Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: qnrjoc+923UMWyw742Wg3l+St6NjrOL2GNVGVqzveac=
Subject key identifier: 1B:05:F4:5E:17:9A:73:4A:55:52:96:AD:2B:61:8C:C1:BD:89:97:3B
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 019F81F9241D9984E220D09692ADE7383F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 140B
Signing time: Tue 21 Jul 2026 00:00:16 +0000
Manifest this update: Tue 21 Jul 2026 00:00:16 +0000
Manifest next update: Wed 22 Jul 2026 00:00:16 +0000
Files and hashes: 1: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=)
2: cuKBdXTr4qzygMyG_xdsVAondIc.roa (hash: gx6P2REt7/T1YdadU0I1WyXfvK+m2EoLKxa8au7Wlyw=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: P+t2y+AFBvz+cC3gX6oOMt4uXT7tCfv+Y1+Nb5Ja42c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:24:1d:99:84:e2:20:d0:96:92:ad:e7:38:3f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Jul 21 00:00:16 2026 GMT
Not After : Jul 22 00:00:16 2026 GMT
Subject: CN=1b05f45e179a734a555296ad2b618cc1bd89973b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:f4:f9:35:f2:08:57:16:c0:81:39:78:b2:
d5:00:7d:74:95:16:11:09:9d:50:6b:25:63:1f:d3:
b4:f5:93:c1:97:23:e8:00:c5:f2:66:35:31:a7:a4:
4d:39:8d:84:2d:63:34:c2:83:4e:29:22:4a:30:37:
a5:85:80:85:64:cf:ee:73:9d:41:39:d2:2f:76:fa:
68:3b:b1:2e:ff:01:8a:72:ea:d6:83:80:70:0a:8c:
a3:0b:90:72:d1:3a:82:53:34:52:e2:db:ed:85:ba:
a6:b6:e1:d8:24:db:49:24:b9:c3:ff:5d:db:dc:5c:
a7:2f:9d:c4:23:6a:b0:e1:68:e4:bc:bc:4b:6c:f7:
90:e1:77:3e:97:4f:a3:4b:47:c2:11:a2:00:f9:4d:
ad:cb:cc:ba:03:6c:b5:90:3d:6a:d2:f5:6f:9f:64:
63:ee:ce:e3:36:72:a7:da:3d:ac:da:cf:0c:c1:fd:
4a:f0:af:35:00:5e:31:ab:65:aa:56:69:51:c4:e0:
8a:9c:d7:be:d0:78:e5:98:87:57:b6:85:38:ea:81:
21:43:94:2c:67:e8:e5:69:15:ac:ca:36:c9:b4:2f:
75:4f:20:a7:be:7f:2a:35:2c:b5:ac:d1:c2:23:58:
76:66:d2:ed:d3:9f:c8:ec:23:ab:18:63:8d:b3:06:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:05:F4:5E:17:9A:73:4A:55:52:96:AD:2B:61:8C:C1:BD:89:97:3B
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e1:e1:00:d3:e7:02:9b:d7:68:3d:62:fd:71:94:58:02:f4:
de:bf:e4:02:38:ae:3a:cd:1e:42:04:97:e1:79:29:b5:4c:b7:
d7:3f:0b:71:8b:00:5f:f1:9d:5b:9d:3a:9d:0a:d1:cd:58:f6:
75:cc:0c:81:e1:6f:13:0e:e9:0b:b4:8a:4c:4c:f0:eb:94:38:
f0:ff:c7:3c:62:c4:80:58:e1:74:c9:3d:d2:37:9a:37:25:37:
db:63:a0:20:ae:21:e4:6e:67:86:df:dc:34:7b:47:1f:91:6d:
17:7e:27:e3:57:ec:f0:20:57:91:93:6c:5e:0b:95:1f:00:de:
74:a6:69:81:41:3d:e9:4f:32:b8:ad:e5:3c:ad:12:d7:22:ee:
cb:75:80:d0:e1:39:22:5c:a5:01:18:a8:36:7f:ea:41:be:95:
ee:32:bd:c7:64:1c:1a:d0:83:7d:89:3d:2b:87:28:f3:d5:fc:
ca:87:8c:ca:4c:94:e0:2f:f7:ff:77:ec:a6:b5:ee:90:c2:f7:
ab:cc:0d:f9:98:90:85:c3:ae:b7:c6:91:8c:ce:e1:fb:25:b9:
a2:a6:2c:15:05:5b:ec:b3:2a:f4:90:96:be:c0:ec:a6:53:c8:
18:b0:cd:55:a8:ab:a4:dd:8c:f9:6d:0b:b2:be:b1:c8:9a:f3:
55:32:90:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+B+SQdmYTiINCWkq3nOD9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh
MmQxMWIwHhcNMjYwNzIxMDAwMDE2WhcNMjYwNzIyMDAwMDE2WjAzMTEwLwYDVQQD
EygxYjA1ZjQ1ZTE3OWE3MzRhNTU1Mjk2YWQyYjYxOGNjMWJkODk5NzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss/0+TXyCFcWwIE5eLLVAH10lRYR
CZ1QayVjH9O09ZPBlyPoAMXyZjUxp6RNOY2ELWM0woNOKSJKMDelhYCFZM/uc51B
OdIvdvpoO7Eu/wGKcurWg4BwCoyjC5By0TqCUzRS4tvthbqmtuHYJNtJJLnD/13b
3FynL53EI2qw4WjkvLxLbPeQ4Xc+l0+jS0fCEaIA+U2ty8y6A2y1kD1q0vVvn2Rj
7s7jNnKn2j2s2s8Mwf1K8K81AF4xq2WqVmlRxOCKnNe+0HjlmIdXtoU46oEhQ5Qs
Z+jlaRWsyjbJtC91TyCnvn8qNSy1rNHCI1h2ZtLt05/I7COrGGONswbovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsF9F4XmnNKVVKWrSthjMG9iZc7MB8GA1UdIwQY
MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct
MDA4NWEzNjVhMjVmLzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm
LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+HhANPn
ApvXaD1i/XGUWAL03r/kAjiuOs0eQgSX4XkptUy31z8LcYsAX/GdW506nQrRzVj2
dcwMgeFvEw7pC7SKTEzw65Q48P/HPGLEgFjhdMk90jeaNyU322OgIK4h5G5nht/c
NHtHH5FtF34n41fs8CBXkZNsXguVHwDedKZpgUE96U8yuK3lPK0S1yLuy3WA0OE5
IlylARioNn/qQb6V7jK9x2QcGtCDfYk9K4co89X8yoeMykyU4C/3/3fsprXukML3
q8wN+ZiQhcOut8aRjM7h+yW5oqYsFQVb7LMq9JCWvsDsplPIGLDNVairpN2M+W0L
sr6xyJrzVTKQiw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:06:11 2026 by rpki-client