Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: r247lop9i2iHYmWtp9SrJBsC075R4f7t3oZhXAPtAOA=
Subject key identifier: 0A:A3:FB:26:62:20:D5:94:F8:15:09:12:CC:24:0E:CA:BF:03:15:DD
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 019CAB3482015E6C86B3DAFF9CFA5C2A3E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 11D6
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: RW4UqZUqZBsIS+qFmxpfdJUoxTK4XXVjwiudaKItGuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:82:01:5e:6c:86:b3:da:ff:9c:fa:5c:2a:3e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=0aa3fb266220d594f8150912cc240ecabf0315dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:66:ad:a7:a3:32:c8:26:a4:13:bd:54:31:
52:ec:e8:e9:23:5f:60:c3:fd:6f:a8:01:85:98:6b:
8d:57:0f:56:28:26:53:04:4a:ea:cf:46:be:90:f8:
04:35:75:7a:33:b2:61:df:d7:32:d6:03:70:6d:91:
ef:07:1a:34:d8:2f:6a:0e:e4:1b:5b:3a:37:73:d3:
53:32:e4:fd:41:71:d3:a9:e9:a8:b9:bb:e6:0e:6c:
cd:af:a8:eb:71:59:8c:bb:18:8d:c5:90:d2:7c:42:
4a:f7:11:28:e3:4f:8e:6f:89:e8:ae:c2:85:13:58:
e8:db:c4:e6:8e:6f:df:f2:b9:16:5f:96:71:4e:ca:
4b:8e:b5:3a:ba:66:16:03:7d:bf:07:2f:7b:67:65:
77:b2:84:38:55:53:40:b5:2d:88:8e:52:9c:3b:5a:
db:23:80:2f:68:e8:4b:5b:71:bb:d0:2e:4f:06:eb:
b3:7d:02:80:8a:bd:70:c0:30:a0:0f:d3:c9:9a:b1:
2a:d9:0b:dd:aa:a6:cf:0a:f6:c4:71:a8:78:10:9c:
92:86:12:00:64:a5:4e:da:eb:09:f0:b5:65:12:28:
31:2b:e7:ee:ac:79:41:fa:5a:25:3f:b6:4b:70:fd:
9f:65:8f:15:a9:6d:3b:2f:0a:47:49:f9:ea:5f:42:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:FB:26:62:20:D5:94:F8:15:09:12:CC:24:0E:CA:BF:03:15:DD
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:60:c8:8f:35:6b:13:dd:b1:b2:33:f7:0a:a3:b0:f0:b9:fe:
5c:0b:48:8e:b4:7e:99:98:b1:4f:08:d4:54:4c:5e:8d:9a:ac:
ea:c1:74:eb:d6:55:3e:53:11:3f:0d:32:e8:93:1b:e7:66:f2:
da:54:8f:09:44:b1:a8:b3:8e:70:f9:0c:a2:43:f4:9f:42:f8:
f7:a4:e1:c8:73:55:a2:87:24:11:d9:7f:d9:e1:bd:14:63:eb:
c3:fa:23:3f:bc:ba:a8:1e:9c:c0:aa:93:12:cb:89:51:92:65:
4c:76:66:b0:2d:61:fe:4b:32:dd:3d:23:6d:e0:38:f1:4d:e3:
33:0a:fc:ad:11:ad:97:96:80:bc:12:dc:66:9f:3d:c4:0e:88:
54:b3:17:b5:12:2b:55:29:19:b0:be:f4:f9:a3:d9:f4:74:20:
67:2a:72:43:ed:5b:a6:d4:66:cf:5d:de:2d:3a:27:75:b9:c7:
7d:f1:f8:7c:6b:69:0a:85:24:3f:47:70:c1:6e:07:0b:6f:96:
74:89:09:00:9d:a9:47:6a:65:a3:ea:7e:3b:65:20:c0:45:3a:
41:2d:21:9d:29:bb:86:82:36:9a:e8:e7:99:7b:fb:dd:19:62:
c9:38:27:28:56:70:76:12:95:2b:25:cb:ad:e1:68:1a:67:68:
44:6e:8b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNIIBXmyGs9r/nPpcKj6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNzZmNzdkYTg0MWI3Yjk0MjE1YjZmYWMyZDQxYTcxYzIx
NTE2MDEwHhcNMjYwMzAxMjEwMTEwWhcNMjYwMzAyMjEwMTEwWjAzMTEwLwYDVQQD
EygwYWEzZmIyNjYyMjBkNTk0ZjgxNTA5MTJjYzI0MGVjYWJmMDMxNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwalmraejMsgmpBO9VDFS7OjpI19g
w/1vqAGFmGuNVw9WKCZTBErqz0a+kPgENXV6M7Jh39cy1gNwbZHvBxo02C9qDuQb
Wzo3c9NTMuT9QXHTqemoubvmDmzNr6jrcVmMuxiNxZDSfEJK9xEo40+Ob4norsKF
E1jo28Tmjm/f8rkWX5ZxTspLjrU6umYWA32/By97Z2V3soQ4VVNAtS2IjlKcO1rb
I4AvaOhLW3G70C5PBuuzfQKAir1wwDCgD9PJmrEq2QvdqqbPCvbEcah4EJyShhIA
ZKVO2usJ8LVlEigxK+furHlB+lolP7ZLcP2fZY8VqW07LwpHSfnqX0ImIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqj+yZiINWU+BUJEswkDsq/AxXdMB8GA1UdIwQY
MBaAFJB2932oQbe5QhW2+sLUGnHCFRYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEt
ZTYzY2U1NTM3MGViLzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEtZTYzY2U1NTM3MGVi
LzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2DIjzVr
E92xsjP3CqOw8Ln+XAtIjrR+mZixTwjUVExejZqs6sF069ZVPlMRPw0y6JMb52by
2lSPCUSxqLOOcPkMokP0n0L496ThyHNVoockEdl/2eG9FGPrw/ojP7y6qB6cwKqT
EsuJUZJlTHZmsC1h/ksy3T0jbeA48U3jMwr8rRGtl5aAvBLcZp89xA6IVLMXtRIr
VSkZsL70+aPZ9HQgZypyQ+1bptRmz13eLTondbnHffH4fGtpCoUkP0dwwW4HC2+W
dIkJAJ2pR2plo+p+O2UgwEU6QS0hnSm7hoI2mujnmXv73RliyTgnKFZwdhKVKyXL
reFoGmdoRG6LZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:25 2026 by rpki-client