Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
File: KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft (raw, json)
Hash identifier: acqgyNS709wewSvfoUJ9CWNv5bArFDg+2uHuRGLrbxQ=
Subject key identifier: 17:32:07:59:A7:DF:05:01:65:DA:B3:06:40:0B:F4:A2:99:6C:69:7A
Authority key identifier: 28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
Certificate issuer: /CN=287b8e2b920bff440a8f518744527146fb87e930
Certificate serial: 01A0BEB0482FD1352F49B02C6590C3013AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:18 +0000
Manifest this update: Sun 20 Sep 2026 12:00:18 +0000
Manifest next update: Mon 21 Sep 2026 12:00:18 +0000
Files and hashes: 1: IFW7hqO5GTL9KLcDfHf9JjuxeUc.asa (hash: WD3Stybi3qSMyZoe+Iv7eOPoBR7+JFZjhBMR2qYQzEs=)
2: KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl (hash: UQNN3YM7h8zCjULw5+uG/uB39RalVISw32pINl3PD2A=)
3: ju68EpXZevf4Hb2wWFqdPmV352k.roa (hash: Ck2VmIwjqmui7Sus7741mQyUCGm4+who9Co6bDTtcl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:48:2f:d1:35:2f:49:b0:2c:65:90:c3:01:3a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287b8e2b920bff440a8f518744527146fb87e930
Validity
Not Before: Sep 20 12:00:18 2026 GMT
Not After : Sep 21 12:00:18 2026 GMT
Subject: CN=17320759a7df050165dab306400bf4a2996c697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:c5:3d:9b:9d:e4:29:23:df:7c:6d:ac:1f:
b6:39:58:44:65:e3:9d:0c:d2:48:c4:45:77:de:47:
4d:dd:fd:13:aa:13:c8:98:5c:b7:38:47:f0:db:ca:
7e:89:d3:09:6d:c9:82:a2:b4:90:62:8c:01:4c:f0:
25:75:3f:8e:26:e4:d9:12:29:d8:ad:9f:64:a4:fc:
66:a2:11:5c:5e:a7:67:4b:55:dc:13:05:64:04:45:
ae:e5:45:bd:76:1c:80:c5:ad:13:5c:9f:00:d1:3c:
f7:81:40:af:f6:eb:c6:aa:27:f3:8b:b7:c5:22:34:
41:27:92:a6:75:f8:be:5d:35:57:66:1e:4c:78:7f:
52:4c:10:31:a4:59:60:58:1b:75:0c:c0:79:ac:c7:
61:05:d6:be:9f:62:50:77:79:cb:64:06:44:8e:45:
1d:9a:59:de:5d:b1:78:e7:ba:45:d1:57:cb:de:87:
82:85:61:d4:58:4f:b2:2f:59:be:16:1b:ed:ba:35:
f7:0e:2f:3a:f4:92:4d:93:bd:ed:f5:e9:52:ae:fe:
c6:03:59:89:a9:25:9f:a4:34:e4:28:db:b2:f9:4b:
33:02:75:5f:92:92:bd:08:07:0b:39:84:42:99:86:
11:7e:a0:ed:ed:23:5f:56:87:50:ca:86:18:9b:ce:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:07:59:A7:DF:05:01:65:DA:B3:06:40:0B:F4:A2:99:6C:69:7A
X509v3 Authority Key Identifier:
keyid:28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:51:57:70:95:fc:94:a1:dd:83:25:ce:4d:ce:e2:8d:be:80:
1a:f8:f0:2c:17:7d:67:3b:89:94:d0:da:fe:d1:f6:81:08:cf:
ff:c5:f1:a1:b9:fb:ec:4d:ee:f5:92:dc:9b:42:ae:15:79:7d:
c2:a6:8f:cc:08:32:c4:ca:94:51:fd:0f:c2:a4:a0:d3:a4:22:
ae:07:84:b3:d3:a3:88:5f:e6:88:c1:2a:ba:40:8b:3c:d2:0e:
70:76:2a:93:eb:f3:ea:80:48:1d:dc:c5:0d:20:64:ad:16:0a:
c5:12:24:b2:14:ee:00:da:3b:1e:8c:2a:30:13:c7:a5:ec:63:
c5:49:eb:1f:3f:1d:48:66:46:5c:55:13:24:06:e4:3c:f6:cd:
d9:eb:60:9b:4c:85:87:7d:c9:17:4e:f7:99:f0:7d:e9:09:9c:
6b:8a:4e:e9:54:54:e5:0b:8d:ca:3e:fc:e1:07:77:52:a9:d7:
75:13:02:d5:7a:23:8e:7f:47:62:aa:be:5d:84:04:c9:36:f7:
ba:33:b3:2e:db:e3:31:8a:1d:36:8e:76:55:83:2d:aa:9e:36:
84:ad:84:a7:e5:12:f8:78:26:0a:16:92:be:cf:1d:cc:f3:29:
5a:41:3b:f8:e9:de:97:2a:e2:eb:11:75:17:0f:34:4d:c7:51:
37:4c:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:06:01 2026 by rpki-client