Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: zjAvughU6P3jgpZslfXHCLgFaC21QEv4fxzX8mn6xNc=
Subject key identifier: E5:FE:67:36:F3:C7:27:98:23:68:E9:EF:48:D2:39:C1:86:B6:65:D2
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0B576DD98198747A65169FB8CCCC31292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A61
Signing time: Fri 18 Sep 2026 17:01:01 +0000
Manifest this update: Fri 18 Sep 2026 17:01:01 +0000
Manifest next update: Sat 19 Sep 2026 17:01:01 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 3RhpJMCG/I1zB3FSUfXFhK7JmCQBKn3hian4Et1IARQ=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:76:dd:98:19:87:47:a6:51:69:fb:8c:cc:c3:12:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 18 17:01:01 2026 GMT
Not After : Sep 19 17:01:01 2026 GMT
Subject: CN=e5fe6736f3c727982368e9ef48d239c186b665d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:f0:b0:a6:dd:37:a0:1b:b6:70:84:6f:59:
e9:7d:a2:87:7d:7e:93:5f:aa:c6:31:c3:66:51:19:
ee:d4:a8:84:bc:35:0b:75:e9:68:08:4d:91:16:5d:
9a:02:0f:ce:aa:5a:0a:bb:df:50:67:68:96:73:36:
19:50:bf:f3:76:1e:d8:f7:0e:fc:59:21:40:9d:a5:
2b:1d:17:50:d0:d8:69:19:eb:ce:4f:03:0e:cd:b1:
81:a3:53:5a:39:1d:6a:1d:17:c9:12:c5:46:ea:7c:
c1:9a:b5:40:98:aa:aa:e4:26:10:d5:36:f3:d1:97:
6e:1b:4c:46:68:1c:97:0e:93:da:c1:bc:2c:d8:ff:
7c:93:8e:77:8a:f3:63:41:d9:c6:40:7d:99:8f:87:
56:73:33:81:fe:d1:17:c6:b5:2d:aa:04:02:44:d9:
36:33:25:81:4a:b1:86:12:e7:10:f0:53:e7:df:26:
86:e7:cf:a2:1f:eb:31:f2:ed:f7:a2:96:ea:51:47:
78:66:7b:60:e0:79:a0:8c:65:50:ef:ee:06:c2:1c:
86:6f:29:d5:0e:0e:21:70:37:66:40:82:de:84:6b:
d7:ef:03:fa:c4:9a:8c:d1:de:3a:1a:55:6a:ce:d4:
0c:ed:8a:91:c2:c4:4d:10:26:3d:3d:4d:0c:59:53:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:67:36:F3:C7:27:98:23:68:E9:EF:48:D2:39:C1:86:B6:65:D2
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:47:38:cc:ab:8f:eb:85:d5:27:4e:d9:2c:56:d6:b9:d4:d8:
32:a9:40:ba:ca:93:b7:e6:12:35:de:19:5c:80:a5:f4:8e:21:
f1:f6:56:be:ee:6b:06:ff:c8:c0:f6:c1:ea:33:58:ec:43:9f:
db:78:aa:c3:7e:29:bc:35:6d:42:f3:8f:7a:58:cc:6a:e9:f7:
d6:b8:ea:2d:43:14:6d:6c:08:f8:20:75:01:e0:f9:38:21:54:
88:ad:66:f8:5c:23:10:0f:d1:7b:ac:b2:e6:c0:c3:6e:86:e9:
57:c2:f0:2f:b9:9c:83:51:f6:10:6b:c0:44:06:15:06:c1:a1:
b2:f2:d4:f2:cb:db:99:32:76:4b:24:58:3e:79:6d:80:14:4c:
55:c2:1a:4b:0b:b5:75:d5:f4:bb:95:6f:5f:54:f4:1a:0c:0d:
9a:a9:0a:95:6e:70:d5:c0:ad:3e:6b:1f:f3:2d:a9:bb:a3:9f:
a3:51:fb:64:ea:1d:d2:a4:49:7f:c6:7e:ec:2b:11:00:75:a3:
b7:21:95:04:36:0c:50:de:18:a5:3a:a0:25:31:dd:f5:e6:b0:
1d:36:fb:e8:9e:f5:f4:a3:12:0e:4b:43:a3:3e:39:bf:a8:b4:
e3:6e:fa:7a:ef:53:07:ec:b4:3a:d4:f3:91:93:fe:5e:ce:0b:
08:9a:0f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:58:52 2026 by rpki-client