Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json)
Hash identifier: Q4usramM7kWOowS2plN43Z5LR+gPd1h4n0J7aeeC0gc=
Subject key identifier: 69:6B:12:0B:E6:A4:5F:04:3A:92:F0:62:4F:31:9B:96:D6:F5:63:EA
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 019CAAFD206A8C525CACF1B2FEDCA365AB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
Manifest number: 1582
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: 1-UeNT_mEXVZRgA_7glg9OO4Sjtw.roa (hash: 1z29a91IWJoK+mNlT9BWeHq46/FmmyPlWPOT1hR/7F8=)
2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: Ygeyn9bTWG5w1fSSOPgQ5WoOTIBbDGiyH7FWfifHKtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:20:6a:8c:52:5c:ac:f1:b2:fe:dc:a3:65:ab:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=696b120be6a45f043a92f0624f319b96d6f563ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:ca:2a:5c:cb:97:2b:f5:31:3c:59:b4:20:
6a:7d:36:72:bc:04:83:c8:f2:7e:4a:bd:d6:a7:6a:
4a:e4:09:10:2d:54:a6:32:60:01:ae:55:8f:10:7a:
60:53:a1:3d:d8:ed:a7:5e:7e:af:49:7a:28:fd:8b:
6a:90:00:f2:13:17:e8:15:fd:ca:2a:bf:d8:fe:c0:
44:dc:1c:18:6f:e1:46:6b:95:2d:96:7e:43:9b:89:
6e:4c:38:1a:28:81:f1:3a:82:89:c1:7b:49:d1:43:
aa:82:85:08:b0:56:b2:08:0e:f4:fd:f6:83:19:e9:
1e:6b:13:c5:86:40:dd:41:da:bd:4d:80:d1:76:fb:
c2:32:6e:a4:ff:c7:b6:41:df:16:61:ae:70:c9:47:
e4:1a:ff:08:1c:a5:b1:9c:a1:42:7c:28:76:75:fa:
eb:53:3c:b6:f0:f5:f1:1f:32:59:24:08:60:b3:6b:
b9:e4:27:c2:c4:b8:22:7b:0c:ea:5f:79:a5:fe:3d:
9d:4b:ce:6d:40:0a:3e:78:be:b0:d6:e0:81:0f:2f:
ac:5c:5e:cf:f3:c0:fe:b5:01:bd:db:6b:54:95:6f:
f3:88:4d:82:0b:2e:a7:02:5e:00:fb:a9:56:f6:92:
1b:1f:a9:31:ee:06:9a:e3:58:6d:6c:a8:d9:96:b7:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:12:0B:E6:A4:5F:04:3A:92:F0:62:4F:31:9B:96:D6:F5:63:EA
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6f:b8:ef:60:d6:d4:06:38:f4:6f:c0:09:a9:ec:71:5e:d4:
ec:08:d7:e2:7b:07:43:ba:1e:61:11:d9:fb:d0:06:59:4c:af:
34:62:28:07:ce:42:8e:93:79:38:67:60:06:16:06:e0:06:b4:
ac:03:7d:50:10:ae:3f:b2:26:a5:bf:f8:03:2e:fc:a3:c3:33:
da:de:4a:67:56:df:5f:e1:44:9a:e6:54:c3:ee:57:a6:ab:f4:
d0:69:80:ad:83:53:8d:e8:da:fb:9e:3a:7d:6e:96:74:94:84:
96:e1:8f:14:3c:fa:43:5e:73:b0:f6:b6:9a:ac:aa:70:5c:9a:
aa:13:a0:e7:6d:80:12:00:6c:23:46:99:b0:07:1b:c3:eb:3c:
6a:19:d1:d4:59:bc:05:79:5f:74:62:37:68:61:06:4e:a1:94:
b6:ce:f5:d3:e3:6b:be:77:a1:8e:f7:0b:5c:5b:f3:4f:a0:79:
c1:7b:30:97:43:bf:c1:43:d1:fe:5d:0b:85:6e:ef:03:16:42:
27:fc:71:0b:11:76:66:9e:f6:9c:26:ad:0d:86:f0:c5:85:48:
1e:6f:75:06:70:4c:6a:30:fc:7e:76:c4:95:ed:95:c9:17:45:
e3:5b:8d:9b:c5:08:04:a5:45:5a:51:cf:6f:ec:aa:cc:c6:ec:
60:a8:7d:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/SBqjFJcrPGy/tyjZauXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTdkMjU0Nzc0Yzk3YTljNjg1YTllYzVkMjRmMmZjNjk2
ODk5MDgwHhcNMjYwMzAxMjAwMDQxWhcNMjYwMzAyMjAwMDQxWjAzMTEwLwYDVQQD
Eyg2OTZiMTIwYmU2YTQ1ZjA0M2E5MmYwNjI0ZjMxOWI5NmQ2ZjU2M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCPKKlzLlyv1MTxZtCBqfTZyvASD
yPJ+Sr3Wp2pK5AkQLVSmMmABrlWPEHpgU6E92O2nXn6vSXoo/YtqkADyExfoFf3K
Kr/Y/sBE3BwYb+FGa5Utln5Dm4luTDgaKIHxOoKJwXtJ0UOqgoUIsFayCA70/faD
GekeaxPFhkDdQdq9TYDRdvvCMm6k/8e2Qd8WYa5wyUfkGv8IHKWxnKFCfCh2dfrr
Uzy28PXxHzJZJAhgs2u55CfCxLgiewzqX3ml/j2dS85tQAo+eL6w1uCBDy+sXF7P
88D+tQG922tUlW/ziE2CCy6nAl4A+6lW9pIbH6kx7gaa41htbKjZlrd88QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlrEgvmpF8EOpLwYk8xm5bW9WPqMB8GA1UdIwQY
MBaAFCoX0lR3TJepxoWp7F0k8vxpaJkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NmE0MzktY2YzMy00N2M1LTkyYWIt
ODBiNTExOGFiYWY2LzEvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NmE0MzktY2YzMy00N2M1LTkyYWItODBiNTExOGFiYWY2
LzEvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoG+472DW
1AY49G/ACanscV7U7AjX4nsHQ7oeYRHZ+9AGWUyvNGIoB85CjpN5OGdgBhYG4Aa0
rAN9UBCuP7Impb/4Ay78o8Mz2t5KZ1bfX+FEmuZUw+5Xpqv00GmArYNTjeja+546
fW6WdJSEluGPFDz6Q15zsPa2mqyqcFyaqhOg522AEgBsI0aZsAcbw+s8ahnR1Fm8
BXlfdGI3aGEGTqGUts710+NrvnehjvcLXFvzT6B5wXswl0O/wUPR/l0LhW7vAxZC
J/xxCxF2Zp72nCatDYbwxYVIHm91BnBMajD8fnbEle2VyRdF41uNm8UIBKVFWlHP
b+yqzMbsYKh9Vw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:31 2026 by rpki-client