Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: OpRiqQbSoUI+VPNEgI4nSbnUDqQlKRNrj89Fjwl5oxA=
Subject key identifier: 62:4C:E1:33:66:59:68:68:ED:25:4F:74:81:5C:58:87:54:7D:71:AB
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 019EC225124FC1BF1DAC418459D45A56AEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 12EB
Signing time: Sat 13 Jun 2026 18:01:09 +0000
Manifest this update: Sat 13 Jun 2026 18:01:09 +0000
Manifest next update: Sun 14 Jun 2026 18:01:09 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: bQhH1hIrA0Br8IumP4K831zK4qDS1qsf7cbPHuIaF9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:25:12:4f:c1:bf:1d:ac:41:84:59:d4:5a:56:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Jun 13 18:01:09 2026 GMT
Not After : Jun 14 18:01:09 2026 GMT
Subject: CN=624ce13366596868ed254f74815c5887547d71ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:d7:23:d4:3d:b7:60:47:b7:ce:67:f1:b7:
e0:a3:74:16:d5:4a:c4:8e:25:e8:78:f7:ba:ef:4c:
83:72:b9:8b:c3:70:a5:8e:b1:15:1c:f0:a4:5a:63:
f2:44:58:ea:4d:f3:0e:bf:a4:3a:07:15:63:51:d6:
95:92:91:35:87:e5:c9:d6:a4:d8:1d:ef:89:ef:54:
74:94:08:29:b5:4d:3d:28:d0:3a:bf:f2:a0:98:78:
e8:83:db:b5:e8:a8:20:30:c9:81:25:02:6f:03:bb:
79:33:df:49:79:ac:33:f3:55:85:35:3d:a3:5e:56:
cc:9b:d3:a2:21:2b:72:9c:1f:73:d3:e9:a1:f4:28:
64:94:aa:32:78:78:f9:5a:a0:e6:7a:af:59:b6:69:
4c:c3:16:cd:6f:72:2d:d9:25:d2:d6:39:c9:30:00:
c6:a4:f1:f1:3a:af:fb:2f:c5:0a:57:64:a8:16:21:
8b:00:b5:7c:a3:31:4f:83:7f:ab:30:0c:06:f0:a4:
0f:49:5c:ab:64:14:8d:f0:5a:b2:1f:da:35:a2:06:
99:1e:d1:0f:f6:fa:da:e3:ad:86:ba:8c:54:81:d3:
d6:fa:ea:ad:7d:d7:59:d1:fa:6a:65:11:b4:82:1d:
6c:7a:b7:d3:16:ee:41:bc:45:15:a6:b6:db:7e:07:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:E1:33:66:59:68:68:ED:25:4F:74:81:5C:58:87:54:7D:71:AB
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4f:7a:c8:9a:b0:2c:5a:51:0c:3f:83:b2:fa:36:5b:ca:99:
b8:1a:c7:0d:3b:e6:c5:2a:85:3a:76:98:6a:a4:fc:52:91:1f:
f3:ca:58:ca:d3:95:91:b2:88:33:c5:ba:dc:43:6c:1d:b2:d1:
3e:c5:b8:7d:06:a9:40:2d:79:2e:c5:ea:26:32:f3:a1:36:00:
ff:10:78:b7:ca:9c:26:b5:97:83:2f:c8:11:7f:83:84:75:28:
32:36:df:61:cf:e6:e9:6b:6c:a3:af:44:ff:75:31:e4:ab:af:
f3:c5:6b:cc:89:9a:a1:be:23:0b:ff:68:d3:5e:04:b4:1d:bc:
67:7e:7d:ea:c6:03:d8:0b:b5:9f:7c:ad:69:cd:50:e3:60:80:
ae:2d:a5:15:66:60:2a:00:a6:27:05:fd:c1:2b:95:28:f5:19:
37:97:46:fd:ed:9f:0b:7f:30:a2:22:d9:1d:0c:f7:32:01:b9:
e1:a5:0b:bf:26:cd:cf:12:d6:4b:b2:67:c9:28:9f:8d:e7:3c:
ce:3b:8a:e4:0c:09:da:87:04:fb:6c:3c:6f:84:6f:8a:dd:ee:
c1:7c:6b:1e:be:c3:01:c8:f1:51:61:94:64:8f:7c:27:ff:e8:
f8:55:ee:0d:64:c2:37:d5:ed:b5:1b:2b:c7:96:54:24:cd:6f:
25:2d:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:37 2026 by rpki-client