Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: MZCj6M6gEFWcgn+o+s9pGehZYKVSs7s4SEhAZrTYK+w=
Subject key identifier: 84:10:E9:69:60:AB:7B:73:70:4E:77:7B:17:AD:F3:15:03:DA:69:A4
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0E3D0FF9B3D15C4F9373E9975A716F474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 17:02:00 +0000
Manifest this update: Sun 27 Sep 2026 17:02:00 +0000
Manifest next update: Mon 28 Sep 2026 17:02:00 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: DzPMrrVv4vYImc+a0YZovpvlVKjRyRw8B3vZfryGzgw=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:ff:9b:3d:15:c4:f9:37:3e:99:75:a7:16:f4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 27 17:02:00 2026 GMT
Not After : Sep 28 17:02:00 2026 GMT
Subject: CN=8410e96960ab7b73704e777b17adf31503da69a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:76:10:87:1a:79:24:72:e2:bb:c4:15:c3:
d1:e9:bd:9e:7a:a6:9d:f4:58:dc:7c:90:f5:f4:c4:
35:49:b9:fc:c9:1a:a7:1f:bd:be:26:3a:e2:21:b7:
48:8c:56:a4:a9:12:e0:55:d6:f2:9a:c8:f1:d6:c3:
48:d8:7d:5a:a5:57:b1:28:a5:71:24:e5:e3:53:57:
25:a8:0f:0a:03:27:94:bd:a7:55:92:34:7b:55:32:
1c:fb:a8:06:94:45:23:0e:4a:16:85:91:73:e3:61:
e2:10:91:51:cf:7d:bb:20:11:a7:40:9f:6b:a8:88:
30:9b:01:a7:55:9d:a8:0d:6f:d8:3e:48:78:b5:8d:
f3:0e:b7:01:5d:63:0d:a3:77:0a:2e:74:4a:ca:15:
f2:ba:f4:dd:2b:4c:e1:88:11:ab:36:7a:d8:42:82:
ba:be:ea:f7:1b:f4:2b:b0:05:c6:01:c2:a1:54:d5:
9b:ee:13:72:e4:69:4d:3b:49:f6:5c:e2:e1:4a:6c:
71:03:e8:c8:98:a7:a2:aa:a4:6c:2d:ce:ae:cb:29:
74:63:ec:38:02:0f:02:65:48:2a:f8:28:cd:3e:6a:
00:5a:6c:e3:ed:1a:ed:20:16:60:17:d7:6e:5b:f7:
c8:13:cb:69:af:c1:4f:d7:df:4c:9e:e1:79:ae:f2:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:E9:69:60:AB:7B:73:70:4E:77:7B:17:AD:F3:15:03:DA:69:A4
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:01:e1:00:82:f9:58:ed:b1:1c:61:be:eb:e0:ea:0f:83:af:
8d:ee:78:10:58:85:9c:5e:9d:76:14:0e:e3:c7:f3:6d:d1:ab:
4f:ee:54:28:d9:55:2f:5f:eb:28:2c:2f:93:bf:e4:08:bc:92:
ef:c0:e6:99:be:a9:10:26:5c:7d:39:a9:3b:0f:f4:fc:18:11:
90:59:c7:df:7d:7f:d6:2e:ad:d4:a5:ac:3d:67:87:5b:16:f6:
b6:99:e0:8e:8e:17:85:4b:a6:ce:e2:92:d5:4d:42:18:32:5f:
f2:b2:b7:41:c4:02:ea:38:30:e0:d7:cc:4d:3e:1e:ef:2b:5e:
e5:b6:f1:df:71:d6:5c:8f:97:51:6b:78:51:6e:11:26:5c:97:
12:f4:e2:f6:df:97:e3:05:3a:b9:7d:b3:98:b8:0b:3a:8a:28:
ee:0a:4d:b2:74:51:23:9f:c4:b2:9c:7c:67:dd:fc:35:04:85:
d2:81:ff:3b:21:a8:8c:c2:45:e2:35:e9:05:dd:8a:78:88:03:
66:7a:6f:b9:45:a1:3c:27:f6:3f:06:a9:56:16:86:9f:70:ae:
0c:5e:5d:b3:bb:22:05:b2:b7:dd:18:41:c7:0a:a1:94:ce:ca:
b2:d0:ca:28:a8:e0:fa:d8:16:b4:4d:c7:fc:9d:da:03:de:cd:
76:32:e5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:01:24 2026 by rpki-client