Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: Sz7nUoW+WbHxjbwla2kJuBuukFuv/MMDpYE3536JMC0=
Subject key identifier: EB:37:3A:19:EB:30:16:21:2E:8D:0D:71:18:B8:58:BA:22:37:98:E4
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FC335D3FAC36EC9DD8EA69F434BF0BD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19E3
Signing time: Sun 02 Aug 2026 16:01:52 +0000
Manifest this update: Sun 02 Aug 2026 16:01:52 +0000
Manifest next update: Mon 03 Aug 2026 16:01:52 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: HknHsnBgrpb4hp+GAhqvFOlRj73YwKofjHrht+3Tllk=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:35:d3:fa:c3:6e:c9:dd:8e:a6:9f:43:4b:f0:bd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 2 16:01:52 2026 GMT
Not After : Aug 3 16:01:52 2026 GMT
Subject: CN=eb373a19eb3016212e8d0d7118b858ba223798e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:83:f8:73:9e:6b:15:c6:5a:e7:82:83:5a:
4f:c2:98:55:91:dc:93:ee:be:08:46:b1:89:bb:55:
a2:ca:79:b8:74:29:35:18:68:63:ea:25:d9:ef:1d:
bb:31:29:b7:19:68:82:4d:1d:9a:e6:eb:a9:94:30:
b2:cd:12:a8:65:c7:07:da:06:a8:a8:92:cb:5f:b6:
50:42:dd:57:2f:52:25:e1:fe:bc:05:66:fb:73:4d:
94:bc:69:a6:00:1a:52:70:19:e5:5c:ae:e7:bc:7f:
ca:41:3c:d9:66:98:02:8d:9f:14:a7:44:b9:8c:35:
bf:e1:6e:28:d7:2e:11:98:c8:d3:d5:96:cf:b5:a5:
2e:de:f7:e7:5c:0e:5a:09:bd:a3:f1:1a:2b:d3:6a:
a9:bf:8d:d6:f2:31:d8:1d:70:67:50:05:25:fc:85:
1b:cc:68:ac:b9:f6:48:54:9b:fb:1f:7a:a9:6b:52:
03:36:22:eb:d5:a3:35:e6:ef:6f:67:ff:88:ae:be:
2e:c8:db:2b:09:9d:a3:1e:c8:15:e5:ff:e4:dc:0c:
cb:ed:54:89:47:ea:5d:64:a7:d9:c2:10:4b:55:75:
4f:4e:e0:2a:14:a2:ce:e0:c8:7d:b1:27:29:9b:b9:
68:09:01:bc:2e:b1:2d:4c:ce:51:4c:95:38:ea:ad:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:37:3A:19:EB:30:16:21:2E:8D:0D:71:18:B8:58:BA:22:37:98:E4
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:94:25:36:67:1a:6e:68:41:d3:d0:36:64:ea:e8:29:fa:54:
99:df:ca:1c:81:ef:9a:b3:c4:52:a9:21:cb:74:3c:67:63:f9:
11:ca:13:05:57:f8:d7:9d:5b:96:36:93:50:3e:7f:29:e4:a6:
9d:58:93:9b:d3:e7:8c:5c:59:42:58:1b:86:84:0b:ed:00:d2:
99:b3:db:37:55:de:74:88:bf:6a:75:99:42:17:7a:cb:e1:09:
a4:3c:5d:7d:ff:87:fc:9a:8e:be:ab:97:26:67:6b:3b:ae:21:
3c:fa:64:5f:b7:d3:68:c9:29:f2:00:33:d1:30:6c:45:ee:1e:
50:1b:3f:2c:79:a3:ae:c7:94:cc:fb:94:5b:96:25:45:9e:84:
48:6f:eb:d2:46:a0:94:8a:7f:34:e9:23:27:1b:d6:f4:08:6e:
86:01:41:b6:d7:3a:e1:07:ab:51:df:7b:f7:c3:c7:f0:2c:2f:
7d:d2:c2:36:9a:19:b2:73:e1:f5:21:9a:50:77:0a:43:60:a7:
73:e1:c3:92:d9:49:41:0b:dd:5f:21:ca:90:95:87:da:33:43:
2e:64:02:f4:25:c6:f9:96:0c:78:a9:be:4b:b1:ed:d1:6f:f9:
88:dc:10:77:e5:2d:f8:2e:01:bd:23:90:22:b7:ad:83:42:f0:
d5:96:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:21:10 2026 by rpki-client