Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: c1TjnDQOBtCFPPnA2NUJdqZj/p2noIu1Q0C9yH95Vag=
Subject key identifier: 3E:D3:A8:F8:D4:AB:20:9F:6A:18:14:67:CA:DA:3B:94:9A:20:9D:1F
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 01A0C3A05390A047D85C517369DDC531CBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 11:00:59 +0000
Manifest this update: Mon 21 Sep 2026 11:00:59 +0000
Manifest next update: Tue 22 Sep 2026 11:00:59 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: WfKOJYGV9WeF7x/XFJrXuoPGVZGL+kqDVZcYpPDsFUk=)
2: OaG9G9Rkeg7MQ9HAOpMM6Qb2lyE.roa (hash: 2tlWpqcv4FYW9H4L8bdUATgM+St3ZdyU2sE6jN6ILxk=)
3: YXSgyUgUnB863rJPTcWCW7mGwFc.roa (hash: V1Uuys2uya26ArEHIls/PYBVdC0Vm3sFwdUGRo5ZhTA=)
4: lMQfwH-V7Yhd6sNgC8BpN5Ho3vc.roa (hash: 80PQfjBzEobkUlg1u1KjDZCEtHTRyd3Qm3q0fmEsPoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:53:90:a0:47:d8:5c:51:73:69:dd:c5:31:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Sep 21 11:00:59 2026 GMT
Not After : Sep 22 11:00:59 2026 GMT
Subject: CN=3ed3a8f8d4ab209f6a181467cada3b949a209d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:36:1c:58:64:ae:52:22:29:ea:3c:c2:3e:
fd:8d:0e:d7:e9:26:20:c1:79:27:5b:60:e3:45:ae:
bc:04:a9:fa:9f:c4:87:05:51:43:db:2a:5b:58:42:
fb:b6:49:e7:b6:46:bd:f6:29:96:48:8b:6e:f9:49:
ba:ce:f6:31:7e:54:52:4a:28:b4:98:0b:dd:4b:bb:
c5:9b:d5:74:e4:ea:1a:b5:17:ad:56:ac:6e:45:9c:
18:af:23:e0:ba:b8:7d:79:77:0d:a2:4b:c1:08:a0:
43:3d:34:90:47:b7:c9:a4:10:d1:dc:0c:80:f6:d6:
36:47:dc:ab:41:f6:ec:02:a3:6a:0c:f2:b3:45:5f:
24:87:f2:29:40:62:52:e2:d6:fd:75:fc:65:07:f2:
28:9a:e8:f9:1d:b0:25:a7:e6:15:61:66:84:a1:38:
f0:a5:3d:c6:ae:60:a9:59:a6:c6:fa:5d:77:79:fe:
63:50:c2:68:d1:3f:6a:a9:20:8e:63:da:f0:56:e3:
0b:5f:f2:7c:df:c6:14:27:cb:6e:91:19:c9:4b:bc:
be:de:59:24:e7:eb:91:06:ee:03:6d:2b:74:d0:73:
05:c4:5c:d1:a7:ad:90:23:35:ed:b7:97:1f:ac:a6:
46:5d:7a:e2:fa:97:ea:0d:f0:d1:85:30:22:b3:b0:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:A8:F8:D4:AB:20:9F:6A:18:14:67:CA:DA:3B:94:9A:20:9D:1F
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4c:9a:4e:0b:63:8c:4b:06:33:da:90:cd:6d:68:48:d9:d9:
23:e9:ae:96:4e:f5:e2:f5:8e:dd:8b:18:86:a0:2e:fb:c0:8c:
59:65:5e:42:b9:88:6d:bf:d3:9e:c5:52:f4:e7:e2:4b:4c:ea:
81:45:86:33:a2:36:89:d1:54:43:e5:51:3d:b8:23:95:c9:80:
f1:67:f8:21:fb:d3:74:f5:5d:cc:92:9d:f5:67:e5:8c:fe:3d:
ba:7e:15:83:38:df:57:f4:7f:9d:41:04:61:ec:3a:92:e5:43:
d3:76:76:da:be:2b:33:01:2a:c6:74:92:25:ae:2f:90:ab:ef:
6e:60:3e:3a:c6:b2:f6:6e:c4:28:27:e3:f7:d2:ab:d4:22:fe:
f4:5b:b2:26:96:1d:b5:ad:4a:91:fc:15:7e:46:28:e1:39:e0:
39:4b:3e:03:b7:77:e2:cd:42:f6:70:24:94:2e:0a:ed:f8:ac:
ed:ef:7d:3b:8c:15:fb:18:b8:af:11:24:9c:c0:06:91:60:5e:
cb:dc:79:fd:9e:37:2d:a4:55:f0:ed:19:dc:8a:f3:53:48:15:
7c:1a:f8:d0:a1:07:ba:f7:a9:c1:56:26:9e:67:0c:d9:cd:ab:
2a:2e:ea:09:9f:51:47:d0:41:3e:87:76:4e:15:57:59:c2:95:
51:47:5f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoFOQoEfYXFFzad3FMcvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx
NjY3YTUwHhcNMjYwOTIxMTEwMDU5WhcNMjYwOTIyMTEwMDU5WjAzMTEwLwYDVQQD
EygzZWQzYThmOGQ0YWIyMDlmNmExODE0NjdjYWRhM2I5NDlhMjA5ZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHo2HFhkrlIiKeo8wj79jQ7X6SYg
wXknW2DjRa68BKn6n8SHBVFD2ypbWEL7tknntka99imWSItu+Um6zvYxflRSSii0
mAvdS7vFm9V05OoatRetVqxuRZwYryPgurh9eXcNokvBCKBDPTSQR7fJpBDR3AyA
9tY2R9yrQfbsAqNqDPKzRV8kh/IpQGJS4tb9dfxlB/Iomuj5HbAlp+YVYWaEoTjw
pT3GrmCpWabG+l13ef5jUMJo0T9qqSCOY9rwVuMLX/J838YUJ8tukRnJS7y+3lkk
5+uRBu4DbSt00HMFxFzRp62QIzXtt5cfrKZGXXri+pfqDfDRhTAis7DNnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7TqPjUqyCfahgUZ8raO5SaIJ0fMB8GA1UdIwQY
MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt
Mzc2NDI2ZmZkNjYyLzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy
LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEyaTgtj
jEsGM9qQzW1oSNnZI+mulk714vWO3YsYhqAu+8CMWWVeQrmIbb/TnsVS9OfiS0zq
gUWGM6I2idFUQ+VRPbgjlcmA8Wf4IfvTdPVdzJKd9WfljP49un4VgzjfV/R/nUEE
Yew6kuVD03Z22r4rMwEqxnSSJa4vkKvvbmA+Osay9m7EKCfj99Kr1CL+9FuyJpYd
ta1KkfwVfkYo4TngOUs+A7d34s1C9nAklC4K7fis7e99O4wV+xi4rxEknMAGkWBe
y9x5/Z43LaRV8O0Z3IrzU0gVfBr40KEHuvepwVYmnmcM2c2rKi7qCZ9RR9BBPod2
ThVXWcKVUUdfBg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:46:14 2026 by rpki-client