Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: eoUX4FOKmgFlRUWIiIelhs1N4Mn9HJKXSeffheGoZCw=
Subject key identifier: 93:9F:B9:1A:C5:F0:EF:C3:20:8A:F3:8B:76:F0:C3:01:20:0B:D0:12
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A179CD1DBF65D07D8AA465E7F552100928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1AC8
Signing time: Mon 26 Oct 2026 20:00:47 +0000
Manifest this update: Mon 26 Oct 2026 20:00:47 +0000
Manifest next update: Tue 27 Oct 2026 20:00:47 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: V03UWLuQSlhsexMksI4enHW4jdB8LwqIToX8Bjb/LvA=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cd:1d:bf:65:d0:7d:8a:a4:65:e7:f5:52:10:09:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 26 20:00:47 2026 GMT
Not After : Oct 27 20:00:47 2026 GMT
Subject: CN=939fb91ac5f0efc3208af38b76f0c301200bd012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:7d:ae:9e:65:91:67:28:42:3c:b9:c6:c5:
48:c8:ae:a2:29:b4:06:d8:ec:55:9c:3e:71:5f:72:
d9:32:b5:ca:e1:05:6c:b3:35:96:f6:23:fb:01:75:
85:be:4c:9e:47:54:b7:d5:a7:72:9d:d2:5b:fc:31:
0a:fe:6a:b9:b9:da:fd:d2:ae:aa:34:fd:b0:9c:59:
01:41:af:d1:78:cf:c3:20:72:a2:d4:01:47:15:2c:
1e:3d:d6:27:25:4e:ff:88:02:a4:b6:57:62:9b:ab:
6e:71:28:66:a1:b9:e1:06:89:a0:16:fc:e6:b3:04:
a2:0d:b5:ca:f2:18:80:62:2b:22:ec:8f:1f:02:19:
0b:ff:c1:f0:28:06:8f:39:d5:0d:f1:56:ef:1e:67:
c4:87:19:90:41:b2:a0:4e:71:fd:b7:ac:5e:eb:64:
20:03:52:ce:fd:5d:ce:9e:ca:8f:3a:6b:49:3f:b8:
1b:0a:fb:54:f6:f6:e8:6d:5c:97:93:6a:97:c4:13:
17:31:f5:57:cb:88:fd:d4:d7:26:ef:ad:6f:f8:a7:
85:1b:e9:a9:e7:a9:f4:11:f6:c0:9e:71:67:80:c5:
83:15:c7:76:95:5c:8b:28:dd:17:ca:0e:df:42:52:
fd:66:2f:77:38:05:aa:8d:6d:49:94:19:45:02:f7:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9F:B9:1A:C5:F0:EF:C3:20:8A:F3:8B:76:F0:C3:01:20:0B:D0:12
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f6:57:cb:df:6d:e8:a8:4b:29:62:7f:8e:f4:eb:ba:b7:fd:
50:59:22:82:62:6e:dd:10:03:5c:8a:38:9e:91:85:b4:38:a2:
a7:79:e9:b5:72:89:ea:35:d3:d8:e0:7f:09:c3:99:e4:a4:3d:
66:ef:f7:40:17:c5:34:ab:64:b2:74:3e:35:cd:76:69:7d:9a:
60:64:f7:94:9d:59:21:7c:fa:32:fe:76:4e:d2:64:09:80:23:
31:68:d1:57:86:9b:7b:69:be:80:a2:d1:60:0e:c9:06:cf:59:
c9:98:66:ff:17:63:63:2e:0b:49:9c:84:d8:b9:4b:e7:e3:12:
cb:1c:be:26:a4:db:80:bd:e9:ff:1e:78:4f:66:57:8f:b1:93:
e3:80:02:38:5f:99:ba:95:ce:4e:64:c5:d6:49:7d:c0:1c:16:
15:aa:8b:9e:16:fd:6d:01:22:11:d3:60:6b:7a:8d:af:4e:44:
b7:10:f1:c2:96:6f:b4:38:7e:75:58:a8:95:d2:a3:8a:a4:2e:
42:ff:94:78:d0:fd:48:a3:b1:88:84:53:0f:02:ec:ab:0c:20:
51:d7:9f:89:85:fa:f9:71:ec:32:b0:cb:a3:39:50:57:dc:68:
ea:ad:66:7a:fd:f1:1c:4e:33:0a:e6:b5:3d:e0:14:c9:c3:bf:
a6:f8:53:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5zR2/ZdB9iqRl5/VSEAkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYxMDI2MjAwMDQ3WhcNMjYxMDI3MjAwMDQ3WjAzMTEwLwYDVQQD
Eyg5MzlmYjkxYWM1ZjBlZmMzMjA4YWYzOGI3NmYwYzMwMTIwMGJkMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoix9rp5lkWcoQjy5xsVIyK6iKbQG
2OxVnD5xX3LZMrXK4QVsszWW9iP7AXWFvkyeR1S31adyndJb/DEK/mq5udr90q6q
NP2wnFkBQa/ReM/DIHKi1AFHFSwePdYnJU7/iAKktldim6tucShmobnhBomgFvzm
swSiDbXK8hiAYisi7I8fAhkL/8HwKAaPOdUN8VbvHmfEhxmQQbKgTnH9t6xe62Qg
A1LO/V3OnsqPOmtJP7gbCvtU9vbobVyXk2qXxBMXMfVXy4j91Ncm761v+KeFG+mp
56n0EfbAnnFngMWDFcd2lVyLKN0Xyg7fQlL9Zi93OAWqjW1JlBlFAveVXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOfuRrF8O/DIIrzi3bwwwEgC9ASMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPZXy99t
6KhLKWJ/jvTrurf9UFkigmJu3RADXIo4npGFtDiip3nptXKJ6jXT2OB/CcOZ5KQ9
Zu/3QBfFNKtksnQ+Nc12aX2aYGT3lJ1ZIXz6Mv52TtJkCYAjMWjRV4abe2m+gKLR
YA7JBs9ZyZhm/xdjYy4LSZyE2LlL5+MSyxy+JqTbgL3p/x54T2ZXj7GT44ACOF+Z
upXOTmTF1kl9wBwWFaqLnhb9bQEiEdNga3qNr05EtxDxwpZvtDh+dVioldKjiqQu
Qv+UeND9SKOxiIRTDwLsqwwgUdefiYX6+XHsMrDLozlQV9xo6q1mev3xHE4zCua1
PeAUycO/pvhTZw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:12:34 2026 by rpki-client