Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 30194wCf1ad6BNn3yT/Q291e/Yz4XQ6Px2xu1OGY5cY=
Subject key identifier: 68:9A:BD:6A:75:6F:26:05:0E:E1:C7:BF:1B:6A:C4:AF:A8:86:F8:68
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FE39BFE9FD2B7BC34B2776C3EB7FF6304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19F4
Signing time: Sat 08 Aug 2026 23:01:18 +0000
Manifest this update: Sat 08 Aug 2026 23:01:18 +0000
Manifest next update: Sun 09 Aug 2026 23:01:18 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: hlP+/cy9IYOX06DbRsN4TLRniDc1LYyW2Yow+S+C+fU=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 17:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e3:9b:fe:9f:d2:b7:bc:34:b2:77:6c:3e:b7:ff:63:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 8 23:01:18 2026 GMT
Not After : Aug 9 23:01:18 2026 GMT
Subject: CN=689abd6a756f26050ee1c7bf1b6ac4afa886f868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:c3:36:73:de:b6:65:fd:0e:67:32:fc:63:
54:d6:f2:61:94:a6:21:d3:3c:8f:66:62:c9:9d:da:
bb:66:6c:f6:49:78:9e:fb:3a:36:66:75:82:03:32:
c8:cc:e6:30:44:1c:f9:df:1e:db:83:f2:fd:a0:6c:
18:ae:5f:a9:fc:46:95:68:30:79:66:cd:9d:58:23:
ae:6e:6d:14:e0:00:87:ec:b5:9a:17:0e:51:7c:8e:
c9:b5:a3:5f:57:f2:1c:b1:eb:b6:64:14:6b:ee:3c:
f9:38:18:c4:8d:4d:52:dd:e9:25:1c:b5:b1:6b:d4:
f3:fe:41:70:3f:15:b1:da:34:16:ea:fe:ea:17:81:
61:3d:c1:8a:2e:7a:b5:dd:7a:e3:b3:eb:7f:54:ad:
2c:00:7d:9e:9c:fb:3c:51:7c:a6:da:e3:8d:f7:5e:
87:5a:50:73:b9:c7:6d:77:df:46:17:cd:26:40:1c:
93:bc:39:7d:e2:4b:a6:0f:b8:60:d2:96:61:75:45:
49:ab:ca:80:9a:22:bd:1a:54:91:39:69:c3:09:2b:
94:f3:b6:aa:c2:55:3d:db:f8:65:0b:ca:eb:f4:7a:
84:93:f6:c6:d3:10:b3:be:6d:a4:1a:dc:98:bb:2d:
a5:39:06:8c:0f:65:7c:af:52:b3:f3:16:67:37:b7:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:BD:6A:75:6F:26:05:0E:E1:C7:BF:1B:6A:C4:AF:A8:86:F8:68
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a3:dc:25:8f:99:22:52:f5:f8:4c:32:3a:f1:7e:09:3c:72:
e0:f1:fc:a4:f8:59:cd:44:ec:02:ff:10:e1:f6:75:3e:f2:ea:
10:73:82:e8:58:e3:65:45:d6:e7:7b:36:89:58:cb:17:26:49:
13:6b:3a:a5:23:a1:01:f2:01:7c:e7:d5:53:ff:fa:b0:3d:a1:
78:fa:c6:06:8c:fa:68:7e:88:bd:2e:df:e4:53:02:43:42:48:
aa:5b:22:ae:65:fd:bf:a0:89:0e:ff:4e:78:17:90:ed:29:43:
73:e7:ba:9a:4e:f8:6c:55:ca:c0:8a:06:af:c1:da:03:76:5f:
10:06:02:d5:69:5c:92:09:0a:8f:39:1a:9c:66:8e:1e:c4:4c:
55:01:bb:bf:3f:79:90:ab:69:5d:6f:57:3c:6f:92:50:d9:47:
31:0c:91:3a:c0:c2:e4:f9:d2:dd:2a:7b:bb:d4:68:73:29:a2:
41:ad:68:a4:ba:55:b8:06:66:6c:f1:c4:ed:8e:40:08:76:64:
70:fc:95:fb:87:0c:22:3f:c6:7b:a3:4b:38:11:95:6e:1b:84:
e8:1f:93:c3:dc:bd:e4:7d:20:46:52:80:9a:70:9f:75:cd:27:
87:9a:ab:a0:c4:a2:05:2b:a9:12:e7:8a:66:0e:06:a8:a0:d7:
5d:fc:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 01:53:26 2026 by rpki-client