Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: GCbbw4Ysc5dvnCzZaUDSci8tagxQ7+tf29j3CwuTbQE=
Subject key identifier: C8:59:F4:27:C3:2B:6B:2E:A7:CD:A7:E9:1F:77:28:77:1D:95:44:1B
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A18D1D531DE67006A2CD071CE0CD5FC4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1AD2
Signing time: Fri 30 Oct 2026 14:01:11 +0000
Manifest this update: Fri 30 Oct 2026 14:01:11 +0000
Manifest next update: Sat 31 Oct 2026 14:01:11 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: rbwPUrNhCj9yazu9DD/clyMjp/JqGFg9Hqy+zxGyL4M=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1d:53:1d:e6:70:06:a2:cd:07:1c:e0:cd:5f:c4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 30 14:01:11 2026 GMT
Not After : Oct 31 14:01:11 2026 GMT
Subject: CN=c859f427c32b6b2ea7cda7e91f7728771d95441b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:91:e8:e0:91:11:97:63:f2:3f:2a:ad:38:
44:96:29:b0:39:4a:69:4a:2d:38:93:ec:35:be:71:
f4:c0:49:85:ee:56:d7:65:bc:eb:7c:9e:1e:7a:4f:
5b:db:29:f0:07:a4:c8:2c:8e:9c:91:5f:ee:79:a5:
42:e5:11:1e:88:dd:da:ce:4d:27:26:de:4c:b4:bb:
c1:ed:a6:90:6f:45:55:0f:df:fa:d3:7b:50:49:eb:
dd:b1:e7:99:68:cf:d0:73:b1:07:fc:db:10:ee:3c:
fa:ed:1b:d0:5e:f4:3d:73:6b:fb:25:45:98:26:c6:
f0:41:0f:28:3e:f2:ac:ee:51:63:e9:3f:e6:83:64:
e9:d9:1c:0d:ff:03:f2:36:88:e5:ce:c3:dd:9e:2d:
70:df:f4:c2:3e:2f:39:4c:55:99:6f:ff:d1:5b:72:
1b:93:f7:0c:9b:2a:25:2f:8b:58:73:5c:70:9e:1a:
25:f2:55:d1:80:a3:29:0d:bb:92:91:5e:dc:75:0a:
46:25:a1:1a:68:7a:8a:4f:26:8f:8f:52:5f:8e:71:
fa:af:ed:a1:b9:7a:80:a4:cf:92:8c:c9:26:1f:26:
d7:fc:e4:62:45:14:7a:a5:62:7e:c7:82:d4:f8:2d:
d7:9e:cd:df:15:d2:cb:73:f9:04:88:ff:c7:c2:0a:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:F4:27:C3:2B:6B:2E:A7:CD:A7:E9:1F:77:28:77:1D:95:44:1B
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:00:06:0a:40:8d:68:82:3c:71:f0:17:7c:58:bd:5e:ec:5a:
48:14:b2:2e:ce:9f:39:ab:77:ce:b8:63:44:01:1e:49:f4:b4:
aa:f5:15:f9:14:3f:cb:e4:63:31:65:f4:ce:f4:0c:5f:f9:5a:
cd:ba:c0:d5:09:0b:66:cd:a7:9a:ca:44:bd:0c:7a:cb:f9:b4:
1a:3b:05:33:ee:65:25:0d:9c:3f:2b:7f:4e:75:70:8f:46:59:
83:2e:02:dc:fd:ba:c1:6f:ae:26:8c:ad:b4:0d:bc:db:2b:72:
bf:d6:c4:47:e3:b6:ef:89:e7:d9:06:d5:f1:8f:bf:22:0e:da:
e7:d5:75:8e:40:90:3a:35:d8:16:25:12:cf:1d:26:3b:cd:db:
c1:96:d3:55:b5:fc:e4:f0:67:83:c4:ac:dd:8d:29:f7:c1:77:
64:de:ee:35:35:37:de:b2:02:6f:52:57:b2:10:ab:f6:6d:9e:
09:33:72:b1:8d:95:f1:64:ff:31:13:82:07:2c:c8:54:81:f7:
03:2c:08:fa:0f:fd:ea:95:2a:fe:74:c2:c7:5d:71:b5:bc:dd:
30:f4:33:43:d7:ac:4f:b4:32:9f:ab:05:22:b7:2f:ef:dd:b6:
92:bf:91:d7:fd:76:ff:ee:97:8f:aa:f1:e9:11:d1:bc:78:d5:
5f:15:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 22:33:03 2026 by rpki-client