Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: rZmfRjuxppDYPnUmiAifOQzYovVd9Kx6hsFis555W/I=
Subject key identifier: 2E:DC:75:55:64:79:22:4B:E0:42:A8:54:8E:AA:92:10:BF:14:A1:36
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 01A12767F3BCB2106DDF4BA22F23028D54EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 20:01:26 +0000
Manifest this update: Sat 10 Oct 2026 20:01:26 +0000
Manifest next update: Sun 11 Oct 2026 20:01:26 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: IQF0LVf+tDil57uJIya2q/ocCVcgmZmk114e1r/mgmY=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:f3:bc:b2:10:6d:df:4b:a2:2f:23:02:8d:54:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Oct 10 20:01:26 2026 GMT
Not After : Oct 11 20:01:26 2026 GMT
Subject: CN=2edc75556479224be042a8548eaa9210bf14a136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:69:bb:d9:17:51:46:4d:03:c6:20:0f:f1:
9b:1c:1f:c8:36:05:38:22:ae:62:76:72:78:a1:25:
76:73:37:03:23:bd:ba:0b:7a:77:6e:8c:84:f3:31:
17:bc:2b:c5:15:54:cc:2d:27:90:68:d3:dd:c3:f8:
ee:5f:d7:60:c8:cc:eb:f9:07:17:8f:87:64:de:a0:
61:a0:d2:93:ea:55:51:e9:10:11:5d:8d:cc:2f:f3:
f7:c1:40:f1:7d:8e:70:de:45:98:bb:91:e6:75:25:
9f:97:ca:4b:8a:b1:41:fa:bb:dc:c2:e0:a3:f6:a6:
26:32:d6:d5:3d:e3:07:c1:22:e4:13:5b:3c:64:ef:
e1:86:98:83:64:ab:47:03:3e:1f:90:bf:6e:dd:78:
88:24:1c:a4:6c:5a:37:1f:4a:94:79:36:8a:10:d2:
a2:a0:fa:2d:70:41:d0:22:99:1b:1c:61:bb:e4:4e:
f1:9c:57:5a:fb:cc:4e:d8:3b:39:bf:f7:7e:0a:d2:
50:c2:33:61:02:a1:75:82:11:bc:b1:d5:81:29:a9:
11:64:dc:3a:08:d6:71:8d:20:aa:cb:23:85:c3:39:
0a:b1:38:26:0f:9e:e6:ff:90:32:d6:1a:dd:fb:c8:
77:96:67:65:10:b7:16:08:7a:35:5d:93:4b:67:c4:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:75:55:64:79:22:4B:E0:42:A8:54:8E:AA:92:10:BF:14:A1:36
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:23:7f:76:0f:f8:80:0c:8f:9d:00:9f:84:bd:60:91:1a:49:
a4:18:0b:1c:2b:a9:5f:96:6b:db:05:dc:d1:b9:79:f0:96:f1:
e9:fb:e6:a0:63:82:60:c4:39:28:a7:41:2f:6a:46:a3:e7:6c:
a0:1d:c7:75:ba:c8:30:1a:8d:b6:c2:71:00:bd:ed:f8:6a:e4:
3e:a0:34:ac:95:7f:86:8a:e8:aa:0f:20:29:a1:7c:af:87:41:
d4:c0:c7:fa:8c:94:7a:5c:d8:68:4e:2c:ab:59:80:6b:98:06:
43:84:e6:f9:6c:9f:fa:93:76:94:25:19:f4:6d:1b:f5:bf:31:
e3:45:ea:db:4c:34:50:af:a1:9e:69:c6:b2:64:6b:e3:8c:d2:
b9:1c:78:f6:91:b4:29:94:dd:db:cf:2a:14:a9:d3:30:45:8d:
e6:d8:3b:db:64:fa:b3:07:ff:f7:40:83:e6:74:08:59:15:c7:
29:77:71:da:5c:7b:3c:0c:aa:85:c3:4c:29:35:1a:f9:5b:8c:
eb:74:97:82:4a:c6:28:39:56:0d:5f:0c:46:ea:a7:f1:75:8d:
37:3f:4c:42:f9:18:18:81:f4:2a:2a:68:90:1e:0f:69:4b:76:
42:c9:43:67:72:16:55:4c:db:ec:ad:26:c2:4b:00:2b:68:d0:
b6:e5:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:23:50 2026 by rpki-client