Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: hpgwDYCagiWLul2yShVL7mEHaPCxjRaUDSyFDQ+qp28=
Subject key identifier: 61:73:DD:93:27:D3:FD:A8:53:BE:35:CD:B8:A3:32:FA:A7:91:DB:4C
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FB3C2A66BD455475061331D086935BB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19DB
Signing time: Thu 30 Jul 2026 16:01:45 +0000
Manifest this update: Thu 30 Jul 2026 16:01:45 +0000
Manifest next update: Fri 31 Jul 2026 16:01:45 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: mScab6QGdI+tdrZFkVV+kUZIUHrNQhB9YSPE5RXpD1k=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Jul 2026 14:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:c2:a6:6b:d4:55:47:50:61:33:1d:08:69:35:bb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 30 16:01:45 2026 GMT
Not After : Jul 31 16:01:45 2026 GMT
Subject: CN=6173dd9327d3fda853be35cdb8a332faa791db4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7b:e9:86:ca:d7:78:cc:e6:14:7a:2c:47:1a:
e0:1f:a7:f9:34:4e:e9:99:8b:67:9a:b8:c2:a1:f2:
6a:60:9c:76:20:86:c1:f3:c8:a4:ae:92:b7:86:ee:
4b:6c:a0:75:83:8c:8c:2c:42:77:ae:c7:80:63:c2:
5c:3e:90:41:5d:50:0e:d8:75:90:f9:0f:e1:ef:f5:
e0:15:e6:00:a5:ae:6a:82:8a:e1:2e:db:31:1b:c3:
69:61:51:76:15:30:a3:88:99:be:5f:90:d7:09:78:
1d:78:b8:6f:d7:cd:fa:fb:8e:05:02:85:d5:5c:27:
10:f2:77:8a:82:a0:8a:e4:cb:cd:cd:a8:ff:8d:38:
cf:b4:9f:70:c5:5f:eb:49:b3:04:2f:f9:de:2e:c5:
b7:56:43:e1:cf:2a:c4:00:ce:83:db:23:ed:37:3b:
19:e4:25:5d:3f:75:57:08:dd:1c:9d:ac:06:1f:89:
67:e0:e1:5d:ab:7e:24:9d:0d:75:ff:ce:20:27:a0:
d7:cf:96:b5:6c:fb:11:2e:c8:60:9f:e3:57:e1:20:
af:88:ba:01:fa:7e:5b:39:84:a2:03:ed:e6:3e:39:
19:55:f6:59:d2:1b:48:23:9a:ff:29:59:9d:d5:52:
20:a2:4e:de:58:af:b5:7f:41:0f:e8:9a:ff:3b:09:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:73:DD:93:27:D3:FD:A8:53:BE:35:CD:B8:A3:32:FA:A7:91:DB:4C
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:36:07:c8:ec:f3:f4:14:f3:18:0c:fe:d1:84:7b:5e:a2:
88:66:cb:22:53:53:3b:5a:c4:e3:6a:ee:56:3b:0c:e3:8e:d9:
12:2d:3e:74:ad:a7:8c:29:f9:bf:26:b9:9c:2f:5e:b4:ee:9a:
ab:47:70:d6:3c:14:57:66:9f:ec:ac:f9:50:09:d6:cc:36:42:
a1:63:02:7a:f5:c4:3e:cf:e9:12:b8:8b:df:7b:e6:af:d8:d1:
d1:c9:b6:03:af:82:96:85:2f:2c:7f:92:6b:4f:ab:0b:a8:57:
94:97:70:c1:9a:61:8b:42:2c:e9:44:90:d6:77:ed:43:12:8f:
10:dd:1b:e7:18:6b:dc:60:5c:bd:a2:b2:60:f3:0e:b0:29:71:
45:4b:89:99:b1:52:71:2e:1f:e9:8b:0b:ec:b3:ef:65:49:05:
e6:9d:e4:14:52:92:a5:16:c2:b3:27:88:0a:f6:4c:29:b5:91:
3f:6f:31:50:b1:1a:0c:43:94:0f:10:8d:93:38:61:63:50:ef:
94:31:4e:4c:9e:fd:a7:31:9d:86:6b:32:f6:c8:bb:af:e3:aa:
5b:e3:60:47:11:df:76:50:ac:49:b4:e8:ec:13:4b:fc:eb:df:
2c:39:b1:af:19:48:33:7a:8d:e8:24:59:89:a8:b8:71:52:40:
2f:ef:ba:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+zwqZr1FVHUGEzHQhpNbsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwNzMwMTYwMTQ1WhcNMjYwNzMxMTYwMTQ1WjAzMTEwLwYDVQQD
Eyg2MTczZGQ5MzI3ZDNmZGE4NTNiZTM1Y2RiOGEzMzJmYWE3OTFkYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nvphsrXeMzmFHosRxrgH6f5NE7p
mYtnmrjCofJqYJx2IIbB88ikrpK3hu5LbKB1g4yMLEJ3rseAY8JcPpBBXVAO2HWQ
+Q/h7/XgFeYApa5qgorhLtsxG8NpYVF2FTCjiJm+X5DXCXgdeLhv1836+44FAoXV
XCcQ8neKgqCK5MvNzaj/jTjPtJ9wxV/rSbMEL/neLsW3VkPhzyrEAM6D2yPtNzsZ
5CVdP3VXCN0cnawGH4ln4OFdq34knQ11/84gJ6DXz5a1bPsRLshgn+NX4SCviLoB
+n5bOYSiA+3mPjkZVfZZ0htII5r/KVmd1VIgok7eWK+1f0EP6Jr/Owlm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFz3ZMn0/2oU741zbijMvqnkdtMMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOg2B8js
8/QU8xgM/tGEe16iiGbLIlNTO1rE42ruVjsM447ZEi0+dK2njCn5vya5nC9etO6a
q0dw1jwUV2af7Kz5UAnWzDZCoWMCevXEPs/pEriL33vmr9jR0cm2A6+CloUvLH+S
a0+rC6hXlJdwwZphi0Is6USQ1nftQxKPEN0b5xhr3GBcvaKyYPMOsClxRUuJmbFS
cS4f6YsL7LPvZUkF5p3kFFKSpRbCsyeICvZMKbWRP28xULEaDEOUDxCNkzhhY1Dv
lDFOTJ79pzGdhmsy9si7r+OqW+NgRxHfdlCsSbTo7BNL/OvfLDmxrxlIM3qN6CRZ
iai4cVJAL++6AA==
-----END CERTIFICATE-----
Generated at Thu Jul 30 18:38:34 2026 by rpki-client