Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: bc/mzmQFHIzjti3fYOGeuDy4/IfWP7JHEO9W/XdXBfI=
Subject key identifier: B8:22:E9:62:6E:C2:FD:EB:7C:92:E6:C5:4D:FB:9C:D2:6F:4C:82:1A
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019D99D0A5EC737B30FCA6E6545C203DBAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:21 +0000
Manifest this update: Fri 17 Apr 2026 05:01:21 +0000
Manifest next update: Sat 18 Apr 2026 05:01:21 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: ZdkrPOTmEkgxh5y9WK4iUkoNTNDzZhDoMB2rNqCgjHQ=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a5:ec:73:7b:30:fc:a6:e6:54:5c:20:3d:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Apr 17 05:01:21 2026 GMT
Not After : Apr 18 05:01:21 2026 GMT
Subject: CN=b822e9626ec2fdeb7c92e6c54dfb9cd26f4c821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:d4:f2:bf:95:0d:2d:3d:21:75:0d:d2:75:
f3:01:6f:a4:ad:71:17:36:49:6a:19:ad:b9:71:73:
73:5a:62:d4:ac:b8:fd:4c:e8:ac:ed:d9:fa:09:e5:
ba:27:fe:12:b5:0d:5f:6f:13:42:2a:92:76:b4:6a:
c9:81:7a:8b:9f:8b:da:65:90:5a:67:b9:cd:3b:96:
0f:b1:c9:2e:0c:f4:81:4a:f2:98:ca:83:86:6a:3c:
26:32:6a:5f:44:21:b9:30:33:ff:21:7b:fc:66:78:
06:06:a5:53:a2:7c:cd:0c:69:c2:73:43:cc:f6:06:
9e:2b:00:ae:59:c7:b6:da:97:8c:fe:80:63:e3:dd:
6a:41:0b:97:14:08:57:68:c0:4c:6f:da:5f:db:ba:
ae:ef:df:59:25:86:f8:5f:5d:c4:9c:d8:5b:54:9b:
64:d3:2e:8e:03:33:13:d0:d3:2b:a0:64:7b:37:a9:
b5:b6:8e:e9:79:16:fb:05:f3:44:fb:52:1a:8d:bb:
41:bd:2f:e3:5b:22:39:98:e8:19:33:5d:8f:b2:ad:
51:3a:bc:65:2b:62:ea:db:91:d8:c1:35:65:cd:c2:
86:e5:4d:6a:1e:35:28:4d:cd:c8:1a:7b:61:56:5e:
49:29:85:50:94:a3:eb:71:75:92:21:a5:93:d9:4f:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:22:E9:62:6E:C2:FD:EB:7C:92:E6:C5:4D:FB:9C:D2:6F:4C:82:1A
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9f:1e:40:e6:c0:5a:1d:92:a6:64:ae:7e:db:0a:1e:de:e8:
01:3c:8d:68:8d:e5:d2:02:30:ac:00:5f:aa:6f:9f:6c:59:6c:
b0:26:31:5e:b6:41:43:e1:a9:3d:f0:ab:4f:c5:16:59:d8:02:
08:b4:c7:b9:bb:08:10:42:0d:50:1b:8e:80:76:58:e7:7f:b6:
42:0b:f7:7e:c9:a5:56:80:c2:cb:e9:f5:02:f8:35:da:63:d9:
c9:cc:66:a3:97:a1:fe:75:ad:7d:41:7f:25:a7:d4:01:b0:87:
3a:38:61:58:c1:08:ea:96:24:3d:f4:f1:8f:1e:5a:54:27:bf:
d2:87:07:23:b8:74:d1:08:2e:bc:00:17:71:23:40:08:83:fe:
f5:d9:2e:e4:a1:e1:9c:fb:96:01:0a:54:2e:f2:42:18:b3:16:
20:d4:e7:56:f5:8c:5a:8a:f0:10:5c:3e:57:ac:b0:c0:b5:05:
ad:c9:6d:11:79:6c:ff:59:c2:9c:50:d7:51:22:44:af:22:75:
c6:23:9e:a5:d2:18:8b:97:d1:7c:8b:64:a8:07:6e:72:24:d7:
29:04:31:71:c7:4f:0a:3d:9d:e5:20:02:60:ab:13:ff:37:32:
73:57:63:3a:96:a8:34:54:d1:94:c4:c5:de:1d:9d:d2:ce:58:
6d:91:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:22 2026 by rpki-client