Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: CWgnpAMbXqmCpJ+f9PlUhIIg8BjWTl2tytjARm/2f7c=
Subject key identifier: F2:B8:3E:F4:E1:D8:0E:28:6F:38:38:4A:A2:89:F1:E5:0C:C4:E5:74
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 019D98BD19D0DFB580CFE1CDBB8C664A1156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 1251
Signing time: Fri 17 Apr 2026 00:00:22 +0000
Manifest this update: Fri 17 Apr 2026 00:00:22 +0000
Manifest next update: Sat 18 Apr 2026 00:00:22 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: dOlLEPmSTXeHfk+KiMqtf1J4BivLFKeHn8x7uoUQRis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:19:d0:df:b5:80:cf:e1:cd:bb:8c:66:4a:11:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Apr 17 00:00:22 2026 GMT
Not After : Apr 18 00:00:22 2026 GMT
Subject: CN=f2b83ef4e1d80e286f38384aa289f1e50cc4e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:d4:6a:e3:b8:87:5c:83:95:53:e8:77:c9:
73:89:2b:26:4f:17:8f:6f:f5:e6:77:b7:1b:d0:84:
53:8d:76:64:3e:bf:61:1f:a6:b3:57:2e:f8:90:78:
69:4e:8e:fb:79:38:ab:ba:1c:08:cd:7d:e4:c3:31:
6e:35:fe:31:8e:83:13:83:d2:42:09:9a:4e:bb:d3:
11:d3:9f:23:d2:a5:01:42:ae:e7:3c:26:48:ee:a3:
79:ed:d2:30:b8:9e:57:c0:5d:07:4b:6a:f0:63:4b:
6b:39:fa:1f:00:44:f0:82:df:3c:e1:15:51:f6:f1:
31:ca:08:b9:5f:22:ef:f6:86:3d:70:77:78:73:47:
6c:22:c3:8f:ec:db:2d:85:f8:ab:df:57:7a:55:a5:
a4:8d:99:1f:de:fe:70:b6:ed:3e:01:04:8f:69:a2:
c2:72:39:f9:99:68:85:be:f9:1f:46:09:65:23:41:
28:2a:72:4e:2a:aa:80:56:ac:c1:c4:91:42:31:60:
6b:25:d1:84:34:f9:74:89:4a:d2:13:3a:16:85:51:
c9:a7:33:5f:82:2c:b7:d5:d5:be:80:1a:c5:28:5c:
d7:01:b7:25:7f:be:ab:24:c4:84:09:c3:aa:9a:44:
12:88:ab:76:49:46:ae:08:ba:ea:0a:27:73:f8:0b:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B8:3E:F4:E1:D8:0E:28:6F:38:38:4A:A2:89:F1:E5:0C:C4:E5:74
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:49:76:ed:70:2e:2f:fb:5f:f4:ad:3e:5d:e9:26:44:7b:93:
47:f7:52:4e:7d:a7:6b:93:19:97:e3:e4:68:4a:7d:1c:98:7c:
14:5b:b0:ea:04:94:ed:34:89:1f:16:41:e6:0a:bc:f3:3c:1a:
bd:a6:37:ec:6d:4a:e9:3c:d7:06:7d:5e:8b:3c:60:d3:66:77:
ba:28:cb:3e:dd:6e:a4:52:e2:dc:48:0d:e9:f6:b8:c8:18:19:
6e:7b:08:1f:88:17:be:1a:bf:f1:b8:3a:67:bb:60:7c:a2:c0:
d5:76:df:89:40:92:c5:18:c2:cf:66:73:30:1e:81:fc:56:1d:
9c:19:f9:f5:ba:52:46:ab:bc:be:1b:4a:5a:47:52:38:92:22:
65:1d:0b:aa:bc:03:fd:53:91:c6:8d:69:48:69:4d:45:67:cb:
ec:65:71:b8:89:f4:01:28:e7:07:5c:43:dd:2a:ec:7d:e1:61:
8b:80:69:98:0a:f7:a5:8f:02:27:e8:22:42:dd:a6:b0:0a:f9:
8b:1e:b3:06:29:0a:d3:12:a0:03:b2:5d:1e:2a:61:06:94:88:
cd:d0:14:04:eb:d2:df:9b:c5:32:57:b2:39:01:36:07:db:c4:
fa:fb:ab:7c:9b:89:d1:18:bb:93:3c:4d:cd:27:2d:ca:ba:59:
a0:e5:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:59 2026 by rpki-client