Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 9Kg4gBTwDt0+p5DVR5+BRNH3k84foNdB9idFIKq8KPQ=
Subject key identifier: 8A:76:AB:D1:17:62:CC:17:EF:6D:3B:F1:34:49:D0:BF:55:34:EE:C1
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FD23A98585BED49C5695FC415639678C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19EB
Signing time: Wed 05 Aug 2026 14:01:23 +0000
Manifest this update: Wed 05 Aug 2026 14:01:23 +0000
Manifest next update: Thu 06 Aug 2026 14:01:23 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: qKTouf5U0ipTouzXFsijHpVUGhCt2n7BwLTr8AEUrPE=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:3a:98:58:5b:ed:49:c5:69:5f:c4:15:63:96:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 5 14:01:23 2026 GMT
Not After : Aug 6 14:01:23 2026 GMT
Subject: CN=8a76abd11762cc17ef6d3bf13449d0bf5534eec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:3a:2c:24:a9:35:ae:20:6d:72:bb:00:dc:
63:e9:22:0b:61:64:2b:d3:79:d5:94:20:ef:fe:14:
13:be:65:15:00:1e:03:24:66:0d:c8:78:80:7d:5f:
5a:21:69:5b:f2:94:45:47:36:49:a9:54:3e:1a:f8:
61:a6:70:d4:a8:e6:ed:ff:35:a7:5d:93:88:c8:5d:
40:76:0a:68:7f:26:4d:e4:54:be:e1:fb:d0:f6:62:
14:2b:a7:9d:fb:a5:bc:62:d2:d0:df:40:9a:f1:91:
44:d9:59:ce:c2:f1:53:78:fc:38:2d:c7:49:7f:0e:
dc:09:78:fd:52:3a:5f:8a:7f:c3:6b:a9:c9:fb:d4:
6e:66:a4:b3:f7:19:04:b0:9c:8f:56:14:8f:f5:69:
ac:ee:af:74:e4:1a:1d:55:34:96:bc:83:2e:0e:0e:
55:be:65:da:b8:29:a3:5e:9d:60:b2:e2:f8:e7:67:
c9:61:9a:a4:9f:34:b7:a3:9d:af:39:49:f8:e1:83:
7a:9f:84:36:bd:38:ef:5c:4b:8c:60:f5:f3:fd:fa:
5b:e5:45:49:52:a3:58:c3:a7:9c:d4:19:ff:23:93:
33:f3:16:88:ad:c8:99:bd:e1:e5:01:9f:df:e2:01:
55:25:4e:7e:ba:5d:e6:7b:02:8c:be:e0:a0:f9:c1:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:AB:D1:17:62:CC:17:EF:6D:3B:F1:34:49:D0:BF:55:34:EE:C1
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2a:f9:81:69:a3:ac:d1:e2:43:30:96:03:fb:bc:e3:af:e1:
cb:8a:9e:36:2e:58:0f:cb:c5:f6:9f:00:a4:56:ae:dd:20:31:
e8:73:5f:50:3a:18:64:f1:3a:05:86:40:ee:7a:f4:2a:3b:3e:
4c:bf:7c:af:52:3f:6f:3b:8a:30:a8:13:83:24:8d:29:55:b0:
fe:a4:8d:f5:bd:ea:40:95:9b:fe:f4:6f:d8:5b:ae:8f:02:a9:
36:1c:1c:6e:5d:98:d5:d5:d4:1d:65:ef:a4:69:6d:82:af:0c:
a6:1a:c5:c6:41:ec:70:be:a7:6a:89:b5:da:cb:1d:35:a9:15:
04:57:2a:11:d7:b7:f4:97:6d:12:41:8b:6b:18:54:31:bf:f3:
a5:b2:42:c7:38:12:63:46:b1:12:e6:30:11:8c:13:bb:2e:b5:
d9:f2:c6:16:75:8b:0f:76:6f:f2:37:f3:64:d7:b3:2e:aa:ff:
b9:9a:85:6a:2e:f7:87:88:60:5f:af:39:94:87:e5:6a:17:bd:
57:22:4e:48:ad:a3:01:d5:16:6c:dc:2f:d1:2e:8f:92:7f:9b:
87:32:10:1a:36:2f:49:72:40:77:e2:2c:c8:b4:d6:37:0c:c8:
b6:b6:14:74:af:46:d3:21:35:46:ba:c0:68:cb:16:a8:c5:f0:
f5:a6:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:34:59 2026 by rpki-client