Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: C4j6Od/unwsU8bDoXoz0oPxw4q5IGBFTyD3lErOoW+A=
Subject key identifier: E5:19:C5:3A:3D:8D:7E:C3:79:52:F6:B2:92:F3:8C:4B:DB:AC:08:E6
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A09EEF043C0CE587AC00E4EFD39B9CB698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A55
Signing time: Mon 14 Sep 2026 08:00:59 +0000
Manifest this update: Mon 14 Sep 2026 08:00:59 +0000
Manifest next update: Tue 15 Sep 2026 08:00:59 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: oVnYO+lbE6c5RhOTJuKoFlkI5R3c/uJamY3z2XfznYg=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ef:04:3c:0c:e5:87:ac:00:e4:ef:d3:9b:9c:b6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 14 08:00:59 2026 GMT
Not After : Sep 15 08:00:59 2026 GMT
Subject: CN=e519c53a3d8d7ec37952f6b292f38c4bdbac08e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:eb:40:03:a4:55:c1:ae:6d:87:0f:f5:7d:
8d:9e:4c:04:44:cc:ec:d4:95:c5:7b:32:6e:23:f1:
40:f5:c0:ee:e7:6a:37:aa:e6:96:3b:4d:ab:5c:49:
7e:19:38:03:33:13:86:29:76:55:6a:86:0e:c7:42:
80:cd:05:96:53:8c:95:60:01:cc:af:a6:80:d1:ce:
97:0f:96:36:f5:3b:87:f9:85:03:6e:0f:a9:b4:50:
bd:aa:46:66:24:6e:45:d4:4a:cd:5a:5d:e5:c3:f6:
dd:de:77:4c:b0:59:1b:ac:23:9d:ba:09:17:bf:8b:
c8:79:c1:ef:00:c2:ff:bf:84:9d:c3:58:81:fd:7c:
a2:cf:5c:d1:9f:33:eb:72:70:22:12:8b:57:fe:78:
df:7f:be:33:2e:8b:59:3f:66:64:48:1d:11:3a:33:
77:5a:e3:71:ce:63:fe:34:ef:cc:97:3a:a3:4a:e3:
ac:b8:ac:d7:e2:bb:6c:3d:7b:ac:f8:f9:4b:8f:9c:
e0:ad:7b:47:82:dd:1d:79:05:f4:8a:59:11:af:d9:
2a:66:b8:2b:59:40:f4:d8:0d:b6:59:36:56:7c:2c:
83:7b:f2:f3:d5:95:38:e9:95:e7:33:d5:0b:96:33:
f5:27:bc:97:f7:25:8e:16:d1:f9:bb:b2:90:f0:74:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:C5:3A:3D:8D:7E:C3:79:52:F6:B2:92:F3:8C:4B:DB:AC:08:E6
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:39:28:28:40:1c:b4:ff:c8:ce:c0:d1:86:94:54:c8:44:f0:
db:15:09:a6:e8:a5:cf:00:c9:81:e2:79:9e:48:a0:30:f8:a5:
bd:3b:88:16:78:1d:54:10:fe:cd:50:15:1f:01:0a:88:ca:ea:
ef:c8:29:84:55:13:76:5e:ab:6a:c7:21:3f:97:9c:11:85:09:
20:4e:18:10:ff:96:34:83:45:af:54:70:c1:dc:84:db:a9:8f:
c6:60:a6:b1:7b:50:aa:1a:a5:06:8b:14:94:22:3e:86:af:7b:
37:e3:b4:fb:bc:c2:2b:03:cd:3b:76:63:bc:ef:89:f9:36:6a:
4e:9d:07:ed:99:80:e1:61:e3:25:e8:c3:96:4e:0a:4b:4b:48:
67:5f:1f:6d:7f:da:18:a0:d9:b1:dc:59:12:4e:81:6e:ed:d3:
5a:57:27:ca:48:cd:8d:b3:35:36:5b:56:f9:73:b0:9f:fd:bc:
38:c7:04:af:16:77:1c:ed:37:49:4d:74:f4:e8:2d:d5:9c:f3:
f5:0b:a5:7a:e3:18:cb:0a:b8:fc:c0:d2:6c:8f:b2:a3:3a:ac:
68:98:bd:a6:a2:cc:08:13:05:b5:82:4c:bd:2d:3e:fe:50:0a:
1f:b9:70:77:43:5e:11:d3:b6:be:61:17:3a:26:53:a4:b7:1e:
7d:84:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 10:42:12 2026 by rpki-client