Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: mEelTEn+f2PK8j+uTvvatBehtfsrgOlKCwv/geBQ2LU=
Subject key identifier: 93:B4:0C:BC:C2:25:DF:0E:73:DB:16:CE:36:A1:DA:42:5F:A1:DF:BE
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A1A06CE967C0A538F3E8AC08DDF6B88590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1ADC
Signing time: Tue 03 Nov 2026 08:00:54 +0000
Manifest this update: Tue 03 Nov 2026 08:00:54 +0000
Manifest next update: Wed 04 Nov 2026 08:00:54 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: F8HuOZrBSL6BIOj/+nWeUZ7n77bUsvE/3wBeqRzTCBM=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:6c:e9:67:c0:a5:38:f3:e8:ac:08:dd:f6:b8:85:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Nov 3 08:00:54 2026 GMT
Not After : Nov 4 08:00:54 2026 GMT
Subject: CN=93b40cbcc225df0e73db16ce36a1da425fa1dfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:36:56:b3:34:f0:3d:be:0a:9d:59:20:bf:be:
43:30:9c:09:b3:97:0f:e4:4f:b2:2e:f9:40:7c:a7:
25:27:e4:17:f3:12:64:b1:43:6b:48:99:a5:51:a7:
77:16:98:07:7c:34:0a:66:9b:13:e8:9d:02:f9:ef:
40:33:8c:ca:82:b5:8d:89:b2:1e:e6:b3:01:cf:74:
3e:66:3a:f3:7c:22:41:ab:40:fb:80:91:77:62:db:
a3:26:31:2e:82:a2:62:d8:ef:f4:41:f9:98:53:f7:
93:93:6a:e6:f2:da:8b:7d:5b:92:3d:6a:5a:9e:82:
b2:04:d6:8e:9d:1a:2f:cf:f4:df:96:34:5a:a1:a6:
75:df:f0:5a:2f:b5:e0:69:d0:66:95:bb:41:4c:4b:
cc:79:d8:0d:77:2e:65:1c:96:b1:73:16:6a:75:38:
6d:ae:10:6a:b0:60:63:1a:8d:7e:bb:37:eb:61:f8:
c1:b7:f2:c0:b8:c5:6a:cd:40:cb:d6:2c:7b:48:d8:
fa:57:25:e8:c0:06:83:7f:6e:82:ca:d5:d4:bd:2c:
a3:0d:a9:2b:ea:32:df:27:bb:df:63:27:e0:9d:1b:
41:34:39:7d:17:5b:14:2a:65:95:28:ac:b3:a4:16:
d7:5a:75:b1:50:31:6b:d1:53:84:d4:3c:01:22:a0:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:0C:BC:C2:25:DF:0E:73:DB:16:CE:36:A1:DA:42:5F:A1:DF:BE
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bc:3d:13:db:23:87:84:7c:18:83:77:50:7d:86:d5:d8:ce:
01:38:27:f2:06:dd:38:ed:01:0d:ab:18:7c:e7:20:28:a0:76:
30:a4:98:7f:14:d1:b2:9a:c6:7c:80:32:64:28:63:2c:29:48:
d1:21:70:76:aa:2b:80:fb:7a:0c:90:67:3b:fe:e4:26:a1:e3:
bb:6b:ec:63:58:3e:8b:b7:0a:f9:13:b1:d7:6e:da:1e:6b:5a:
05:1b:63:b2:0a:e4:26:ac:f3:d2:0f:d7:1e:cf:8a:99:5f:d4:
7b:7b:e5:a0:03:af:c3:e7:b8:a1:94:4d:1d:22:44:5b:0f:6f:
7e:2c:11:22:14:23:53:47:f2:6d:a7:39:eb:e1:47:5b:19:3b:
1d:e3:96:84:e0:d4:6e:22:6e:24:6b:4f:1e:b2:35:9f:0e:1b:
85:ea:aa:bf:36:f7:1c:0e:f5:98:e1:8d:e2:18:2c:f8:e8:3d:
cd:91:a9:13:54:83:28:f0:7b:e2:39:5f:42:ac:aa:3a:20:b3:
25:31:32:6b:be:70:cc:d0:01:fd:b4:95:ca:d4:ae:29:c2:f7:
30:e3:70:e6:97:ac:05:f0:16:01:ff:cf:3e:c9:b0:37:b7:0f:
85:a7:25:2f:a6:ce:28:ab:3b:6a:7b:98:15:01:4e:e4:6c:b8:
21:d7:b6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:59:21 2026 by rpki-client