Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: v2eiD27wffNejD2L5jK+KZ2Axuy83UjjKVA3ms9ZlLw=
Subject key identifier: BC:AD:A1:E8:53:F0:12:AD:E4:40:C2:64:17:52:22:40:D0:3E:EC:26
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019F89453320EB6AE89E3521A1C4F6831BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19C5
Signing time: Wed 22 Jul 2026 10:00:41 +0000
Manifest this update: Wed 22 Jul 2026 10:00:41 +0000
Manifest next update: Thu 23 Jul 2026 10:00:41 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: QJiaueEat5tLCYq1zu4V83oA0wN7xzRf/oo+c4Vsbf0=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:45:33:20:eb:6a:e8:9e:35:21:a1:c4:f6:83:1b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 22 10:00:41 2026 GMT
Not After : Jul 23 10:00:41 2026 GMT
Subject: CN=bcada1e853f012ade440c26417522240d03eec26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:2f:91:1f:d0:16:da:10:33:30:ad:9f:8b:
50:27:7d:1f:4d:ff:90:6d:44:17:48:57:90:1a:59:
3d:9f:63:d2:81:5c:39:81:b2:a3:03:8d:83:f0:e0:
7b:20:d1:3d:cb:8f:16:f9:10:f2:9f:f8:b6:db:86:
47:31:db:fa:7b:1d:74:41:1f:5e:e2:88:8f:ee:07:
b2:ae:c3:2f:1b:ef:f4:60:70:73:2b:76:4a:5f:de:
ce:ad:42:bc:55:cd:c3:21:93:f4:1e:b3:0e:ea:1f:
8b:94:62:e1:20:49:dd:95:1d:6a:a9:84:72:81:62:
1f:d0:1b:47:7a:4f:58:8b:b4:12:81:3d:66:4f:e3:
04:7c:1a:41:dc:07:ed:6f:4a:a8:a6:2b:cc:ed:99:
e4:cb:10:2e:d7:cf:59:08:4b:91:fb:39:8a:00:e5:
0b:1c:f2:58:b2:9f:82:de:9d:f9:79:8a:1c:6e:d4:
6b:b2:08:8a:a7:ca:7f:fa:2f:0d:ca:04:95:25:82:
ee:28:92:2a:61:83:bc:2c:79:c8:1d:e8:c2:eb:b0:
26:b2:84:05:33:4a:b4:cd:db:a4:0e:6f:c1:79:c6:
e6:88:85:40:52:69:5b:f2:c8:2c:59:89:e3:95:0f:
48:cd:de:9e:99:dd:e8:b1:e8:e3:87:b9:83:d3:a5:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AD:A1:E8:53:F0:12:AD:E4:40:C2:64:17:52:22:40:D0:3E:EC:26
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:47:b9:18:f6:13:ee:fb:91:7e:b9:25:06:44:a1:09:dc:c5:
0c:46:be:94:81:fc:27:a2:ba:61:bb:5f:14:db:e8:65:64:ba:
3a:47:6f:9e:13:92:28:eb:4a:d8:ec:ef:fc:27:aa:81:be:ff:
6e:93:32:4c:05:9f:20:6e:1b:13:8f:a9:ba:ac:e3:be:1f:cb:
d5:e3:9c:48:b7:11:52:f2:d0:6e:4e:0b:fc:80:fa:cd:69:31:
f2:88:01:45:5d:34:54:42:28:ff:12:5c:70:e7:11:ce:b7:e1:
88:ed:7d:f9:31:6c:d6:df:9c:b3:26:b8:b6:6f:a5:09:83:9d:
9c:06:4a:b8:a7:da:ff:d9:6c:31:c3:cd:53:bc:74:31:ad:f1:
de:9b:ca:61:7c:9d:f1:38:f9:e5:57:ec:5c:95:67:25:4d:c6:
cc:55:02:fd:d7:a4:7c:d3:7c:23:08:53:6f:19:53:e1:70:cc:
3d:fd:09:65:c5:fd:18:50:39:c1:ec:cb:18:bb:67:5a:0b:fa:
97:f5:15:1b:7e:fd:e7:e8:54:2d:4f:61:07:fd:1d:2d:5d:c3:
47:ab:c6:03:2f:82:34:d2:d0:90:7a:6a:62:e5:c5:92:12:a8:
2e:08:b6:05:9a:bc:03:60:c5:99:49:29:4b:cc:e4:15:88:25:
3a:b7:a5:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+JRTMg62ronjUhocT2gxvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwNzIyMTAwMDQxWhcNMjYwNzIzMTAwMDQxWjAzMTEwLwYDVQQD
EyhiY2FkYTFlODUzZjAxMmFkZTQ0MGMyNjQxNzUyMjI0MGQwM2VlYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAIvkR/QFtoQMzCtn4tQJ30fTf+Q
bUQXSFeQGlk9n2PSgVw5gbKjA42D8OB7INE9y48W+RDyn/i224ZHMdv6ex10QR9e
4oiP7geyrsMvG+/0YHBzK3ZKX97OrUK8Vc3DIZP0HrMO6h+LlGLhIEndlR1qqYRy
gWIf0BtHek9Yi7QSgT1mT+MEfBpB3Aftb0qopivM7ZnkyxAu189ZCEuR+zmKAOUL
HPJYsp+C3p35eYocbtRrsgiKp8p/+i8NygSVJYLuKJIqYYO8LHnIHejC67AmsoQF
M0q0zdukDm/BecbmiIVAUmlb8sgsWYnjlQ9Izd6emd3osejjh7mD06VWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLytoehT8BKt5EDCZBdSIkDQPuwmMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0e5GPYT
7vuRfrklBkShCdzFDEa+lIH8J6K6YbtfFNvoZWS6OkdvnhOSKOtK2Ozv/Ceqgb7/
bpMyTAWfIG4bE4+puqzjvh/L1eOcSLcRUvLQbk4L/ID6zWkx8ogBRV00VEIo/xJc
cOcRzrfhiO19+TFs1t+csya4tm+lCYOdnAZKuKfa/9lsMcPNU7x0Ma3x3pvKYXyd
8Tj55VfsXJVnJU3GzFUC/dekfNN8IwhTbxlT4XDMPf0JZcX9GFA5wezLGLtnWgv6
l/UVG3795+hULU9hB/0dLV3DR6vGAy+CNNLQkHpqYuXFkhKoLgi2BZq8A2DFmUkp
S8zkFYglOrelyA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 12:35:30 2026 by rpki-client