Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 8y69I3k4fSuf+uwPhwCX1jU4HfYW1sOHh96YiFFwwSw=
Subject key identifier: F7:C9:4A:9D:F6:48:AA:68:5D:3A:40:07:35:23:25:AD:12:45:E7:92
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A013E3BD52E6537833378682D3D47B1BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A0D
Signing time: Tue 18 Aug 2026 08:01:27 +0000
Manifest this update: Tue 18 Aug 2026 08:01:27 +0000
Manifest next update: Wed 19 Aug 2026 08:01:27 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: E4IHFFcyvEvHSVnBS/Ya393537rq3JuQZuUrtvowVOE=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:e3:bd:52:e6:53:78:33:37:86:82:d3:d4:7b:1b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 18 08:01:27 2026 GMT
Not After : Aug 19 08:01:27 2026 GMT
Subject: CN=f7c94a9df648aa685d3a4007352325ad1245e792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:32:a7:eb:c8:80:e9:f7:eb:22:72:a7:d0:
dd:eb:04:67:ed:26:6f:c4:c0:4f:19:90:81:a8:66:
72:fb:d4:9f:96:23:8d:c8:c7:1e:08:4a:95:2f:aa:
36:03:64:ca:5d:cc:48:5d:d8:74:5b:0f:a4:f9:98:
4f:39:e7:cf:65:00:b7:7f:5b:10:4d:e8:d7:b1:3c:
e8:ac:2b:03:62:6f:8d:91:b2:be:ab:52:d7:8e:a8:
f6:9a:7b:b0:37:a0:d4:26:8b:98:4e:b4:69:ab:2b:
c4:01:9c:11:c3:76:7b:a4:bc:9c:15:56:4a:d7:2b:
81:ec:76:39:ff:26:9f:a8:1d:59:36:1b:1f:12:92:
ab:52:47:98:68:2b:1a:72:64:4a:24:13:f6:1c:87:
2a:26:53:03:52:ec:5c:f7:18:ca:f7:0d:5a:54:73:
19:84:cc:c1:8c:16:91:a6:ab:c8:37:b7:ab:0e:ca:
2c:a6:bb:5f:d2:1b:8b:49:3b:80:c6:df:bb:77:61:
2b:42:4a:db:20:0a:e1:8e:41:5d:aa:28:12:1f:d4:
04:78:da:b3:74:a4:a2:7c:67:43:70:9f:b3:88:56:
0f:37:5f:d4:2e:5d:49:17:ce:08:91:c3:70:a3:f3:
d2:e9:09:ca:e0:e2:3e:78:83:1b:9f:d5:c5:b7:53:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C9:4A:9D:F6:48:AA:68:5D:3A:40:07:35:23:25:AD:12:45:E7:92
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:e4:24:d3:f1:31:5b:ce:7e:7c:ae:34:d7:d3:af:3a:22:
cb:e5:b6:72:80:c6:43:a0:11:e4:1a:61:82:85:e4:ff:6d:4c:
13:57:94:6f:a3:3d:80:22:8e:e6:46:b4:af:d4:ed:49:ca:91:
9c:ff:44:e4:b1:a1:b6:d0:bb:1f:b8:ac:70:b0:e5:7c:7b:e0:
1d:83:01:cc:2c:77:a0:5a:24:be:ae:bf:31:fb:04:85:13:2f:
a1:19:d4:94:4b:af:28:c4:c4:21:5c:bb:79:01:d3:b8:03:f3:
04:19:41:f6:63:77:69:00:e0:64:91:95:e0:73:b5:17:b7:1c:
b8:d3:95:44:ef:76:be:eb:d5:91:b2:7e:0c:3e:aa:60:1a:d2:
c1:ac:27:92:74:a7:5b:84:3a:51:5d:b2:da:ac:3e:66:d4:b5:
59:ff:ff:a7:11:e9:0d:a8:a8:c4:a8:14:d5:94:91:14:1b:f2:
22:a0:6b:60:fe:78:de:1d:f3:f0:fe:7b:85:b9:78:44:4f:3e:
67:8f:77:47:6f:2b:5c:bf:7a:61:27:30:31:84:0b:ff:4e:bd:
de:53:ca:a8:5c:de:bd:9d:6f:d1:6d:86:cd:a5:26:d8:7d:4a:
3d:c7:62:5e:7c:cc:a4:f0:98:1e:9b:9f:9e:16:c4:4a:a9:b0:
d5:75:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 09:47:48 2026 by rpki-client