Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: MFb/eGCBoW+LQ/j80EAmUXGWjvns2S/TmvY2R7P/G9k=
Subject key identifier: E0:56:A8:44:0A:EA:C5:A7:E9:96:3A:B4:8D:D7:D7:35:07:63:29:53
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A08D8D4ED7D300FDB40791845F1D1D9CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 23:00:43 +0000
Manifest this update: Thu 10 Sep 2026 23:00:43 +0000
Manifest next update: Fri 11 Sep 2026 23:00:43 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: lo1aU+JMq+GyeBj0Ez2z/UEEXOMZfeCIgabYGiNx7zA=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:4e:d7:d3:00:fd:b4:07:91:84:5f:1d:1d:9c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 10 23:00:43 2026 GMT
Not After : Sep 11 23:00:43 2026 GMT
Subject: CN=e056a8440aeac5a7e9963ab48dd7d73507632953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:d3:a2:b1:74:e7:31:62:d8:0d:98:86:5c:
6f:08:f8:83:d8:c1:85:82:d2:89:ea:a6:f7:29:39:
82:4d:47:c9:25:0d:ac:fe:49:35:05:2e:0e:8b:83:
09:57:2b:d5:c0:96:d4:a3:93:88:b3:ab:7d:a1:8d:
e4:f3:46:d4:2c:08:f5:43:66:9a:5d:1c:42:d5:ab:
94:20:63:84:34:98:91:c9:1d:91:32:04:78:70:dd:
2c:3b:1c:5c:fa:de:34:6e:81:9a:09:61:66:71:5d:
70:2f:89:74:31:62:79:f6:8b:8e:07:1a:66:82:e0:
8c:09:8e:67:99:51:ad:7a:d5:04:31:8b:7d:71:6c:
84:2c:5e:9c:e2:ba:24:f7:e0:db:7a:04:86:f7:45:
73:86:13:a3:8c:ac:2b:90:27:0f:aa:99:dd:6d:90:
53:aa:ed:2b:c9:e2:f1:b9:1b:81:71:db:1b:d6:9f:
97:a0:e6:5b:4f:1f:53:c4:6d:46:80:09:b9:e9:45:
c5:31:e1:4d:99:4e:94:6d:07:23:e1:d0:54:5f:97:
b6:99:0a:1d:cc:90:a8:9f:af:db:d4:5a:63:0d:7a:
8e:07:21:a6:df:ba:f3:01:59:38:31:93:7d:81:55:
10:34:a5:1d:5c:dd:3f:a0:4a:1f:91:59:ed:6f:ec:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:A8:44:0A:EA:C5:A7:E9:96:3A:B4:8D:D7:D7:35:07:63:29:53
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a3:52:da:81:15:21:f2:86:88:3b:41:6d:ed:f6:d1:7d:3f:
e0:1e:21:78:b5:85:af:8e:d6:31:9c:fd:33:23:c8:43:27:08:
d6:a1:f1:a2:ef:ff:06:49:42:b6:cf:ca:f2:0e:ec:c6:82:ff:
6a:f2:a1:8e:bb:d4:1c:dd:68:58:ef:87:69:d4:70:79:41:4f:
eb:79:66:ed:e1:23:fe:01:c1:95:04:86:5a:9d:17:f5:f7:68:
ff:f2:f5:d0:cb:a7:c3:57:76:cb:11:fa:0b:1e:f3:b2:38:29:
c6:9b:0d:26:f0:5e:a3:97:e5:f7:c2:f7:49:f6:00:1e:37:0f:
0f:26:77:37:c1:3d:84:94:01:cc:e5:53:53:d5:9b:2f:86:91:
dc:d3:20:7f:fd:83:f4:a6:81:51:5c:34:5b:21:9b:e7:fb:1f:
a5:0b:04:79:a5:0d:4a:23:2d:f5:28:38:30:7b:ea:7e:b1:15:
52:b3:6c:4b:24:ed:e9:46:68:3d:04:52:80:5c:e8:f7:3c:7a:
ee:a2:a8:56:41:1d:4e:e2:25:be:e9:65:a7:61:20:5b:61:0f:
28:32:36:5a:5a:c0:bc:02:cd:5e:03:a1:9c:be:46:27:c8:44:
96:82:c5:e2:9f:99:37:b5:e0:a9:8c:65:41:91:43:cd:8d:dd:
29:d7:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:06:05 2026 by rpki-client