Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: cOLSkYzlcZJXT5SMpormRFU9VCrCc2479U+QWcoogn8=
Subject key identifier: 8C:D2:5C:76:95:42:D6:2E:DE:76:F8:31:F9:6C:47:3D:A0:BF:E7:C4
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A09923CBB7B5C79E7C21756D8E0F19A35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A52
Signing time: Sun 13 Sep 2026 05:00:54 +0000
Manifest this update: Sun 13 Sep 2026 05:00:54 +0000
Manifest next update: Mon 14 Sep 2026 05:00:54 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: +r81bIa7nNSlqHETvd8LzhfnwOk4TADDFNnuWXwiTdw=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:23:cb:b7:b5:c7:9e:7c:21:75:6d:8e:0f:19:a3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 13 05:00:54 2026 GMT
Not After : Sep 14 05:00:54 2026 GMT
Subject: CN=8cd25c769542d62ede76f831f96c473da0bfe7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:d5:5f:db:b7:b6:c4:94:b0:36:2e:68:cc:
ed:d8:4f:d6:80:b6:c5:d7:df:2e:6f:21:d5:12:2e:
08:03:2e:87:f1:02:6f:0b:aa:82:a9:f6:76:01:0e:
98:72:3f:a6:e3:85:e5:13:49:7c:e2:cd:26:4c:31:
ce:62:6c:c6:91:d3:af:62:46:a2:a4:fe:62:54:e3:
38:e2:89:e6:8f:58:59:d6:a3:ac:bf:57:b6:84:1f:
ac:a8:2c:71:f9:64:55:65:ac:dd:ef:2e:07:d1:84:
c5:e2:27:de:8a:da:72:9f:70:9e:c5:b2:b1:f3:29:
07:ff:7e:cc:7a:28:8e:59:d6:7c:45:30:43:bc:08:
b7:3a:5b:ac:4c:a5:7e:57:05:50:22:11:6d:09:a6:
4d:86:d9:a3:ae:a3:b1:23:7c:0f:27:a2:39:a1:da:
c0:29:c7:bc:39:6a:b2:87:5c:24:b2:70:08:d0:af:
82:da:5b:6e:f3:de:e8:67:3a:52:0f:b6:a8:59:2e:
4f:5b:bc:f8:cc:24:10:55:74:b4:2b:48:4f:3b:8a:
98:e8:ec:3f:6b:16:46:d2:73:fe:b3:7a:4b:41:fa:
fd:a8:80:b7:99:37:3d:69:59:57:cd:0a:40:be:fb:
67:28:7f:8f:25:d1:54:07:d9:7e:24:9d:28:e3:0e:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D2:5C:76:95:42:D6:2E:DE:76:F8:31:F9:6C:47:3D:A0:BF:E7:C4
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bf:c6:9f:89:be:c3:6f:2e:a8:e5:3e:62:82:f5:22:8b:eb:
9f:08:c9:5d:c2:34:08:74:b1:80:36:85:79:cc:bf:f5:9d:d5:
d9:f1:2c:c7:6e:26:cb:bf:f3:b4:47:39:d9:e3:d6:82:c0:8a:
b4:b0:06:3d:f3:36:90:84:f6:fe:19:95:37:96:83:8c:33:22:
7a:ff:bf:aa:15:c7:29:38:47:05:7b:94:d1:b6:29:c6:0a:d8:
9a:4c:5f:ba:64:63:cc:c5:a4:28:3c:cf:78:e0:31:95:c7:a8:
75:13:b9:03:b5:42:25:2c:21:07:be:f8:49:c8:fc:31:35:0c:
c9:d9:ff:61:f2:14:21:e2:7a:5a:1d:aa:29:bf:9c:6c:9d:4d:
d6:79:83:62:c6:ba:92:8e:8e:79:f4:08:1f:b5:37:11:4b:ce:
33:35:40:01:48:d6:d6:d3:72:2b:0d:fa:88:79:2d:7d:ad:0f:
23:94:1f:85:af:4d:ff:f3:31:ba:72:d1:dc:fd:da:18:dc:5e:
2b:9a:b0:0d:98:d1:a7:8f:cf:cc:6d:0b:fe:b6:fb:a0:f7:10:
84:52:5c:cb:f2:32:f8:48:c5:53:06:2d:85:05:41:a1:35:2d:
94:e1:bb:33:47:57:ab:5c:d1:f1:59:18:a4:07:28:b0:21:03:
b8:b2:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 08:47:01 2026 by rpki-client