Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json)
Hash identifier: ZcDBkUpGNAM9Ne8Pxwnu7jIWm3nMo92GySpdInOzbq8=
Subject key identifier: BC:8C:13:AF:D3:2D:83:8F:FF:8E:0C:88:A3:95:12:5C:94:F5:7D:2E
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 019D9A74EF37350AAF78D7F26A76B7497691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
Manifest number: 15FE
Signing time: Fri 17 Apr 2026 08:00:47 +0000
Manifest this update: Fri 17 Apr 2026 08:00:47 +0000
Manifest next update: Sat 18 Apr 2026 08:00:47 +0000
Files and hashes: 1: 1-UeNT_mEXVZRgA_7glg9OO4Sjtw.roa (hash: 1z29a91IWJoK+mNlT9BWeHq46/FmmyPlWPOT1hR/7F8=)
2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: MKmOwphrIM4x8YVyOrgNJ57zPgnWwqZNX+2FL9FuxjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ef:37:35:0a:af:78:d7:f2:6a:76:b7:49:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Apr 17 08:00:47 2026 GMT
Not After : Apr 18 08:00:47 2026 GMT
Subject: CN=bc8c13afd32d838fff8e0c88a395125c94f57d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:69:a7:41:92:d6:90:a8:dd:f9:19:68:4c:
49:5d:93:7c:0f:7e:a7:7c:86:de:fd:bd:83:0c:9a:
8a:37:ae:db:e9:a5:57:16:d6:06:80:56:9a:36:c5:
8f:6b:43:41:ef:16:16:d5:09:37:a1:9b:cc:81:3e:
6d:3b:02:f6:9e:87:68:8e:51:02:87:01:ab:e0:a9:
c9:27:da:f7:e5:aa:fc:43:86:aa:60:c1:33:fd:e4:
78:21:cb:a2:70:17:81:53:50:6e:b7:e5:dd:64:a9:
ea:23:e5:ce:a8:54:56:f3:ac:17:fd:83:e6:2f:6d:
0c:1f:64:5e:b6:98:a5:83:bc:a9:ee:65:c3:be:c9:
18:fd:6a:a6:9b:1d:37:5f:24:8c:26:cb:24:1d:26:
55:4a:8d:1c:66:6c:76:54:f0:34:32:a4:8f:94:f6:
bd:f0:7e:7b:13:b8:26:8e:b0:4d:d4:04:4d:3f:b2:
8f:23:00:21:5c:b8:9a:71:25:e5:b1:84:b4:4d:91:
9e:04:1d:10:85:f0:d7:a9:7a:6b:4a:36:99:30:22:
40:26:6b:62:7a:38:3b:02:9f:02:4a:a0:9d:b4:aa:
67:7d:31:0e:58:a6:87:93:65:fe:6d:8e:34:c6:75:
39:3b:38:a5:5d:26:35:dd:f4:82:7f:fc:7b:57:4b:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8C:13:AF:D3:2D:83:8F:FF:8E:0C:88:A3:95:12:5C:94:F5:7D:2E
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7f:06:8a:ae:16:15:07:2c:14:ea:4b:66:d8:3e:d6:18:2b:
1f:3a:55:f5:af:eb:55:2a:d3:99:c3:3a:1d:59:d4:6a:0d:d7:
24:92:c8:01:22:ce:06:e3:96:4d:97:79:5a:31:d1:b8:ed:4d:
a3:c4:c3:7c:f5:f8:37:78:e5:24:de:70:16:ce:bd:4d:6d:8d:
48:d8:10:a2:11:11:47:30:9f:73:5b:82:47:c9:c3:c7:a9:e3:
5c:b4:25:9f:c9:42:32:e7:c6:a3:63:1f:ba:b7:3a:20:03:c4:
24:16:b9:59:0e:ad:8f:97:45:8e:f1:22:c5:15:5a:4c:0f:1b:
ed:0c:c2:3f:3b:8b:2d:9a:65:61:aa:8c:07:1e:38:ae:08:c3:
d5:48:b0:3e:25:92:60:98:31:aa:82:cd:c2:39:ef:13:5b:c6:
9c:aa:1e:f3:e0:a0:77:36:a6:d6:99:86:37:cb:cc:f2:db:95:
94:58:f0:a5:37:d1:d9:88:53:d2:74:90:09:1e:6a:93:f9:2d:
86:2d:a2:0b:ea:dd:be:ad:55:4a:f5:41:ec:e8:8f:61:a6:35:
86:57:12:37:eb:a8:7f:2d:61:2c:59:70:94:21:45:0f:b3:8f:
59:d3:62:ca:a7:a1:29:fd:43:72:19:c1:0f:ed:9d:c6:e0:5e:
d9:a3:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:18 2026 by rpki-client