Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
File: KhH6IvVmXbh21C9wHdf0uikMoWs.mft (raw, json)
Hash identifier: vCeVPZiVbJKp01p52YV7IiwY94H1NGLW1DYp+8ph7Zs=
Subject key identifier: F0:61:05:15:03:D5:C5:0F:D8:0E:12:73:82:69:F1:33:27:BC:74:33
Authority key identifier: 2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
Certificate issuer: /CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Certificate serial: 01A0C39FC52D9995AFA64C6CFF92A6D38A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
Manifest number: 3D
Signing time: Mon 21 Sep 2026 11:00:22 +0000
Manifest this update: Mon 21 Sep 2026 11:00:22 +0000
Manifest next update: Tue 22 Sep 2026 11:00:22 +0000
Files and hashes: 1: KhH6IvVmXbh21C9wHdf0uikMoWs.crl (hash: yowBDw7RlLMq9KAnaHh5Y1p8KC85irs83//ehMUttYQ=)
2: ehnz7mg_oQ2vy8uW7-EY6KjMfv8.asa (hash: sLCKF9FnIe6mVq71g7Z1KhrNB/Y5bi6HgjGXEqBr/Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:c5:2d:99:95:af:a6:4c:6c:ff:92:a6:d3:8a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a11fa22f5665db876d42f701dd7f4ba290ca16b
Validity
Not Before: Sep 21 11:00:22 2026 GMT
Not After : Sep 22 11:00:22 2026 GMT
Subject: CN=f061051503d5c50fd80e12738269f13327bc7433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:9c:f1:77:47:33:a5:1d:07:76:fc:64:e6:
58:cd:eb:93:f8:e9:c7:33:d2:30:0a:c7:b0:d2:5c:
f5:6a:8c:b4:06:b0:fc:77:8a:5d:ca:4b:2f:c1:50:
8b:2c:e5:b1:11:0f:84:15:4e:46:67:96:c4:c3:47:
0a:c5:3b:68:e7:60:b6:47:1b:2d:17:b3:c9:2f:1c:
21:16:9c:23:b8:aa:4b:d1:0b:cc:d0:02:fc:80:87:
ab:a8:3f:36:b9:0b:df:05:88:96:41:52:9c:b5:2e:
31:80:b7:29:cb:0d:aa:c3:36:c0:83:30:1a:9b:e7:
f8:c1:50:45:46:eb:86:9e:6c:ef:9f:1c:7a:6f:78:
31:f4:ec:1b:89:f5:b8:60:61:1b:42:44:82:c2:86:
82:3e:b7:a0:47:ea:aa:33:22:b5:1f:0c:03:53:c4:
87:21:ef:4f:0b:9e:ad:ac:08:79:6c:9a:ec:38:3b:
fa:f4:d6:25:7d:67:f1:a0:8a:59:f4:a3:80:8e:01:
6e:a3:2e:91:4a:be:c5:8d:c2:c0:82:09:7c:82:40:
54:aa:99:b5:54:5a:f1:d8:19:fd:88:f5:87:ae:de:
36:9d:de:33:07:74:bb:55:5e:d2:3e:4e:82:d1:93:
1c:f8:c8:7d:4f:e1:a3:bb:a4:9d:e5:57:a0:5b:9f:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:05:15:03:D5:C5:0F:D8:0E:12:73:82:69:F1:33:27:BC:74:33
X509v3 Authority Key Identifier:
keyid:2A:11:FA:22:F5:66:5D:B8:76:D4:2F:70:1D:D7:F4:BA:29:0C:A1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhH6IvVmXbh21C9wHdf0uikMoWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5bd02d-ac98-4da3-b6e6-b73278313e64/1/KhH6IvVmXbh21C9wHdf0uikMoWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:74:30:bf:5c:1b:37:e8:0a:11:e7:e5:0d:d8:c0:3d:7d:ac:
eb:b7:31:2c:69:2c:b5:b1:96:04:bf:ca:83:29:e8:fe:0f:7b:
56:ee:80:fd:23:90:9c:6a:72:6d:56:51:a5:b0:79:e6:df:aa:
5a:2b:79:9d:67:af:25:ac:fb:9a:8a:50:03:93:42:64:16:ca:
ca:c0:fe:b1:32:bb:d0:28:95:26:f3:d7:7f:ae:39:af:b2:f6:
2b:a5:6f:24:39:15:af:72:b8:8b:2d:a4:d5:3d:51:25:ee:e3:
04:57:fc:55:1c:67:6e:d0:3c:4a:c1:35:c1:50:e5:cc:ac:37:
74:d4:59:59:e8:06:0d:04:6e:1c:ef:3d:65:f2:e3:0e:29:55:
0e:86:d6:d8:e1:46:73:7e:5d:52:d8:d9:6a:37:40:d4:ac:4b:
b2:36:ef:a4:e3:90:bd:66:e4:5c:8f:4c:96:50:91:ff:e3:a5:
83:99:42:e3:7d:08:9b:bf:79:a9:cf:11:2e:a9:6c:75:59:50:
c5:3b:3a:70:59:cb:6d:3c:5c:cc:d9:22:f4:31:fb:b5:d5:ba:
5f:b1:8a:49:06:0b:c3:2b:0a:1b:2d:73:75:7c:e3:a1:31:1d:
96:44:21:e8:60:7c:b6:d4:ed:ac:87:9a:dd:be:46:16:ac:75:
05:42:37:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn8UtmZWvpkxs/5Km04qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTFmYTIyZjU2NjVkYjg3NmQ0MmY3MDFkZDdmNGJhMjkw
Y2ExNmIwHhcNMjYwOTIxMTEwMDIyWhcNMjYwOTIyMTEwMDIyWjAzMTEwLwYDVQQD
EyhmMDYxMDUxNTAzZDVjNTBmZDgwZTEyNzM4MjY5ZjEzMzI3YmM3NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFCc8XdHM6UdB3b8ZOZYzeuT+OnH
M9IwCsew0lz1aoy0BrD8d4pdyksvwVCLLOWxEQ+EFU5GZ5bEw0cKxTto52C2Rxst
F7PJLxwhFpwjuKpL0QvM0AL8gIerqD82uQvfBYiWQVKctS4xgLcpyw2qwzbAgzAa
m+f4wVBFRuuGnmzvnxx6b3gx9OwbifW4YGEbQkSCwoaCPregR+qqMyK1HwwDU8SH
Ie9PC56trAh5bJrsODv69NYlfWfxoIpZ9KOAjgFuoy6RSr7FjcLAggl8gkBUqpm1
VFrx2Bn9iPWHrt42nd4zB3S7VV7SPk6C0ZMc+Mh9T+Gju6Sd5VegW58jswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBhBRUD1cUP2A4Sc4Jp8TMnvHQzMB8GA1UdIwQY
MBaAFCoR+iL1Zl24dtQvcB3X9LopDKFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hINkl2Vm1YYmgyMUM5d0hkZjB1aWtNb1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81YmQwMmQtYWM5OC00ZGEzLWI2ZTYt
YjczMjc4MzEzZTY0LzEvS2hINkl2Vm1YYmgyMUM5d0hkZjB1aWtNb1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81YmQwMmQtYWM5OC00ZGEzLWI2ZTYtYjczMjc4MzEzZTY0
LzEvS2hINkl2Vm1YYmgyMUM5d0hkZjB1aWtNb1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnQwv1wb
N+gKEeflDdjAPX2s67cxLGkstbGWBL/Kgyno/g97Vu6A/SOQnGpybVZRpbB55t+q
Wit5nWevJaz7mopQA5NCZBbKysD+sTK70CiVJvPXf645r7L2K6VvJDkVr3K4iy2k
1T1RJe7jBFf8VRxnbtA8SsE1wVDlzKw3dNRZWegGDQRuHO89ZfLjDilVDobW2OFG
c35dUtjZajdA1KxLsjbvpOOQvWbkXI9MllCR/+Olg5lC430Im795qc8RLqlsdVlQ
xTs6cFnLbTxczNki9DH7tdW6X7GKSQYLwysKGy1zdXzjoTEdlkQh6GB8ttTtrIea
3b5GFqx1BUI3GA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:53 2026 by rpki-client