Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
File: KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft (raw, json)
Hash identifier: 3c548CkdSjmeHl3mtcDNoybxDs5QHDqWMooViI+gndc=
Subject key identifier: BD:54:4F:BA:09:F4:72:7F:4A:42:F6:04:F0:61:EE:74:4D:01:7B:50
Authority key identifier: 28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
Certificate issuer: /CN=287b8e2b920bff440a8f518744527146fb87e930
Certificate serial: 019FA89A6366E5D9CB64134BEED855A569A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:58 +0000
Manifest this update: Tue 28 Jul 2026 12:01:58 +0000
Manifest next update: Wed 29 Jul 2026 12:01:58 +0000
Files and hashes: 1: IFW7hqO5GTL9KLcDfHf9JjuxeUc.asa (hash: WD3Stybi3qSMyZoe+Iv7eOPoBR7+JFZjhBMR2qYQzEs=)
2: KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl (hash: 7kDKOfuGZ+bNWzbvX7IOmRK55EGALOr5ggHQYRg6IXc=)
3: ju68EpXZevf4Hb2wWFqdPmV352k.roa (hash: Ck2VmIwjqmui7Sus7741mQyUCGm4+who9Co6bDTtcl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:63:66:e5:d9:cb:64:13:4b:ee:d8:55:a5:69:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287b8e2b920bff440a8f518744527146fb87e930
Validity
Not Before: Jul 28 12:01:58 2026 GMT
Not After : Jul 29 12:01:58 2026 GMT
Subject: CN=bd544fba09f4727f4a42f604f061ee744d017b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:2f:14:f9:b2:e9:b4:c0:ca:dc:ba:cf:4a:
27:7d:e8:aa:52:15:7d:70:83:a6:17:b3:b5:2e:1f:
de:e3:4b:46:cd:7b:5d:ac:2a:ca:50:cb:57:14:df:
c4:88:35:93:08:8a:37:1d:fc:e4:96:4d:5d:d0:6b:
bf:99:00:2b:d5:1a:48:62:85:9d:29:18:bc:86:53:
55:48:06:0a:b6:22:fa:27:87:07:5e:f5:2e:74:c9:
5f:26:c5:b3:cd:48:4a:f4:e3:e2:8b:7c:f4:6c:23:
0f:ea:c7:82:b3:ef:c4:2d:7d:42:5a:18:8b:61:00:
6d:76:fb:c7:e8:94:3e:80:22:40:c5:17:b5:f7:ca:
d4:87:0c:ae:62:92:f0:58:7b:6b:c7:64:cf:f4:54:
fa:92:57:28:76:fe:37:52:a3:30:f3:4d:ee:35:69:
06:0e:da:38:ab:2e:11:16:9c:06:48:53:6e:4c:3f:
6a:46:47:a6:bc:89:0e:d5:9b:58:b8:8f:42:ac:c2:
f6:a3:16:ad:23:89:10:2a:9d:77:02:f2:9e:c0:d2:
64:04:c6:62:c7:16:c1:7f:bb:db:8a:d5:5e:0d:75:
d6:80:d3:e8:47:7d:cb:15:db:1e:bc:6a:ab:76:fe:
9a:64:fd:dc:3e:55:59:f7:7e:60:d9:70:ff:c0:7d:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:54:4F:BA:09:F4:72:7F:4A:42:F6:04:F0:61:EE:74:4D:01:7B:50
X509v3 Authority Key Identifier:
keyid:28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6b:3b:61:9d:29:1c:bf:8a:39:44:8c:71:9c:3a:4b:b5:b9:
fb:60:0b:d5:3a:04:a6:93:6e:7d:a6:a4:f5:cd:32:60:69:e4:
ff:72:db:c9:51:1b:48:61:38:e5:ae:5b:a0:e5:16:2f:7f:e9:
e2:d7:45:d4:06:ce:56:6b:3a:6f:d3:eb:80:86:57:21:50:7f:
36:4f:d1:45:b0:d9:dd:54:85:a3:61:5c:ce:0a:6a:65:01:27:
67:97:1b:09:ac:5c:03:b0:f1:47:e3:47:da:1d:a3:7c:00:e8:
3a:d8:80:e0:a8:c0:43:8e:eb:87:4c:bb:10:dc:ac:18:a3:e7:
ec:9a:9d:08:55:8a:05:79:ca:b7:6a:91:d9:68:b9:9a:0d:19:
f3:d3:55:fb:29:0c:9f:12:96:be:7c:9d:4d:65:09:1c:8c:1e:
85:c1:3f:fe:f6:4a:a8:b8:f9:74:72:70:7f:f3:b7:f2:93:ec:
9e:a3:5c:fb:75:e3:f9:7e:c6:c4:08:80:0f:30:3e:70:f2:c1:
8d:b4:ef:0a:9c:c1:05:ee:f6:5b:3e:6a:7a:d6:b5:39:49:73:
b0:e7:d9:5d:6d:15:60:c4:64:e2:d4:68:f6:0c:ab:04:e4:1d:
7e:9e:c9:27:d5:5f:75:da:f6:2a:3e:2d:64:3f:62:44:ba:83:
bc:35:7d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:58 2026 by rpki-client