
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: POvnsuhei5+NzIV9QJvdCnYs5SLMiHbW33JKsVOy7rE=
Subject key identifier: FF:44:44:29:F5:13:BE:2C:6A:8E:A7:0E:95:95:E6:5D:D7:94:A6:B5
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A11B2C076067425391E0B6FC865D8A6F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A97
Signing time: Thu 08 Oct 2026 11:00:32 +0000
Manifest this update: Thu 08 Oct 2026 11:00:32 +0000
Manifest next update: Fri 09 Oct 2026 11:00:32 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: ydBrKo5sQ4OlnzJ80Ae+3ihUqIXX6dKmOZmSSvwa93M=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2c:07:60:67:42:53:91:e0:b6:fc:86:5d:8a:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 8 11:00:32 2026 GMT
Not After : Oct 9 11:00:32 2026 GMT
Subject: CN=ff444429f513be2c6a8ea70e9595e65dd794a6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cc:b7:79:f6:09:ec:8b:bc:5f:69:46:d1:8d:
3a:b5:6f:3c:1a:75:82:fb:4f:f5:98:d2:ba:f2:79:
16:28:7c:97:27:ee:aa:d9:fb:d0:15:6f:cc:fd:6b:
77:5f:c4:d1:c4:c1:34:3c:9a:23:81:30:e4:dc:a7:
9e:7d:04:fb:df:98:69:c3:94:53:9d:b0:fe:37:e0:
59:c0:32:97:40:f2:f1:28:29:74:f0:59:60:60:28:
f4:9a:3f:89:02:d1:3e:ca:92:f6:5b:20:02:d7:e8:
22:7e:df:21:44:cf:c0:48:fc:2c:d4:96:07:fd:21:
61:65:75:a7:f7:e7:8e:a6:7c:5d:df:33:cb:84:4f:
c8:62:7c:6b:93:2c:11:0d:bd:b4:31:ab:df:d9:c4:
45:5e:86:12:ae:8a:9b:b2:2d:ff:c8:83:ab:55:bf:
30:82:68:f3:17:0b:27:99:08:8d:aa:eb:f2:a7:f0:
be:d8:c3:1d:2b:a5:0a:e4:31:59:66:56:a8:2e:9d:
03:53:c8:b9:61:1c:fa:0c:e2:0e:65:dc:29:4a:95:
bd:29:ab:9b:0b:86:58:3a:8d:ab:e2:ff:a6:7e:91:
af:32:15:f5:81:ad:bd:96:77:d5:b9:0a:93:82:61:
40:bf:15:d7:ff:90:5e:6b:d7:5f:00:aa:1d:c2:a8:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:44:29:F5:13:BE:2C:6A:8E:A7:0E:95:95:E6:5D:D7:94:A6:B5
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:88:54:e5:e1:ec:c7:80:7d:87:0d:06:7d:a0:f5:1e:cb:6e:
ff:b1:b4:a5:ea:5f:87:51:44:e3:ba:ab:a0:d9:90:a9:63:c1:
fb:48:45:25:24:26:95:ee:a7:32:e3:70:27:74:d0:21:8d:a1:
55:4c:ae:5d:69:bc:71:66:1d:08:94:75:17:54:5c:34:5d:f7:
cf:f9:8d:ae:89:b9:e2:51:0a:c3:09:ef:1d:49:cd:f9:c9:39:
79:23:03:7c:a4:46:0d:41:71:4e:1c:5b:c2:65:6e:41:55:c8:
5f:e4:62:b3:49:dc:58:14:ab:d6:c8:c4:61:71:c6:2b:e8:2b:
50:3c:5f:0d:b1:f7:cf:94:c7:c0:1f:64:27:e6:26:a3:96:90:
ef:7e:f5:31:31:14:f8:78:69:ce:b1:ed:22:bf:4b:69:dd:79:
19:22:58:b0:8a:90:28:fd:dd:f6:48:aa:f2:76:4e:16:61:df:
ef:13:28:2c:18:9a:ed:ca:a7:e4:a7:48:a6:ec:e3:0b:0d:93:
09:ee:48:8a:a4:c6:27:a5:57:c3:2d:af:0a:3f:a8:d1:22:79:
45:8b:84:2c:be:c0:85:81:12:f3:ad:b8:5a:83:91:98:d9:e8:
8e:cd:7d:06:c8:15:c3:1a:f0:92:e9:4e:f8:9e:67:91:d2:44:
66:11:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:40:30 2026 by rpki-client