Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: syEiDLutoauxuPzImu4McFgOyS31Dbrt6OJ27pzVOms=
Subject key identifier: F3:5D:49:1B:8F:9B:D7:90:BC:5B:1C:48:0B:52:02:30:AC:BA:9D:C0
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A087C25F22F0ED23C249F7E286499F409C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A49
Signing time: Wed 09 Sep 2026 20:00:57 +0000
Manifest this update: Wed 09 Sep 2026 20:00:57 +0000
Manifest next update: Thu 10 Sep 2026 20:00:57 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: kA+7rSb2pbDAzpsCmgDZYdmIB9R3dDMs8XpiuZ4BS5g=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:c2:5f:22:f0:ed:23:c2:49:f7:e2:86:49:9f:40:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 9 20:00:57 2026 GMT
Not After : Sep 10 20:00:57 2026 GMT
Subject: CN=f35d491b8f9bd790bc5b1c480b520230acba9dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:47:3c:8c:32:a2:30:28:f9:a6:c0:bb:71:
4b:c8:3c:2a:e8:0e:3f:06:5b:af:c8:16:61:c6:c1:
23:69:62:0a:07:56:a8:d8:f6:0a:32:89:0f:2f:70:
7e:e7:f4:04:c2:b1:46:63:08:4e:61:09:eb:f4:20:
d4:41:26:f7:06:f7:5d:60:80:ac:f1:21:ab:00:c3:
6d:73:47:fd:44:4f:c4:49:61:ca:99:d6:07:19:c0:
b2:03:e7:0c:a2:b3:38:b8:30:36:2d:08:cd:b7:fd:
69:73:32:39:4d:5e:cc:f5:b7:91:77:bb:ed:c6:c9:
76:7e:ed:73:e5:91:10:53:2f:e3:19:5d:71:f7:2b:
05:fe:4c:75:6a:27:d7:bb:3d:57:b8:ef:66:7c:e0:
23:34:2f:53:ab:c2:df:42:c5:11:86:a6:c3:80:13:
39:20:4c:e3:ff:09:32:76:88:7f:46:16:8f:68:bc:
59:5f:5f:7f:8d:31:bd:cf:f8:f2:e7:65:7b:90:a6:
85:37:de:bf:4b:08:db:8c:ce:bc:23:a8:34:3c:82:
5e:6e:ff:ff:96:10:0e:3d:0d:86:6b:f9:ab:f0:41:
57:3f:e7:45:e3:c6:56:54:5a:d4:63:09:e0:72:7b:
11:a4:5f:99:36:4d:ea:e8:3f:e6:8f:cd:b3:81:81:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:49:1B:8F:9B:D7:90:BC:5B:1C:48:0B:52:02:30:AC:BA:9D:C0
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:06:ad:34:70:9f:65:7c:3e:10:7e:dc:be:5a:70:ce:0f:49:
c8:ec:d2:6f:7f:4e:7c:c3:be:57:bf:60:46:1d:28:e5:fc:e7:
db:81:da:99:48:f3:57:e2:b8:e4:9d:73:52:b1:62:20:6a:d2:
cc:f2:04:b2:12:60:b5:5b:92:b8:94:66:6b:44:9f:f3:56:dc:
f0:f7:e0:66:02:62:c0:df:e9:85:77:6c:4f:6b:9d:ca:66:9f:
16:ae:b4:99:02:5a:99:75:c0:3e:6d:37:ce:7d:26:d7:9a:0a:
64:53:ea:a7:07:08:60:67:84:b3:12:d2:26:60:f1:43:2a:8c:
14:14:dc:91:3d:7c:13:c0:06:4c:73:95:36:b1:53:9b:46:dc:
1a:01:45:ad:c5:18:0b:72:0a:b5:8b:9d:9b:6c:c7:53:a5:54:
39:1c:b7:c2:53:31:71:06:c8:46:88:fc:f3:af:c6:59:2a:51:
c5:62:b6:22:35:e6:3a:9e:bf:f7:2e:d4:9e:06:10:a1:43:07:
37:da:af:ca:d9:95:2f:1b:53:64:fe:03:63:dc:b7:ab:77:b8:
f4:81:5d:3c:c6:14:d0:23:b4:01:a3:73:47:55:02:c8:0b:86:
b2:b2:6d:be:0b:9d:4e:e5:3e:26:f8:b7:16:65:93:64:38:a8:
d5:62:eb:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCHwl8i8O0jwkn34oZJn0CcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwOTA5MjAwMDU3WhcNMjYwOTEwMjAwMDU3WjAzMTEwLwYDVQQD
EyhmMzVkNDkxYjhmOWJkNzkwYmM1YjFjNDgwYjUyMDIzMGFjYmE5ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobpHPIwyojAo+abAu3FLyDwq6A4/
BluvyBZhxsEjaWIKB1ao2PYKMokPL3B+5/QEwrFGYwhOYQnr9CDUQSb3BvddYICs
8SGrAMNtc0f9RE/ESWHKmdYHGcCyA+cMorM4uDA2LQjNt/1pczI5TV7M9beRd7vt
xsl2fu1z5ZEQUy/jGV1x9ysF/kx1aifXuz1XuO9mfOAjNC9Tq8LfQsURhqbDgBM5
IEzj/wkydoh/RhaPaLxZX19/jTG9z/jy52V7kKaFN96/SwjbjM68I6g0PIJebv//
lhAOPQ2Ga/mr8EFXP+dF48ZWVFrUYwngcnsRpF+ZNk3q6D/mj82zgYHaoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNdSRuPm9eQvFscSAtSAjCsup3AMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwatNHCf
ZXw+EH7cvlpwzg9JyOzSb39OfMO+V79gRh0o5fzn24HamUjzV+K45J1zUrFiIGrS
zPIEshJgtVuSuJRma0Sf81bc8PfgZgJiwN/phXdsT2udymafFq60mQJamXXAPm03
zn0m15oKZFPqpwcIYGeEsxLSJmDxQyqMFBTckT18E8AGTHOVNrFTm0bcGgFFrcUY
C3IKtYudm2zHU6VUORy3wlMxcQbIRoj886/GWSpRxWK2IjXmOp6/9y7UngYQoUMH
N9qvytmVLxtTZP4DY9y3q3e49IFdPMYU0CO0AaNzR1UCyAuGsrJtvgudTuU+Jvi3
FmWTZDio1WLrbQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 05:30:49 2026 by rpki-client