Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: DuEULtMeibxiWoWr0WIwsus19y94L320xIxWnpIut3I=
Subject key identifier: 58:54:38:1C:41:89:58:CD:16:19:77:FE:2A:0B:A8:A2:01:37:1D:F6
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0480775F3EB31D4E0145B78B1C0989CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A28
Signing time: Fri 28 Aug 2026 11:00:43 +0000
Manifest this update: Fri 28 Aug 2026 11:00:43 +0000
Manifest next update: Sat 29 Aug 2026 11:00:43 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: EFfRzNbo5Ns+BeEiSvvxnoffFKuO83Fb7nLnRgruUX8=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:07:75:f3:eb:31:d4:e0:14:5b:78:b1:c0:98:9c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 28 11:00:43 2026 GMT
Not After : Aug 29 11:00:43 2026 GMT
Subject: CN=5854381c418958cd161977fe2a0ba8a201371df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:78:a8:5b:d2:3b:c8:01:5e:8b:03:58:7c:
73:49:ad:ae:81:46:7f:96:d5:32:89:34:38:d9:a8:
df:89:70:9b:22:a2:a5:16:56:6d:8a:ac:cd:a1:ca:
19:5d:72:0b:ce:57:85:4e:be:2a:68:99:9a:5a:5a:
f6:3a:92:13:2e:82:29:20:5a:72:cb:13:fb:4c:d6:
de:f8:9f:da:38:16:f2:75:7c:9e:ec:04:8f:87:2a:
b5:cb:9c:67:e7:b4:63:6f:88:67:f3:b1:31:8f:9a:
b2:f5:ee:ac:f8:c0:9e:87:e2:95:54:24:12:30:a0:
11:98:6a:5d:c6:b1:49:77:ab:b0:54:04:55:64:cb:
67:ef:75:8b:e1:81:a2:24:01:4f:ed:69:07:8d:2b:
5d:91:a1:bb:17:56:ec:e4:24:e3:e1:3f:13:22:7a:
82:d6:ee:88:36:1a:98:4a:9e:86:96:b9:1f:b1:2e:
6a:34:5b:94:3d:ca:58:94:d5:43:58:a9:12:a1:a7:
f8:b6:cc:a2:69:0c:86:36:2c:3e:0b:1a:fe:3b:bf:
21:e5:ab:b9:22:c6:93:6c:4a:11:2f:49:c2:bb:fb:
84:c6:5f:a7:7d:61:c6:6b:c3:43:2f:0c:e8:5a:ca:
23:d5:01:1a:97:2b:e6:69:bf:6a:6d:50:67:1a:31:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:38:1C:41:89:58:CD:16:19:77:FE:2A:0B:A8:A2:01:37:1D:F6
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:90:76:03:e2:53:8a:86:a0:92:d0:cb:34:a4:b9:d3:a7:00:
d7:38:f7:b7:fa:5e:02:13:34:a0:05:b1:00:5c:1e:cb:4b:b7:
40:3a:bc:ce:81:50:4c:19:f4:ae:b8:87:82:a8:36:5b:90:6c:
ce:42:64:6d:9f:3c:6c:a5:e9:2d:a5:df:27:32:9f:5b:66:f5:
9a:0f:20:65:2c:89:4d:62:b4:d9:97:2d:63:0a:84:7a:97:02:
b4:2e:39:42:e1:6b:bf:02:2c:15:e4:78:39:70:e2:ad:a1:e2:
43:7f:7c:fd:9c:cb:9d:4d:e2:57:8f:0c:69:17:4c:6d:98:d3:
19:43:a3:99:ef:ce:dd:50:94:fb:9f:12:33:f9:c3:f6:12:00:
5f:01:31:f8:f2:88:ab:b4:3b:24:da:6d:ce:56:34:da:5d:89:
4f:6b:01:5d:d0:60:ff:26:f1:7b:47:28:61:a2:17:19:8e:e4:
bc:c9:56:3c:68:6d:39:5b:38:b3:f1:98:1a:78:e0:dc:bf:04:
24:43:f8:d7:c0:a5:b2:0f:3b:5e:a3:88:44:17:14:c1:66:e1:
b0:0b:9a:ae:72:4b:f7:c0:01:25:c6:46:05:a1:66:4d:9d:9a:
7e:79:ae:96:97:4d:86:b7:6c:01:90:9e:12:11:0a:d6:26:17:
d1:2b:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 15:33:58 2026 by rpki-client