Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: yY5vK5aVzyP2XIfRhWH5vR+n+ys6/m+SaYaubn6cZ28=
Subject key identifier: 81:21:F9:7C:F1:75:A8:0E:FE:F7:B4:8A:A9:38:0B:48:4E:DB:8C:23
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A04DD250103626C478BB1C852D49FAD4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A2B
Signing time: Sat 29 Aug 2026 14:00:23 +0000
Manifest this update: Sat 29 Aug 2026 14:00:23 +0000
Manifest next update: Sun 30 Aug 2026 14:00:23 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: Epu/28189QkLwnjE9wFpLxlfS4jqc7lYHf/y0HPZFCU=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:d2:50:10:36:26:c4:78:bb:1c:85:2d:49:fa:d4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 29 14:00:23 2026 GMT
Not After : Aug 30 14:00:23 2026 GMT
Subject: CN=8121f97cf175a80efef7b48aa9380b484edb8c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:34:fd:1e:b6:e4:57:d5:d5:0a:1e:eb:cc:
2e:7f:b0:95:a5:80:18:91:a3:2c:d3:6a:86:b6:40:
a1:2e:fb:74:73:b4:23:77:51:ea:62:aa:aa:65:c5:
74:c5:5e:41:39:70:2c:93:e3:31:fe:da:91:45:6d:
dd:9f:1d:c7:e6:13:8d:ec:c2:dd:ba:2d:5f:b3:da:
bd:81:f3:68:36:24:15:d9:ac:bd:b3:d2:11:d6:1c:
bb:8a:fa:7b:7c:18:03:87:f1:ac:cd:58:79:f4:ae:
de:54:3b:9b:dc:c0:d5:2e:93:4c:bf:54:9e:e5:57:
74:4a:4e:65:a0:38:1b:5f:a8:18:aa:11:3a:94:a7:
45:85:0b:1b:89:b5:7b:6c:98:5d:98:bf:5b:6f:d6:
a7:08:15:f9:67:a6:78:e7:20:15:d7:ed:c4:0f:b7:
48:33:d9:2b:5d:5b:75:9c:6d:50:c7:59:ba:eb:89:
da:2e:bb:94:a3:cc:97:ef:7b:e2:27:1e:d0:be:c8:
d1:44:fa:50:1c:45:09:83:20:b6:c6:a9:76:1e:54:
95:b1:18:f2:a4:1e:cf:f7:05:fd:0c:89:33:75:d2:
86:17:b2:9a:4e:cd:7a:1c:27:47:f8:d8:77:56:48:
4f:9e:6f:74:f1:80:14:c8:8e:cd:ed:18:60:9b:09:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:F9:7C:F1:75:A8:0E:FE:F7:B4:8A:A9:38:0B:48:4E:DB:8C:23
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:71:c6:3e:b6:fd:f9:28:f3:ac:f0:0e:4a:e0:4c:f3:9e:29:
38:d5:10:60:ae:da:ec:51:6d:e1:a5:16:cb:f7:42:39:bc:7c:
b6:8e:38:14:0c:ae:1b:86:00:a2:20:6e:01:4f:ea:2f:af:e5:
53:7b:8d:6b:15:e1:f2:fc:f4:36:19:e2:fc:dc:d6:7b:94:00:
00:f0:d9:d7:88:7a:b9:a5:35:33:1c:91:cc:f0:44:69:ce:d0:
05:ed:2d:da:12:5d:da:76:30:0d:72:f9:c9:6a:50:43:6f:6a:
66:b7:d7:29:35:56:38:6c:3a:ba:ec:30:72:39:ce:c3:6d:bf:
c5:29:57:3c:ba:c0:53:f5:97:3e:07:70:80:f4:65:86:7c:60:
43:63:b7:91:94:ba:fd:38:a4:9c:ea:3a:ce:18:a0:bc:47:49:
95:18:ed:12:e9:b6:c0:d3:99:28:a3:30:81:75:c6:90:7d:4e:
5e:7e:66:0a:b0:9b:3d:f4:cc:1f:46:b0:02:bb:e5:ee:13:5d:
bc:39:83:e8:71:aa:91:f2:2e:26:4e:78:12:20:be:82:4c:13:
29:98:40:c8:e7:c0:91:9d:16:e1:6b:0a:16:75:0a:6d:93:35:
a4:b5:b3:0e:a3:fe:74:70:1e:d9:23:2e:35:b4:b1:a0:95:87:
2f:ae:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 15:53:20 2026 by rpki-client