Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 1tmo/rik/qOxJTyXddunEEqEMb7oahNySshMYrRJM5s=
Subject key identifier: 24:2B:13:68:97:BB:71:4C:2D:65:86:48:32:8E:8B:9B:12:0D:7F:CA
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A13A120FA1233F73F7BEF58620994E8A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1AA7
Signing time: Wed 14 Oct 2026 11:00:24 +0000
Manifest this update: Wed 14 Oct 2026 11:00:24 +0000
Manifest next update: Thu 15 Oct 2026 11:00:24 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: bPZpYcX+oIRoRVc47iRMIADITv5n/ZMoA0EpJBgr16o=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:12:0f:a1:23:3f:73:f7:be:f5:86:20:99:4e:8a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 14 11:00:24 2026 GMT
Not After : Oct 15 11:00:24 2026 GMT
Subject: CN=242b136897bb714c2d658648328e8b9b120d7fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:f6:f1:bf:11:10:98:0e:dd:b8:45:e5:7e:
83:e1:ff:be:9f:9c:bd:b4:ee:c2:cd:f5:08:26:b2:
f2:bc:ec:58:b3:91:86:fb:61:5d:47:05:5f:06:58:
14:16:f5:67:d5:64:3a:e3:87:03:94:ee:85:f0:a8:
06:3b:9d:b8:f9:57:70:41:42:68:bb:ac:95:f5:69:
34:bf:b7:fb:fe:67:8c:30:93:6d:11:bc:62:f6:6a:
15:d4:0b:b9:a5:71:6b:aa:40:e5:53:d4:13:41:06:
5b:a5:3f:67:71:a4:37:19:76:fe:ec:ae:f8:e3:22:
18:41:f3:cf:ea:ea:3c:b3:c5:10:48:75:e4:dc:15:
80:ee:cf:cc:bf:bd:8b:a5:66:e3:e7:fe:cd:5a:35:
9a:50:33:8f:e5:c5:ac:a8:80:34:c7:0b:32:a7:c2:
94:43:a3:93:5c:75:f7:a1:db:b7:43:12:dc:b0:5e:
14:cd:45:51:71:b4:9d:96:2f:ef:cd:bd:42:97:18:
19:d6:7e:ec:8c:7d:1a:8a:e5:0c:c6:90:57:0c:e9:
fc:ec:78:d2:3c:50:ca:aa:34:f3:db:b2:3b:8f:79:
20:b1:e0:23:9b:93:1b:75:cc:53:87:44:c9:dd:fb:
de:a4:c1:62:fa:ea:1d:1c:ef:c8:8e:05:54:a4:20:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:13:68:97:BB:71:4C:2D:65:86:48:32:8E:8B:9B:12:0D:7F:CA
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fb:9c:4b:21:6a:15:f0:f0:bb:87:f8:0f:2c:df:17:56:15:
2f:b8:f4:b3:cd:70:0e:94:10:b6:54:a3:86:f2:fa:91:2a:94:
8c:c2:96:c2:32:7b:68:5b:51:c5:78:b9:d7:7a:36:20:6f:20:
2f:e3:73:85:63:7c:cd:22:12:64:ca:49:27:73:2d:de:b8:a1:
89:f9:86:eb:45:e1:d7:9a:ce:42:22:ef:77:6e:05:e6:ea:f0:
0b:ac:65:9c:b4:fd:a0:fc:08:2d:fa:3f:d0:75:1c:0f:c6:fd:
76:01:56:ad:76:f9:60:c3:35:3a:24:52:4f:eb:52:d0:b5:cf:
1a:a1:82:3b:a4:6a:84:96:35:a5:db:d8:79:0b:ce:fa:80:67:
94:f9:dd:96:1d:f1:25:ce:a0:55:fc:b8:1d:e7:b9:c9:c8:64:
bb:f8:d1:a2:ec:e1:31:e8:10:0b:6f:de:88:ec:43:c3:03:6e:
b9:50:aa:92:6f:62:08:58:34:7c:ae:31:ea:43:82:a0:fd:7b:
f0:cb:1e:b4:37:0b:da:21:21:38:3f:aa:68:17:14:cd:ca:43:
f0:b6:a9:4e:b9:eb:3d:ab:95:f7:9e:6f:57:b3:8e:87:03:e4:
e9:d8:19:e4:6c:5b:08:81:44:2f:5d:67:a2:bf:1c:a5:f1:09:
1e:f1:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:34:45 2026 by rpki-client