Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: bkyxYQfr+1CKw7pXyUkPBj/nGIEGP8ikA6kb7sLkTQo=
Subject key identifier: 53:7D:DD:11:40:64:7D:52:B1:4F:2E:17:36:CB:D3:16:74:AD:BC:F5
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0AFAB8A54385F0A29F176E6A04F4DC4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A5E
Signing time: Thu 17 Sep 2026 14:00:49 +0000
Manifest this update: Thu 17 Sep 2026 14:00:49 +0000
Manifest next update: Fri 18 Sep 2026 14:00:49 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: TUkyfi47qlB3d9Hejb0P3nXOX4zuAU95PYXpPPXuDmQ=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:ab:8a:54:38:5f:0a:29:f1:76:e6:a0:4f:4d:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 17 14:00:49 2026 GMT
Not After : Sep 18 14:00:49 2026 GMT
Subject: CN=537ddd1140647d52b14f2e1736cbd31674adbcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:4b:ad:63:be:87:79:1e:aa:8a:a0:89:bd:
c9:98:7d:c3:b9:ea:e7:96:0f:86:a2:f6:ba:87:e5:
02:15:8f:90:f4:ed:12:1f:46:7b:ce:a6:23:13:80:
a6:68:a1:0b:8a:86:f7:e3:7e:b1:29:fc:1c:9a:cd:
2e:5d:94:54:a9:c2:d4:ca:96:e6:e8:51:72:56:31:
9c:f5:32:1c:c9:fb:e4:2b:46:d2:98:fe:9e:0e:69:
81:d6:70:79:98:2c:5f:71:7a:11:f6:18:c7:e3:36:
4d:26:26:2a:93:41:99:50:87:18:9c:93:6c:2b:43:
c9:7d:9f:ce:28:1b:6d:1d:1c:b2:a3:10:bd:9f:af:
3b:14:de:c6:af:9d:cd:eb:ea:f2:41:2f:04:aa:39:
01:28:ea:65:4b:40:86:3c:5e:09:90:c2:a6:7c:b0:
c6:b4:0a:ef:f4:1a:f5:ac:08:6d:ef:b5:d3:08:1f:
a9:3a:d0:ad:f9:52:38:b0:9f:24:21:c1:97:ff:db:
11:89:e2:57:f1:b1:3f:a0:91:26:25:47:10:ce:f0:
25:88:c4:c5:2a:45:7d:6b:c3:3a:56:9d:1b:63:d2:
b7:0b:26:34:f6:2c:50:66:57:a5:8b:66:58:1e:99:
06:1f:29:ea:b1:1b:b8:9a:81:af:2a:c6:59:05:4b:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:DD:11:40:64:7D:52:B1:4F:2E:17:36:CB:D3:16:74:AD:BC:F5
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0e:8c:a3:f4:71:88:24:3c:d6:2a:3d:ef:13:3b:f3:81:ae:
a4:47:ad:40:cf:b3:3b:e9:b7:7d:fc:24:3c:55:40:f3:d1:aa:
71:75:7b:ed:71:06:61:8a:7b:f1:d0:81:e4:18:8e:b8:f0:b3:
ad:f0:e9:27:74:f3:62:96:ca:4d:97:b3:0f:40:6c:f1:37:ca:
3d:46:1e:bf:8b:34:36:ec:f0:15:f4:72:aa:26:af:94:26:80:
0c:4a:55:d9:c9:5d:1b:32:ee:93:49:08:21:d5:17:34:81:5e:
d6:a1:2b:91:85:3f:6f:76:9e:23:c0:a1:df:b0:10:aa:42:bc:
39:86:b3:5d:c7:e8:68:b3:ba:91:41:2d:72:89:73:77:27:40:
48:91:86:23:74:dd:0b:cc:fe:74:d5:94:aa:b9:02:b9:4d:36:
97:e5:b5:cd:3b:f4:91:87:19:89:76:54:94:3a:d0:d3:c4:29:
b7:61:90:bb:2e:3e:65:c3:93:71:c0:19:27:fc:8f:66:b3:a6:
99:fc:20:e4:9e:83:3a:12:66:1b:fe:63:48:02:a9:ac:00:18:
4b:8e:7e:1a:76:09:a8:57:5c:4e:93:d2:da:21:e4:31:9a:fa:
3a:25:de:fd:cd:34:d7:0e:1d:1d:26:3e:2b:97:02:46:35:cd:
3f:fe:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:34:49 2026 by rpki-client