Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: CYvHJDW/4LXlBFPERagDQAxcpyRInmGTYcY8xV0OPQw=
Subject key identifier: 01:46:49:CE:CF:4B:87:8F:29:A0:2A:51:56:30:AE:0C:F8:8C:5C:9A
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A12C8DC13163077066E8C52C431150624D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 20:00:49 +0000
Manifest this update: Sun 11 Oct 2026 20:00:49 +0000
Manifest next update: Mon 12 Oct 2026 20:00:49 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: KrDZC+WGNPzsIAIEilEC2y72AA1V8Bx2rCIWkRNEY2I=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:c1:31:63:07:70:66:e8:c5:2c:43:11:50:62:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 11 20:00:49 2026 GMT
Not After : Oct 12 20:00:49 2026 GMT
Subject: CN=014649cecf4b878f29a02a515630ae0cf88c5c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:ac:4a:da:55:43:67:29:e8:1b:a5:76:9f:
70:72:cd:fb:1a:68:5c:c9:37:60:1e:37:04:b7:08:
38:17:ef:18:87:00:c2:8f:4d:5c:22:92:65:4a:87:
c1:75:0d:aa:54:9d:2a:c5:6c:89:1b:92:d1:d3:7f:
94:10:a1:33:7f:9c:4f:85:25:a4:a4:9b:1b:15:28:
51:9b:6b:af:04:3f:48:b5:7b:ad:ff:bf:d6:0c:94:
e5:7a:67:19:94:08:5a:ff:b2:6a:bf:23:65:51:61:
20:17:fa:98:94:01:b9:28:ef:c8:38:bd:ee:09:9f:
29:11:17:97:1e:16:cd:da:62:67:52:84:1a:09:16:
b5:fa:81:7d:d4:2f:8c:22:86:9b:7f:db:e2:e9:1d:
75:ba:3f:de:64:ca:76:2d:81:e7:5a:1e:1c:e8:26:
16:3b:9f:41:77:f3:1a:89:b4:8e:1e:ba:74:aa:4d:
c9:86:33:73:51:d7:7e:f0:d6:d8:48:a9:9b:a3:b5:
44:c1:51:f1:28:d7:72:2b:91:39:ef:5d:5b:ae:12:
97:c4:4c:b3:74:dd:2b:fb:34:de:44:b6:c3:4d:29:
be:ca:2f:96:b1:53:d2:b2:de:00:f3:1a:82:22:4a:
6d:93:13:7b:16:08:84:57:ec:5a:02:0c:7c:30:42:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:49:CE:CF:4B:87:8F:29:A0:2A:51:56:30:AE:0C:F8:8C:5C:9A
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b6:e5:ea:4b:4c:b1:1d:dd:81:fa:7a:55:fa:2a:bb:b9:fe:
e2:62:8e:e1:89:f7:08:34:a5:b5:59:69:9c:ca:c3:3a:7a:8d:
e9:34:28:7a:ff:ce:70:95:f4:ea:3a:fe:e8:0d:df:2f:e4:2b:
06:d3:87:72:67:72:ba:e4:50:ad:e7:84:ee:b4:ed:71:fe:14:
32:5d:7f:d7:28:c4:a3:1f:80:17:d6:22:05:b0:72:28:4a:f3:
6c:80:b5:af:87:88:9b:75:c5:28:dd:ea:6b:05:29:89:0b:61:
47:bd:eb:dc:df:14:3c:12:fa:4e:fe:d7:1b:14:b9:ae:0b:33:
1a:ba:17:f6:ee:1e:24:81:33:f4:52:61:ad:e5:99:4b:1b:b2:
e3:b3:64:5b:a1:e3:5a:3e:25:ce:51:80:0d:7f:38:5b:19:ac:
74:17:35:42:1c:ed:8d:b3:b0:f2:45:2c:f4:88:e6:bf:fd:ed:
e2:1a:62:ef:05:5c:6b:9b:d2:02:a1:ac:7a:ab:e1:d1:e9:cf:
86:25:6b:68:d2:4b:18:ff:35:b8:24:28:1a:5b:27:38:6b:32:
93:a9:62:a7:b7:ab:16:cb:e5:f2:eb:04:01:63:ef:c5:f8:a9:
fa:3b:43:7b:04:b1:62:c0:64:55:ec:7e:97:64:19:1f:8e:3c:
d7:6f:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:28:29 2026 by rpki-client