Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: jdC+clm7eoxxHeKnEkdntwjEA7Dq4/uk3p5g3RFVJtA=
Subject key identifier: 20:EF:86:49:84:FC:F0:E0:E4:09:5A:EF:A1:AD:66:13:3B:5F:E2:AD
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A03E5FA8700346441570694E7007C6C76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 14:00:51 +0000
Manifest this update: Wed 26 Aug 2026 14:00:51 +0000
Manifest next update: Thu 27 Aug 2026 14:00:51 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: zvsr53gzIHXO9e/I3Cs5Vu8dtJ1m//HZalr4mxRdwZ0=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:a8:70:03:46:44:15:70:69:4e:70:07:c6:c7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 26 14:00:51 2026 GMT
Not After : Aug 27 14:00:51 2026 GMT
Subject: CN=20ef864984fcf0e0e4095aefa1ad66133b5fe2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:7d:c3:d7:6e:6e:3c:db:6c:dd:4c:bd:bf:
e1:a8:98:3b:05:0b:b8:6e:01:a0:6f:dc:f9:05:d3:
0d:c5:76:e2:17:99:74:91:57:e9:cf:3a:37:4b:0e:
4a:b9:6f:9e:68:f5:6a:e5:96:ef:a9:08:f5:68:cc:
d9:be:42:81:63:36:55:ae:27:d7:b1:96:ec:6d:ac:
95:6a:26:c3:c3:43:87:90:ee:47:88:d2:4c:8b:fc:
3f:b7:98:d2:3e:ed:23:ef:f1:dc:83:25:04:c9:f4:
0e:8b:47:3a:81:07:46:90:9a:0a:0a:ae:44:54:9e:
67:96:1b:10:70:5b:1e:f5:66:78:8b:e5:9b:bb:6a:
d1:71:d9:7e:51:c7:5f:19:62:60:70:f8:4f:ca:5e:
08:53:9a:4e:56:89:31:11:77:48:0f:96:00:0f:b5:
b7:df:b9:a1:64:af:f4:82:f2:88:fd:b8:e3:25:67:
c7:a8:90:9e:77:85:1b:1e:91:20:f7:78:ca:4b:b3:
89:61:bb:66:d3:1c:48:b7:26:02:8e:7b:b8:43:38:
70:e3:c1:d7:e7:4c:46:a4:53:12:cb:40:a6:74:1b:
9f:9a:72:05:fb:0d:81:0a:23:05:bb:69:f7:98:43:
9d:58:e6:12:19:1e:c3:92:02:c8:bc:8f:0d:d9:4a:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EF:86:49:84:FC:F0:E0:E4:09:5A:EF:A1:AD:66:13:3B:5F:E2:AD
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:5b:4c:b7:72:b6:4b:c6:1e:d6:71:f4:52:b6:1c:d4:ff:
64:1e:02:a7:59:14:0f:63:59:ce:eb:7c:1c:2f:41:e9:d1:d9:
59:56:88:4e:48:d1:22:d7:12:b9:8a:f8:c1:73:b4:3d:8a:09:
0a:4d:80:6d:9e:df:1d:6c:d0:7e:f4:e2:fb:a4:dc:e9:77:12:
bb:68:0a:49:f6:a6:66:e4:44:28:85:6a:97:ac:d3:b1:68:48:
9b:c0:3a:78:70:80:e3:12:21:5f:61:3c:52:7a:b0:c0:bc:2b:
76:0e:4b:23:9b:46:8a:1d:23:f7:d2:b9:b6:88:a3:ce:eb:19:
6c:98:29:71:59:2f:45:54:86:f9:21:4a:fb:0f:92:b8:e3:0d:
1f:12:84:ab:87:dc:2e:3e:e3:4c:3a:09:43:a6:51:22:c0:49:
36:8e:90:70:77:a2:4e:58:92:f3:a9:44:1c:37:d9:39:cd:dc:
1f:33:24:6f:c7:13:41:ff:2f:c1:0d:a0:48:da:bf:3e:51:11:
9a:de:f7:ca:a5:ad:f4:b3:71:9b:c6:05:37:d1:97:61:f9:60:
5d:17:cc:14:ee:a8:27:c5:22:13:5d:06:fb:3e:51:5c:ba:94:
cf:10:5e:1c:f2:d3:19:e9:33:4b:0e:bc:90:ac:fb:e5:b4:90:
6a:b3:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:06:29 2026 by rpki-client