Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
File: KhmTnyGLthMV6bOzez24WWCXXRQ.mft (raw, json)
Hash identifier: 9kHQOMlbZGhaVQvhDe99H3ATc/o5MQlCa11G3UPlIRg=
Subject key identifier: 2B:CF:4A:A3:47:BF:1C:BB:00:78:15:49:49:78:FE:6D:CD:5E:7B:C8
Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14
Certificate serial: 019CA9EA7BD81A73D5295095AA2945E92624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 15:00:42 +0000
Manifest this update: Sun 01 Mar 2026 15:00:42 +0000
Manifest next update: Mon 02 Mar 2026 15:00:42 +0000
Files and hashes: 1: KhmTnyGLthMV6bOzez24WWCXXRQ.crl (hash: NiqoxTFshF96hOy0ymyi3kvSYCAeaeHUvIN1VYjNBlc=)
2: Opq729qHLi-8dYaQgIIxGa15kXA.roa (hash: 29AgcIdF39QZ4KXfXzVq7WdeMpA7ZOSG9zMnRXMOq8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:7b:d8:1a:73:d5:29:50:95:aa:29:45:e9:26:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14
Validity
Not Before: Mar 1 15:00:42 2026 GMT
Not After : Mar 2 15:00:42 2026 GMT
Subject: CN=2bcf4aa347bf1cbb007815494978fe6dcd5e7bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:78:5c:da:94:e1:0f:4e:79:6e:ce:23:fb:
79:ca:19:72:bf:0a:bd:3f:dd:48:14:42:dd:4c:e1:
e4:47:62:dc:d8:ef:01:10:cd:4f:83:89:21:b3:fc:
f6:77:ee:d2:db:94:88:31:3b:2b:34:0c:f9:93:23:
9f:89:8c:ba:03:67:bf:80:54:c3:51:3e:08:13:d1:
ee:4c:23:30:ce:bd:fd:4d:4e:bb:6a:e1:96:e7:27:
7e:a6:46:3b:9c:e9:2e:1d:be:73:fe:30:57:95:1d:
23:e9:cb:2a:8c:0c:e4:fa:34:f4:b9:d1:a1:02:c8:
21:7f:3b:b1:cc:db:f9:e9:27:6d:c3:0f:de:22:20:
20:e5:f9:5f:26:3f:63:1b:c4:f1:72:97:a1:71:3d:
a3:84:9f:a3:cc:ce:a0:6a:c0:fd:c0:44:1c:85:a6:
8e:ab:99:ba:ad:5b:de:49:f2:bc:55:ca:82:26:09:
0b:30:0f:e7:6c:cf:04:4a:d1:52:69:de:cc:22:26:
f7:32:a4:3e:71:76:b5:32:ad:45:3f:58:33:2d:79:
c3:1b:78:3a:bd:b2:ae:96:a2:a9:09:58:c3:df:d2:
65:ac:a0:58:e0:7a:e6:bc:0f:cc:b0:7c:6b:d3:cb:
b7:7e:c8:08:c4:ce:06:8c:04:e8:63:60:1a:6c:ab:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:4A:A3:47:BF:1C:BB:00:78:15:49:49:78:FE:6D:CD:5E:7B:C8
X509v3 Authority Key Identifier:
keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:06:45:f3:9e:2f:3e:3d:d1:d8:4f:11:cd:6d:ea:91:e1:36:
28:63:84:40:c5:6e:82:ef:f9:e8:3d:eb:66:12:35:a9:99:5d:
b3:1f:ce:c0:48:94:30:9e:14:4a:89:66:64:ea:45:cd:47:cf:
3c:21:34:ec:20:0d:80:c5:18:87:64:ad:75:b3:96:b2:b7:86:
26:63:1d:53:4f:ce:d0:b0:e4:94:89:0f:3a:9e:34:44:ea:42:
e9:77:a6:8c:b3:b4:c2:5c:23:43:c5:3c:53:6c:59:e8:a0:0c:
a4:07:8d:dd:d1:6b:e5:3d:35:72:87:07:20:4f:4c:e9:f5:85:
02:1b:ac:2c:ef:27:b0:c1:28:3a:56:05:41:0e:c3:53:5d:95:
8a:0f:02:f4:ad:74:ec:c3:6e:bd:c3:c3:4e:26:11:4d:a3:7d:
8b:0a:dd:c2:cf:2a:bf:0a:61:57:40:0f:6c:d8:c1:6a:77:9a:
91:52:8e:eb:ec:c9:27:1c:82:0a:99:b7:e4:83:58:ad:33:80:
27:e8:76:65:23:34:de:a0:17:0a:80:a1:26:00:ff:04:4e:70:
56:4f:96:67:19:10:68:00:21:57:82:89:5b:16:61:56:64:cc:
df:08:ec:a9:ed:e3:9f:12:9f:d5:61:f6:06:98:a3:f7:b9:a6:
1e:c6:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:48 2026 by rpki-client