Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: r3+9C1GXuKBj1Vn9G1Bu6anTZY7NUwD7/4FvdBBChj4=
Subject key identifier: F4:2A:8C:AB:E4:EF:3C:06:DD:44:5A:F8:C1:C8:CC:FA:FF:BA:9B:AC
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019F9E839231D88C95C33603011BA0E66FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 13:00:50 +0000
Manifest this update: Sun 26 Jul 2026 13:00:50 +0000
Manifest next update: Mon 27 Jul 2026 13:00:50 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: FRp+ttl2miP9syzKTaKFQPsSAmdRKeuw70KufGf8Als=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:83:92:31:d8:8c:95:c3:36:03:01:1b:a0:e6:6f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 26 13:00:50 2026 GMT
Not After : Jul 27 13:00:50 2026 GMT
Subject: CN=f42a8cabe4ef3c06dd445af8c1c8ccfaffba9bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:5c:56:3b:97:02:e5:37:0c:ce:e1:4c:56:
64:dd:68:94:9a:39:43:0d:83:7c:ea:40:48:80:97:
ac:d8:f1:cb:a6:1c:a4:6f:86:f7:50:f6:d3:9e:a6:
97:6d:3a:e9:b1:3f:ee:21:f0:90:fd:22:31:0d:f7:
90:51:dd:9e:f2:3d:2b:82:ce:d5:f6:0d:1b:12:64:
40:3a:e7:86:5e:ca:2c:6a:36:06:1e:c6:75:39:5b:
de:12:1a:1b:61:4f:d6:e6:e9:38:6f:62:43:8e:a0:
ee:84:51:2a:fd:6f:a4:f9:26:b2:b3:eb:46:6e:00:
11:3a:94:69:46:0d:34:f3:51:df:0a:bd:81:5e:b2:
ed:ff:2f:f0:3b:ca:23:b1:53:6b:f7:5e:51:19:eb:
d9:27:35:e5:64:b9:ee:15:f6:1e:a9:94:7e:c6:da:
c0:b6:0e:c6:0c:77:a8:53:12:65:ac:d6:f6:da:86:
27:34:fc:82:33:de:7c:76:e1:b0:d6:4d:53:91:5d:
ea:ae:92:1b:3b:f7:d9:10:46:b2:5b:13:78:d4:56:
0b:2d:20:0c:4e:ba:13:b6:43:5c:d8:3e:73:f0:98:
ea:c5:58:c4:81:88:ff:5e:df:7f:91:53:41:be:c7:
5f:6c:c5:79:e8:19:98:f5:be:4b:f5:0a:3b:aa:3d:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2A:8C:AB:E4:EF:3C:06:DD:44:5A:F8:C1:C8:CC:FA:FF:BA:9B:AC
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:75:4e:df:db:94:c1:a6:ea:49:64:a7:12:ed:9a:b7:a8:bf:
92:7f:06:9d:2e:50:ed:84:9d:25:7a:97:04:9a:a1:9f:d6:8a:
45:49:e7:d3:40:82:d2:f4:c7:55:d7:cc:ba:76:6f:c6:9e:7e:
ca:1f:6f:a4:d5:98:61:18:4f:4c:c1:d4:32:24:0f:ce:ba:e6:
19:a7:b1:4b:01:3f:cb:de:e4:1d:2f:0f:12:5d:c4:96:e1:73:
19:fa:05:f8:4a:8e:7c:5b:5f:01:09:f6:cf:ac:26:c6:ab:37:
d7:e3:c9:f4:71:48:52:2c:51:35:a6:4c:14:19:3b:b6:1f:8a:
ad:f5:5e:fc:6a:ba:ec:b4:d0:17:f2:34:e8:2a:77:a4:c6:5b:
8d:89:66:f1:63:82:94:98:ed:dd:3e:4e:da:0d:41:17:dc:6e:
14:23:ea:68:86:8f:51:86:e8:41:29:3e:fe:16:8b:fe:c7:f6:
78:45:2f:8b:8b:a7:1e:4c:e3:aa:ae:8b:55:53:de:a6:05:07:
23:82:4d:e9:83:4f:cc:da:66:a1:30:1e:3a:4c:5d:50:c2:a1:
90:9b:1e:60:3e:ae:7e:57:12:bb:2e:c5:8b:48:1a:a7:b2:0a:
0d:5f:26:74:38:83:11:aa:34:c4:ed:a1:c3:b5:60:4d:c4:76:
6d:33:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:22:21 2026 by rpki-client