Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
File: KhmTnyGLthMV6bOzez24WWCXXRQ.mft (raw, json)
Hash identifier: BiMmd8r1MFBTWnx7J4RiOZymQyABpnEvf3R6/kp3uTw=
Subject key identifier: 31:5E:A1:A3:F5:D6:79:4D:8E:68:3F:78:2A:3D:99:54:13:6D:6C:65
Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14
Certificate serial: 019D996264D45C42D24CAB4B09353539F962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 03:00:55 +0000
Manifest this update: Fri 17 Apr 2026 03:00:55 +0000
Manifest next update: Sat 18 Apr 2026 03:00:55 +0000
Files and hashes: 1: KhmTnyGLthMV6bOzez24WWCXXRQ.crl (hash: sOKiJr5p35KnMC7sF/xQpmiazs2EW4wtqMZhRqd9sEY=)
2: Opq729qHLi-8dYaQgIIxGa15kXA.roa (hash: 29AgcIdF39QZ4KXfXzVq7WdeMpA7ZOSG9zMnRXMOq8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:64:d4:5c:42:d2:4c:ab:4b:09:35:35:39:f9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14
Validity
Not Before: Apr 17 03:00:55 2026 GMT
Not After : Apr 18 03:00:55 2026 GMT
Subject: CN=315ea1a3f5d6794d8e683f782a3d9954136d6c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:c0:c7:70:7f:7c:dd:88:74:fc:5b:fd:97:
55:71:49:dc:4b:5f:4f:41:fd:cd:93:13:2e:3e:5d:
96:04:04:41:53:4a:90:92:ef:25:39:d5:88:34:0a:
07:12:23:4c:eb:2e:b1:bb:13:de:47:8b:3c:ca:93:
66:90:11:57:ae:b4:c1:07:12:07:41:57:d2:bf:67:
38:b6:9d:37:e4:74:ea:d3:8b:9e:82:bc:a3:73:bf:
e2:2d:b9:83:06:30:a9:81:db:04:1b:da:df:bd:b6:
ba:3d:fc:26:ca:ca:4f:ae:fe:37:7f:72:8e:de:ff:
48:85:2f:7e:1a:1d:71:73:8d:94:2b:5e:b0:0e:13:
14:8b:16:91:5d:64:0b:3f:ec:c4:db:a2:a2:87:32:
ee:af:f5:cc:05:96:a6:19:6c:c7:84:d7:20:0c:f3:
6a:f6:b7:12:0d:bf:10:77:4d:29:5c:19:1f:c2:af:
91:48:08:59:f5:0a:c5:4c:b0:ac:f0:17:56:23:86:
93:d8:a5:2e:c7:3d:12:5d:ea:17:e2:75:66:33:1c:
99:25:14:18:fb:e0:73:b1:19:4e:fb:8f:e2:07:13:
9f:b1:c6:b5:2b:e1:0c:21:9f:65:0b:70:90:72:9a:
1c:74:3e:5e:5b:2c:79:f3:61:10:d6:ed:fb:17:db:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5E:A1:A3:F5:D6:79:4D:8E:68:3F:78:2A:3D:99:54:13:6D:6C:65
X509v3 Authority Key Identifier:
keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a1:bb:a8:01:aa:98:a1:0b:70:97:64:b3:9b:5e:30:27:04:
7e:d8:7d:6a:72:d5:b9:4c:94:fa:1b:33:4e:ef:88:f0:f6:d7:
52:24:a6:b2:64:cf:7f:2a:ae:4d:20:96:cd:80:fd:fc:a3:bd:
a9:e2:f2:cb:93:bd:50:2b:3f:bd:b4:70:9f:87:19:5a:90:08:
51:f0:a6:51:97:3a:54:07:21:eb:f3:54:5c:67:b4:87:3c:37:
99:ed:d0:a7:60:03:8c:ef:53:1f:d6:ab:d5:10:d5:3d:ff:14:
e9:1d:b8:7e:44:1c:50:96:04:cf:1e:c0:be:ad:6e:e4:d0:b8:
75:78:3b:6c:93:ac:f0:e2:7b:9f:0d:28:01:c2:24:58:f4:6c:
d4:df:0a:d9:f5:9f:80:98:3e:9d:53:05:d8:56:5c:aa:33:26:
0c:ff:d0:0e:1d:6d:80:e2:c2:4d:6c:38:78:1e:a3:aa:35:70:
01:6d:e1:6f:53:6d:19:36:d7:78:f1:15:5b:90:4a:0b:71:2d:
eb:1e:9e:24:1f:4d:fd:01:08:d4:86:71:db:3b:31:a9:06:1d:
0f:88:23:03:bf:73:5c:9f:ad:27:ea:7c:d2:8d:00:c3:6c:5d:
a1:48:17:74:ef:ae:52:35:7b:2e:0a:ec:9e:07:9d:95:e3:72:
55:df:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:40 2026 by rpki-client