:82:ea:42:4b:6e:db:18:f3:12:f1:cb:2f:
ad:b0:0e:44:92:81:aa:d2:24:10:3e:7b:e7:d3:07:
f5:a3:0c:da:92:36:ee:fa:af:2d:8a:b7:e5:f8:0e:
c3:7a:8c:e1:c7:07:6b:30:75:fe:85:a4:29:e8:09:
4d:1a:ba:2d:33:16:51:4a:83:74:bb:ca:a2:b0:83:
6d:f0:75:67:bf:58:0f:fd:8d:3e:3d:d6:81:6d:10:
94:6d:08:ae:c5:ce:97:22:ae:fc:61:3d:10:2b:3e:
ef:07:f3:8e:6f:d0:00:08:37:1e:18:ab:d5:3f:dc:
fc:46:65:bc:86:70:06:e1:f1:af:81:cd:13:55:ba:
b7:d4:52:11:9b:a6:1b:26:91:5c:68:4b:96:67:8c:
98:23:21:85:d0:bc:0f:9c:3d:f4:c0:d6:c4:08:b7:
c3:12:d0:6e:41:de:bf:d4:1e:38:04:55:ea:11:a6:
5f:5c:18:27:1a:bb:cb:ef:cd:37:fa:8c:f0:2d:b9:
73:29:dc:8b:bb:9c:0b:79:31:c3:13:17:98:96:67:
ad:68:ea:0f:4b:62:87:59:88:2d:7b:35:c1:e3:4b:
25:00:ae:81:17:4a:1f:74:aa:e3:0e:66:00:37:30:
a2:d8:4d:84:f8:a2:98:7a:4f:93:e8:30:da:74:20:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:AE:2D:F5:A5:51:60:8C:32:9A:02:BB:D6:0B:C5:13:5E:DC:D0
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:61:d4:a9:c3:80:e6:89:7d:5c:d0:c8:cf:8d:79:d8:3f:
3c:84:31:e0:3b:f2:05:31:c6:33:98:a2:e0:e7:de:02:c4:e0:
c0:2a:dd:a8:df:3d:a8:85:e5:81:88:f8:87:3e:89:29:bc:5a:
4a:f4:90:9a:3f:43:07:57:bf:0f:6a:23:97:2b:44:36:ca:5f:
e0:c5:f0:cf:04:33:0b:77:11:8e:9b:34:21:36:d8:63:99:44:
38:f8:e1:fd:3c:df:90:3d:fa:10:f8:46:ed:f3:39:94:61:58:
2c:fb:42:48:31:a5:ce:ee:bc:f7:85:03:67:48:29:0a:c5:12:
02:d6:21:54:9c:e0:0f:20:8b:f0:01:ad:b6:cb:2e:30:6b:c1:
6e:31:a3:1d:52:35:e6:47:4c:17:bd:a2:60:13:33:08:78:b3:
3d:9a:42:22:cb:f7:cc:28:89:61:c3:ba:eb:46:e1:73:e5:fa:
11:ab:c7:31:d0:f5:63:8e:ad:33:98:85:4d:30:32:85:59:c1:
f0:c5:c9:18:5a:7c:6a:08:9d:04:68:5c:33:b3:f5:2c:e9:c7:
d0:6e:b2:b9:3c:d3:81:64:3f:85:ac:29:28:f7:66:ba:85:d0:
c1:6b:f4:65:31:b1:53:d1:12:2c:dd:ad:ea:26:b6:a3:66:18:
c5:e1:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:30 2026 by rpki-client