Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: XeTlgXqrbxczEFYqtHqtG9sFwwY7CDOVf4xXOoNqT9E=
Subject key identifier: 27:19:09:92:58:8B:15:CB:C3:2E:EB:ED:FA:31:BC:07:53:20:3A:48
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019F8D22056F9A792917ECA21F29F8C8B42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 04:00:44 +0000
Manifest this update: Thu 23 Jul 2026 04:00:44 +0000
Manifest next update: Fri 24 Jul 2026 04:00:44 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: O66f4gzUDIf4kB6Jg0a3XWC9zD4XDAtjXJbgjbisPys=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:22:05:6f:9a:79:29:17:ec:a2:1f:29:f8:c8:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 23 04:00:44 2026 GMT
Not After : Jul 24 04:00:44 2026 GMT
Subject: CN=27190992588b15cbc32eebedfa31bc0753203a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:4c:ec:ad:6c:3a:66:95:be:63:cb:10:14:
16:92:aa:cf:6e:9e:46:88:e5:d4:6f:a1:c7:84:32:
8e:f0:e9:57:16:46:22:68:62:b1:65:66:db:0d:fe:
64:fc:87:c7:da:f9:fa:e0:01:b2:6a:aa:ec:ef:2c:
3e:84:63:c1:2c:48:b3:26:9b:23:50:a8:1e:f5:0c:
b4:46:8a:a1:47:4a:fa:29:68:72:88:70:34:e9:f8:
0d:3f:6d:6a:50:7b:71:aa:b3:65:ab:6a:b0:dd:2d:
9b:87:4d:e9:e7:29:a6:da:be:2b:ac:2b:c2:80:92:
ef:c2:32:4a:15:f7:e6:31:5d:43:82:db:2f:6d:72:
e8:9d:e8:d3:e4:0a:7a:53:5b:77:09:2a:80:eb:84:
04:6b:79:d5:68:3e:6f:63:8e:5f:83:dc:99:df:d9:
27:8f:06:a6:78:75:4d:64:9e:90:82:e6:5a:2b:ca:
f2:8d:2e:d8:77:7a:61:3e:51:5f:ec:73:92:f7:33:
4a:d2:61:b3:84:ae:81:6f:0e:52:24:9d:c0:f7:bf:
b2:c3:14:fa:a0:6e:50:90:22:fb:a5:db:be:79:a4:
7a:0a:93:cd:a9:9e:94:b9:45:d9:4d:bb:8f:ae:53:
9b:cb:a1:b6:0c:d9:69:b7:81:00:16:30:8b:10:7a:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:19:09:92:58:8B:15:CB:C3:2E:EB:ED:FA:31:BC:07:53:20:3A:48
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9a:fa:07:73:3c:4c:84:ae:a0:36:c8:43:94:49:8c:45:83:
7b:e7:c0:24:28:2e:5e:89:77:81:f0:23:e7:44:0d:0c:36:a6:
fa:a5:71:7c:74:43:98:9f:ca:61:b4:7d:bf:2b:a3:57:b2:e2:
0d:a6:e9:f7:7e:e0:72:f7:af:a2:4f:9f:9b:45:6b:74:89:6d:
a7:9f:bb:e4:60:a4:4b:8b:58:c6:ad:00:b4:81:ab:14:af:51:
a6:7f:be:34:11:53:0e:20:8d:c1:34:8e:41:c9:87:c5:7a:a1:
a6:42:e8:be:0e:f9:4d:bf:af:23:a2:da:37:30:1c:db:08:14:
1e:3c:ea:e9:47:3a:e9:11:90:5c:de:80:67:75:2b:80:16:11:
d2:bd:dc:c4:11:5d:67:e8:a2:45:2f:c1:48:bd:4b:6a:00:15:
3b:03:b3:ef:44:c0:a1:a3:4f:91:de:8b:1d:a5:fd:eb:75:99:
c1:41:65:e6:a6:ec:69:ad:0f:0e:fc:02:d7:ee:68:72:3f:a4:
e6:e2:56:06:c8:23:e9:3b:e6:82:4e:66:f6:1a:f3:57:bc:f2:
84:ba:2b:3f:d6:c3:84:2b:7c:3e:c6:1b:12:f7:5a:17:93:2d:
5e:69:48:39:bd:29:99:70:58:d8:01:b9:4c:ac:87:2c:4e:92:
0a:98:cb:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+NIgVvmnkpF+yiHyn4yLQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwNzIzMDQwMDQ0WhcNMjYwNzI0MDQwMDQ0WjAzMTEwLwYDVQQD
EygyNzE5MDk5MjU4OGIxNWNiYzMyZWViZWRmYTMxYmMwNzUzMjAzYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlatM7K1sOmaVvmPLEBQWkqrPbp5G
iOXUb6HHhDKO8OlXFkYiaGKxZWbbDf5k/IfH2vn64AGyaqrs7yw+hGPBLEizJpsj
UKge9Qy0RoqhR0r6KWhyiHA06fgNP21qUHtxqrNlq2qw3S2bh03p5ymm2r4rrCvC
gJLvwjJKFffmMV1DgtsvbXLonejT5Ap6U1t3CSqA64QEa3nVaD5vY45fg9yZ39kn
jwameHVNZJ6QguZaK8ryjS7Yd3phPlFf7HOS9zNK0mGzhK6Bbw5SJJ3A97+ywxT6
oG5QkCL7pdu+eaR6CpPNqZ6UuUXZTbuPrlOby6G2DNlpt4EAFjCLEHrigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcZCZJYixXLwy7r7foxvAdTIDpIMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypr6B3M8
TISuoDbIQ5RJjEWDe+fAJCguXol3gfAj50QNDDam+qVxfHRDmJ/KYbR9vyujV7Li
Dabp937gcvevok+fm0VrdIltp5+75GCkS4tYxq0AtIGrFK9Rpn++NBFTDiCNwTSO
QcmHxXqhpkLovg75Tb+vI6LaNzAc2wgUHjzq6Uc66RGQXN6AZ3UrgBYR0r3cxBFd
Z+iiRS/BSL1LagAVOwOz70TAoaNPkd6LHaX963WZwUFl5qbsaa0PDvwC1+5ocj+k
5uJWBsgj6Tvmgk5m9hrzV7zyhLorP9bDhCt8PsYbEvdaF5MtXmlIOb0pmXBY2AG5
TKyHLE6SCpjLZg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 13:12:59 2026 by rpki-client