Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: OQVcg4mce578F/RRuWipY+rcTeKFZ459xXa8UmpTt98=
Subject key identifier: 22:13:B8:F3:7E:0D:AF:E7:45:FA:21:E5:4D:BC:F9:E0:73:35:B5:D2
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A1A826B32ABBAD8041999665A6A6B05122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1AE0
Signing time: Wed 04 Nov 2026 20:01:10 +0000
Manifest this update: Wed 04 Nov 2026 20:01:10 +0000
Manifest next update: Thu 05 Nov 2026 20:01:10 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: +Bq0GS6K0jbfRpcbKqbBWekOEgMUw7ladSONeW3CqRU=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:26:b3:2a:bb:ad:80:41:99:96:65:a6:a6:b0:51:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Nov 4 20:01:10 2026 GMT
Not After : Nov 5 20:01:10 2026 GMT
Subject: CN=2213b8f37e0dafe745fa21e54dbcf9e07335b5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:c2:4b:d0:fe:a1:68:76:6d:f2:fd:0f:04:
fe:f9:09:e1:f7:e9:0a:35:1c:0d:91:39:26:57:a2:
c2:a1:17:90:3a:95:66:f2:b3:9a:5c:c2:47:c0:2e:
33:43:b6:db:87:51:c8:ff:19:b0:42:c3:b5:42:ee:
d7:a8:ab:87:15:c6:50:d5:7c:04:49:4a:66:2e:76:
07:96:07:91:f5:46:eb:7e:7e:1e:2e:87:00:7e:34:
49:02:13:c9:02:ca:fd:92:10:a6:1a:2c:dd:8d:7b:
0d:43:7c:da:25:58:b1:ce:70:fc:7f:0e:d3:14:e4:
14:10:4c:ac:ff:ec:b4:d8:b9:cb:70:e3:21:6d:27:
28:3f:65:92:87:69:47:e8:b1:d4:a7:08:01:4a:74:
df:d0:64:52:ea:65:80:6b:98:d2:6c:c0:92:4f:81:
93:95:55:73:34:6b:6d:5a:4f:e6:23:7d:6d:ec:3b:
18:05:3a:88:fb:07:d0:1e:6a:01:8a:52:ca:66:8b:
96:6c:23:2d:3e:43:79:6a:83:71:6c:7d:11:82:aa:
f9:7a:2d:66:2d:81:64:93:dc:6d:47:06:f4:23:2d:
b1:0e:3f:01:16:2f:1b:b4:5e:73:69:9f:d4:76:2e:
45:59:5d:3c:33:0b:25:08:1f:17:9d:97:95:cd:e9:
3f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:B8:F3:7E:0D:AF:E7:45:FA:21:E5:4D:BC:F9:E0:73:35:B5:D2
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a4:b6:d4:f5:12:be:ed:e9:e5:e8:69:ec:ef:a8:80:b4:b3:
e5:a4:90:63:05:e8:31:47:97:14:25:bd:e6:02:09:c5:39:9e:
1a:e1:8d:e8:24:fe:a2:8b:74:f5:58:a8:15:86:4d:16:38:10:
4f:bb:78:ee:e6:4a:94:84:76:84:6f:bc:42:ff:17:ef:e3:2f:
11:bd:62:a7:9f:b0:d2:be:30:e7:ef:23:51:f1:93:de:97:84:
34:86:c9:9e:ac:d4:21:ec:3d:62:f0:c3:aa:15:f8:08:82:6c:
fb:9c:4a:2b:a3:38:61:c3:7d:4e:2e:6f:be:0b:5f:6c:bb:59:
df:7e:a2:47:0e:74:ad:e1:4e:c8:2d:2d:25:05:82:fb:2b:d1:
de:ec:da:89:54:bf:b9:64:ea:da:dc:78:44:b0:a7:66:f9:aa:
17:fd:6b:68:16:3c:17:fc:38:5b:3f:d1:ee:bb:4d:5c:57:a7:
dc:9e:d0:a1:ca:f4:fb:ab:27:4c:c2:eb:1d:8d:94:90:98:07:
4e:3b:63:60:aa:b2:28:ef:5f:0f:05:9a:d3:6d:45:50:1e:05:
39:41:07:60:1f:3d:91:ff:57:82:41:27:43:4c:c7:ff:98:5f:
f1:2e:e2:54:9d:d5:de:55:aa:f8:0b:56:ac:a3:28:83:f9:4b:
93:e1:1b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoJrMqu62AQZmWZaamsFEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYxMTA0MjAwMTEwWhcNMjYxMTA1MjAwMTEwWjAzMTEwLwYDVQQD
EygyMjEzYjhmMzdlMGRhZmU3NDVmYTIxZTU0ZGJjZjllMDczMzViNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5jCS9D+oWh2bfL9DwT++Qnh9+kK
NRwNkTkmV6LCoReQOpVm8rOaXMJHwC4zQ7bbh1HI/xmwQsO1Qu7XqKuHFcZQ1XwE
SUpmLnYHlgeR9Ubrfn4eLocAfjRJAhPJAsr9khCmGizdjXsNQ3zaJVixznD8fw7T
FOQUEEys/+y02LnLcOMhbScoP2WSh2lH6LHUpwgBSnTf0GRS6mWAa5jSbMCST4GT
lVVzNGttWk/mI31t7DsYBTqI+wfQHmoBilLKZouWbCMtPkN5aoNxbH0Rgqr5ei1m
LYFkk9xtRwb0Iy2xDj8BFi8btF5zaZ/Udi5FWV08MwslCB8XnZeVzek/ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCITuPN+Da/nRfoh5U28+eBzNbXSMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqS21PUS
vu3p5ehp7O+ogLSz5aSQYwXoMUeXFCW95gIJxTmeGuGN6CT+oot09VioFYZNFjgQ
T7t47uZKlIR2hG+8Qv8X7+MvEb1ip5+w0r4w5+8jUfGT3peENIbJnqzUIew9YvDD
qhX4CIJs+5xKK6M4YcN9Ti5vvgtfbLtZ336iRw50reFOyC0tJQWC+yvR3uzaiVS/
uWTq2tx4RLCnZvmqF/1raBY8F/w4Wz/R7rtNXFen3J7Qocr0+6snTMLrHY2UkJgH
TjtjYKqyKO9fDwWa021FUB4FOUEHYB89kf9XgkEnQ0zH/5hf8S7iVJ3V3lWq+AtW
rKMog/lLk+EbZw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:31:39 2026 by rpki-client