Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: bTNhW7shmwOn02k6sLE9eDAu1zpr94ayaWdcKX6sr2A=
Subject key identifier: 14:30:0F:10:1E:DF:18:48:67:13:96:E2:99:5C:E3:09:6F:86:41:B6
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019CAC46DA60045834B2339671A25913D8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:50 +0000
Manifest this update: Mon 02 Mar 2026 02:00:50 +0000
Manifest next update: Tue 03 Mar 2026 02:00:50 +0000
Files and hashes: 1: 2SDdZbZHox8NMplwQIrxvgKSu34.roa (hash: kvbkJLaXOyyLA1zVWaE+vWipg18u/BOLkqhk/qFEJP8=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: boZDlIG8FmkQXfmpwTGQelKhK3ybfqrOqiM9fKlfyOs=)
3: LcyElSfep6rD8AEBau9p4Ves3zY.roa (hash: cVyB/pcI480WEjCma+PMg1jARTqe0Occ2uE2IiVCZZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:da:60:04:58:34:b2:33:96:71:a2:59:13:d8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Mar 2 02:00:50 2026 GMT
Not After : Mar 3 02:00:50 2026 GMT
Subject: CN=14300f101edf1848671396e2995ce3096f8641b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:5a:77:28:ce:81:79:bf:f4:47:38:72:31:
88:29:25:8f:90:9f:d2:f5:4d:a6:99:d6:b7:d8:90:
19:b1:d7:db:ea:4f:6d:d8:53:d9:5f:3d:21:1d:6c:
90:5c:e4:5c:e2:48:28:f7:9e:5f:ad:ee:be:4d:23:
0a:ef:30:02:66:b4:09:70:c7:83:c8:6c:30:69:bf:
d2:e7:ca:c8:36:57:42:90:de:6c:92:73:b0:97:d8:
27:e8:8e:d5:ec:3d:0c:b4:90:7a:d2:96:ab:6b:52:
43:20:bc:fc:ea:51:89:47:1b:46:cb:de:70:97:c4:
93:87:cc:1a:eb:88:1e:29:62:5e:e5:d9:1e:ab:8c:
19:b5:e1:da:d3:61:00:6a:ad:73:b0:57:1d:8d:e1:
c5:db:d4:13:51:77:1a:4c:e1:9b:c3:a8:87:68:be:
58:0f:65:a0:db:9e:ae:c1:0c:c0:b1:83:a8:6f:fd:
ff:d3:62:69:6c:5d:a9:f7:7f:07:f3:39:b4:58:09:
7c:e8:9b:d1:54:db:66:45:5d:c2:fc:42:2f:cd:b8:
95:ad:5e:b2:63:46:be:e3:c6:1f:b2:ad:f0:f1:00:
74:c5:e3:8c:32:8a:62:13:17:90:07:77:41:60:83:
48:9a:6b:5f:3f:c6:b9:80:7b:e4:ba:0a:8b:20:e8:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:0F:10:1E:DF:18:48:67:13:96:E2:99:5C:E3:09:6F:86:41:B6
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:28:b3:dd:ad:2a:89:5e:87:68:04:68:0b:8f:61:7b:52:
8c:74:80:d1:39:85:4a:f0:58:23:f4:64:ee:ea:48:20:e0:ab:
d2:31:f2:30:eb:38:b1:c2:39:6a:84:3f:4a:d0:65:c5:c6:5e:
bb:d0:4b:19:50:d5:5f:11:6f:d5:cd:e0:59:fa:c0:a9:f3:18:
80:1c:91:4f:62:fe:bc:68:05:d7:0b:16:4c:ce:f8:2f:b9:b5:
b4:09:71:97:1b:2b:5a:c0:63:02:ab:b7:b8:bb:b7:49:9d:cf:
d7:f5:b2:c3:74:89:d7:bd:a2:46:36:bb:93:f5:18:f5:a2:7c:
1b:2a:79:30:ea:f3:f5:29:3e:af:d2:09:59:65:2a:e4:72:43:
4b:b5:02:ef:26:85:b1:0f:b9:1e:26:44:77:44:54:e7:41:08:
f2:b4:bd:58:85:78:ab:da:97:d5:b9:b1:84:6e:f4:d5:90:31:
c3:49:43:0c:bb:e7:a5:bf:73:b6:2b:99:95:09:78:ae:d8:92:
fc:31:bc:e1:3f:16:89:68:85:76:7e:9e:33:0a:6a:5c:de:23:
08:07:f9:21:43:7c:8f:0f:39:be:2f:68:4a:97:07:4d:e4:d5:
2d:64:18:bd:73:c7:77:b0:e0:58:0c:ce:fe:e4:2e:3e:c7:10:
fc:47:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:23 2026 by rpki-client