Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
File: KHSJcFRraILv-bc41w7-BsYBwzU.mft (raw, json)
Hash identifier: d91JUO35YrBOU9nRg9uWgyozfOkh/HQDAt1M1CZsSGk=
Subject key identifier: A9:09:2A:B5:99:DC:52:B8:FB:BC:76:61:2A:6D:73:4E:0B:5C:76:1D
Authority key identifier: 28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
Certificate issuer: /CN=28748970546b6882eff9b738d70efe06c601c335
Certificate serial: 01A0CA7DEDA5E4B6E215236CFC62EC713C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
Manifest number: 5F
Signing time: Tue 22 Sep 2026 19:00:45 +0000
Manifest this update: Tue 22 Sep 2026 19:00:45 +0000
Manifest next update: Wed 23 Sep 2026 19:00:45 +0000
Files and hashes: 1: KHSJcFRraILv-bc41w7-BsYBwzU.crl (hash: QdWivelABGL6aGkJc1h/yXmGd89QLfYoFrYLjRi2RzA=)
2: toC9TpCejZGoS5Aiy088ROsAylA.roa (hash: A+HnAnljtqd9QqU3SU6STVhVY4cLg0aMMIYBL3Zi0nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:ed:a5:e4:b6:e2:15:23:6c:fc:62:ec:71:3c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28748970546b6882eff9b738d70efe06c601c335
Validity
Not Before: Sep 22 19:00:45 2026 GMT
Not After : Sep 23 19:00:45 2026 GMT
Subject: CN=a9092ab599dc52b8fbbc76612a6d734e0b5c761d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:19:0b:11:f9:c8:55:97:46:1b:34:c3:2b:47:
30:d5:22:8a:f4:45:57:1f:39:c7:1e:86:45:b3:71:
11:ba:4b:df:6d:44:0e:12:ee:32:b0:e0:20:5b:8b:
50:e6:13:8f:ae:08:19:c1:1f:1c:88:25:b8:8f:a0:
38:bd:f9:f6:67:db:22:3c:4f:b7:94:f6:f8:ae:0c:
80:74:76:28:0b:0f:44:08:2e:b2:19:6b:43:1d:f0:
14:c0:1a:51:c9:68:1a:51:84:46:e2:a4:81:27:c7:
55:24:61:c6:ff:c1:0c:a0:59:a4:4d:ac:ef:2f:89:
48:80:a0:57:4e:3f:c4:65:60:0f:fa:11:64:fb:ac:
f5:63:9b:f3:cb:50:d6:8d:99:c2:ec:d9:ee:19:d3:
a7:a6:74:95:dc:d9:79:86:4b:7b:53:86:21:62:b5:
23:cf:12:84:7c:e3:9f:79:ee:0a:91:e9:ae:b2:e4:
9d:b5:e0:9b:99:ee:ce:02:b1:2e:d6:c9:71:9c:65:
f2:84:05:b6:16:cb:69:0f:ea:db:84:41:1a:d6:7a:
92:7e:7e:dc:ce:6c:3f:21:f9:be:d0:95:7d:2a:e6:
a0:90:00:1e:4a:7c:2d:50:7e:b6:79:62:e8:5e:dc:
1d:c3:96:b1:6c:8f:5f:50:32:cf:b6:a2:07:ca:74:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:2A:B5:99:DC:52:B8:FB:BC:76:61:2A:6D:73:4E:0B:5C:76:1D
X509v3 Authority Key Identifier:
keyid:28:74:89:70:54:6B:68:82:EF:F9:B7:38:D7:0E:FE:06:C6:01:C3:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHSJcFRraILv-bc41w7-BsYBwzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0783d4-5413-4d6d-91b3-7bc42c19b48e/1/KHSJcFRraILv-bc41w7-BsYBwzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:82:45:53:c1:7c:8d:59:09:43:39:2e:20:b8:96:45:36:c9:
e0:3f:bf:2c:15:1d:e0:12:7c:d0:9d:11:ec:8d:87:00:37:75:
94:2e:33:5a:b7:0b:fb:c4:37:55:4d:81:d0:28:08:1c:81:74:
69:65:6e:3e:36:da:ad:da:a0:50:f2:fa:da:37:26:1f:94:f6:
9c:1b:5b:11:e8:eb:21:23:41:fb:b3:a1:f1:a6:0b:73:30:79:
84:04:20:56:0d:8a:9f:a5:95:21:0a:b5:2c:b8:a4:dc:56:e5:
6c:52:1c:0f:ec:81:cf:85:a4:ee:46:51:ae:3c:e1:c0:0d:72:
13:26:d7:c8:dd:32:69:c0:73:22:7a:b9:00:f8:f4:d6:d3:35:
e8:c6:8f:55:dc:23:c0:48:b2:a3:57:cb:76:f5:e6:d1:9d:c5:
c0:6d:0a:1a:d7:4e:11:e2:d8:3e:47:61:e6:b3:d8:5b:b4:76:
b4:c1:72:c1:a4:f9:0d:44:df:7b:2d:9c:42:94:44:23:b9:ee:
93:a7:31:4a:cd:1b:b4:20:4b:58:f7:7b:78:e2:3d:51:80:3a:
2d:ee:d3:ba:ce:40:14:23:60:aa:94:9e:7f:6d:fb:db:40:1d:
d3:76:29:e3:01:62:88:6d:a6:44:9b:19:07:57:88:86:ea:43:
74:ce:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:15 2026 by rpki-client