Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: x2ueaY3MZXBtboPldYONZfKjC6MdAUUBe/rBj/Wh3eQ=
Subject key identifier: E4:0F:65:6A:F5:E8:C0:12:54:44:28:AF:84:16:26:73:70:A4:F6:C7
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FF8DA4769B6C7776B1FE3A7A45F1A3AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19FF
Signing time: Thu 13 Aug 2026 02:01:22 +0000
Manifest this update: Thu 13 Aug 2026 02:01:22 +0000
Manifest next update: Fri 14 Aug 2026 02:01:22 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: Ck1+gNNR2ExZa/p5WChF41sIzR5DQnNHXIuKbr73Z3s=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:47:69:b6:c7:77:6b:1f:e3:a7:a4:5f:1a:3a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 13 02:01:22 2026 GMT
Not After : Aug 14 02:01:22 2026 GMT
Subject: CN=e40f656af5e8c012544428af8416267370a4f6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:25:fd:3a:a3:59:95:a3:ec:0f:95:8c:fb:
88:c4:f8:c8:9f:10:69:e3:f0:b2:a5:47:91:9b:5a:
3a:c8:bc:ab:37:45:f5:32:38:db:91:d4:5c:08:06:
ab:41:55:19:20:eb:a2:10:94:df:42:c8:a6:7f:03:
e3:69:b9:66:7f:92:30:b1:ac:7b:94:03:2f:3c:c4:
08:e5:55:b3:26:88:8a:d4:65:94:eb:3f:68:67:71:
bb:b0:92:12:54:51:1c:b3:9a:0b:ca:7d:77:77:2b:
f0:a3:64:cc:1c:b1:aa:f7:32:c2:10:fb:c6:07:68:
a5:5d:50:94:79:0d:54:47:97:4d:10:35:56:8d:84:
0a:22:d2:20:97:fe:88:9c:fe:bd:e2:8f:59:41:ca:
eb:15:ac:e4:d5:29:cf:1d:b1:9b:b3:a7:83:fd:79:
62:cc:56:00:4d:19:39:0c:2f:12:cf:1f:9a:cf:7b:
a6:a0:99:31:f1:49:3e:84:83:b9:ad:cc:06:6a:40:
68:60:b3:54:e8:83:60:18:0b:8f:ab:c1:b9:d3:11:
2c:d7:41:c6:9d:d3:4e:d4:b6:8b:17:15:69:0d:18:
2e:8f:e4:6c:92:01:4a:86:96:64:ff:2f:f2:26:6d:
5a:11:2c:14:dd:af:76:c5:38:d2:b6:92:d3:21:b6:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:65:6A:F5:E8:C0:12:54:44:28:AF:84:16:26:73:70:A4:F6:C7
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:29:de:25:d0:93:1c:46:89:90:72:30:a5:29:47:34:c6:
ed:72:3b:8a:25:9e:cc:24:00:5a:cb:81:c6:4e:59:71:b6:05:
7e:a1:b7:fb:fd:37:04:53:c4:75:7f:de:54:ed:7d:04:b5:1f:
b6:53:78:63:9c:29:03:d3:b4:ee:dc:1f:e7:72:14:0d:af:8a:
13:df:6b:7f:48:3b:8f:f3:ce:ab:a4:77:e4:e6:f5:39:1e:b5:
15:db:53:a6:b0:d2:a8:3c:9f:2c:cc:a2:53:01:e5:b3:32:e4:
3f:8e:d8:d6:c6:ed:cc:3e:13:a4:38:e2:da:8e:89:ec:36:f2:
5f:16:6c:62:e8:69:12:b8:89:f0:5b:fa:cf:0b:75:21:a3:2f:
9c:34:1d:9b:27:4e:fa:9f:89:43:f9:02:b0:5e:d7:15:bd:c5:
b1:64:11:c7:d4:8e:a7:76:6a:70:c5:74:6b:d2:55:07:a6:39:
25:d9:77:cc:b6:ed:c7:ee:fd:9e:fc:61:58:be:10:e9:1a:7e:
7e:47:41:e5:99:75:29:4c:98:13:61:6a:99:88:74:e6:4b:27:
47:73:c3:46:c8:f8:67:ec:54:ef:7c:57:d4:0c:f4:89:8f:df:
8e:59:c6:ae:6a:35:09:26:3b:37:bb:70:86:59:a6:ba:da:b3:
e9:67:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:51:02 2026 by rpki-client