Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: SJVMn7jS6uYqPOa+z3xxs42iNJ7EUdEDe2OmOXAzJNA=
Subject key identifier: CB:18:64:2E:8A:9F:05:7C:C1:80:1C:38:83:55:0E:7D:08:02:78:F0
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A10A6FBB3FAB74DC7CDC75A70B341F71C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A8D
Signing time: Mon 05 Oct 2026 05:00:56 +0000
Manifest this update: Mon 05 Oct 2026 05:00:56 +0000
Manifest next update: Tue 06 Oct 2026 05:00:56 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: h0oZMJkOqP/A15Zk0CaGKU0TXDXpNPJlvz9oz97JhOQ=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:6f:bb:3f:ab:74:dc:7c:dc:75:a7:0b:34:1f:71:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 5 05:00:56 2026 GMT
Not After : Oct 6 05:00:56 2026 GMT
Subject: CN=cb18642e8a9f057cc1801c3883550e7d080278f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:ab:55:e2:3d:32:4b:41:23:ba:fc:ec:16:
2a:f2:15:3f:8a:4d:24:6b:b2:f6:85:d0:81:d4:42:
84:d4:fd:59:83:dd:25:ee:d0:e1:60:36:a5:a0:52:
8a:23:eb:94:e6:7f:17:2b:ae:b9:03:f6:62:97:0d:
fd:8e:0d:d4:58:c4:da:72:c2:d4:35:9d:ef:0f:9b:
ad:a1:52:a7:16:de:c7:f0:9f:c9:6f:62:0f:a8:ac:
9e:96:23:20:e1:a0:89:02:a6:c2:38:95:b7:f5:2c:
65:6f:e5:d1:73:de:7c:7c:c7:a0:d4:98:9e:fb:ad:
2c:70:ae:e3:4d:28:11:02:ee:88:e1:e2:bc:34:74:
2a:fa:ae:1a:66:16:f4:7c:33:d1:a0:93:12:2e:fb:
97:1d:14:5c:88:44:84:bc:9e:f5:e0:d7:9c:6e:a0:
3b:3a:31:0a:5c:27:a4:86:87:9f:d4:be:bb:7d:9d:
a6:68:b2:9d:58:4d:bf:ae:5d:41:21:36:ad:06:83:
54:90:d3:de:7b:ab:20:6d:40:54:ab:ee:3c:b3:fd:
5f:1f:0f:7d:50:d7:79:7c:63:10:f6:47:e2:d2:8c:
dc:ec:96:1c:6b:01:82:8d:14:cf:cc:56:68:02:56:
d0:28:31:30:6a:57:d3:24:d7:1b:c7:e5:6d:48:06:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:18:64:2E:8A:9F:05:7C:C1:80:1C:38:83:55:0E:7D:08:02:78:F0
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cb:c7:0f:9e:f5:17:56:0d:88:d2:c6:4b:d2:f9:c7:82:4e:
9c:ba:f9:ac:ff:6d:e0:50:ca:23:4d:9c:27:3f:6c:25:d5:9a:
73:d4:f9:3a:59:e0:f4:b5:49:23:37:f9:22:cf:34:ba:57:6d:
4b:4d:24:5e:89:65:30:eb:04:75:4a:91:34:2a:41:d7:db:6f:
13:bc:8e:34:bc:99:9f:e5:b1:cc:e7:e8:32:1b:24:86:5d:7a:
0b:6a:80:d4:37:ab:06:03:d4:ae:e8:ed:0e:be:3c:0e:6a:2d:
35:f0:4d:04:57:52:15:c2:cb:e0:e5:a7:4c:2f:58:7c:d3:31:
6a:81:5f:1a:f6:b1:05:43:25:87:a1:2b:31:6b:27:85:f6:02:
05:9d:f7:9a:bb:4f:34:fe:2e:73:6d:30:70:e0:b3:23:28:7e:
2c:e3:ac:da:fe:f8:48:ac:b6:82:cd:bf:89:37:98:d1:c6:6e:
53:08:a9:38:ee:07:ee:1a:7c:de:5b:d6:9b:fb:d9:98:7c:98:
50:ad:58:1e:3c:0d:87:cc:af:e9:d2:97:f2:be:f7:3f:ba:f4:
43:bc:05:3a:6f:ba:c2:39:72:14:d5:0a:ee:f7:f2:a2:50:ae:
50:1c:d9:b5:e1:d5:71:2c:f9:54:d1:4a:0f:77:4a:ce:52:02:
17:2c:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:53:22 2026 by rpki-client