Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: VWWXS5qNP+t01zcUrmPlFwinbMOhCPo29DilPnwM31U=
Subject key identifier: 81:05:A0:31:3D:5D:AD:A0:ED:21:F9:37:C6:91:17:25:6E:07:94:DC
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0784FC53B0143C43D7C6A5A9068DC3662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A41
Signing time: Sun 06 Sep 2026 20:01:28 +0000
Manifest this update: Sun 06 Sep 2026 20:01:28 +0000
Manifest next update: Mon 07 Sep 2026 20:01:28 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 2JqaW3Z+AADtNDXNWp00vZpESNp6ZpVGa/SDVnEcvJU=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:78:4f:c5:3b:01:43:c4:3d:7c:6a:5a:90:68:dc:36:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 6 20:01:28 2026 GMT
Not After : Sep 7 20:01:28 2026 GMT
Subject: CN=8105a0313d5dada0ed21f937c69117256e0794dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:81:9b:f4:14:26:ae:f5:4e:c2:5e:45:54:
6f:7c:e7:56:df:d5:89:b7:74:10:3b:19:7f:ac:3c:
fa:cd:4e:84:8b:fc:8c:57:9c:fa:4a:80:9b:99:b0:
c2:f7:75:30:e2:5d:c7:e3:20:28:d5:98:36:35:9b:
f8:5f:86:88:9e:52:0a:00:fa:59:37:e1:36:c7:46:
13:14:33:d2:8d:63:39:94:c6:5b:f7:8b:da:e0:1a:
d6:ab:1d:56:d4:02:b0:d8:0c:63:a5:9c:9c:71:a8:
9e:e4:a6:f6:88:23:82:dc:27:39:e5:eb:7e:e2:dc:
17:92:57:f0:21:ed:b4:a3:67:ce:fe:57:a5:a3:85:
5a:92:7e:23:cc:cd:f9:ee:89:3a:18:b9:cb:6b:f8:
1d:45:4d:ce:b2:50:dd:af:3c:b3:53:b3:0c:92:71:
34:93:15:02:a7:d2:29:e6:16:5e:c9:9e:e4:44:02:
68:e7:77:68:55:51:6b:1f:0b:99:51:83:a5:6f:91:
4b:51:e2:9b:f4:5d:aa:cd:71:48:b3:51:d6:26:52:
04:02:65:76:fe:bd:4c:53:fe:46:bb:09:e8:32:8e:
85:3d:d9:3c:72:5a:2d:b0:6b:5d:18:16:14:b3:7b:
90:e5:2b:f8:52:16:c0:06:c0:14:c8:1a:5a:17:e1:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:A0:31:3D:5D:AD:A0:ED:21:F9:37:C6:91:17:25:6E:07:94:DC
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fd:16:ef:b9:85:20:54:31:97:8a:e3:90:b8:d8:cd:92:b6:
11:ed:18:2b:c4:27:9d:01:fa:8c:6b:51:a7:de:6c:89:96:5f:
be:d5:ee:87:df:c4:81:b1:60:44:4a:b1:96:e6:75:f8:6f:06:
11:5e:b6:dd:d1:ac:88:66:1d:4c:16:63:e5:ae:c2:d4:61:13:
db:aa:2c:8e:0c:f5:e8:29:57:47:d5:82:e5:5e:7e:c7:db:73:
c7:d4:89:75:7f:b9:ae:4f:6e:0e:ae:72:89:31:39:5d:a6:6f:
3d:2c:b4:a5:06:1d:87:09:5b:30:11:3e:a0:3f:74:fd:61:b2:
06:01:2c:be:95:a8:00:3f:96:c4:3f:a2:29:58:c1:b3:a2:9d:
1e:20:fa:db:04:72:1e:8c:85:c2:f7:3d:f6:72:47:df:b7:7f:
49:40:6a:76:3b:5a:52:02:78:d7:9c:e5:82:c8:df:9f:3f:8d:
52:55:0d:72:e2:7e:c0:2a:21:73:06:cf:c6:bf:24:3c:1d:97:
3c:bc:de:3f:01:74:1c:e6:ab:c7:53:4f:db:b4:68:08:58:f9:
15:40:41:9c:17:21:83:e5:bb:82:3c:1b:62:f3:d9:a0:f6:f6:
4f:8a:8e:c1:ef:a3:31:3b:0a:d8:43:0a:af:f3:05:1f:d5:33:
10:f7:ba:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaB4T8U7AUPEPXxqWpBo3DZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwOTA2MjAwMTI4WhcNMjYwOTA3MjAwMTI4WjAzMTEwLwYDVQQD
Eyg4MTA1YTAzMTNkNWRhZGEwZWQyMWY5MzdjNjkxMTcyNTZlMDc5NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2KBm/QUJq71TsJeRVRvfOdW39WJ
t3QQOxl/rDz6zU6Ei/yMV5z6SoCbmbDC93Uw4l3H4yAo1Zg2NZv4X4aInlIKAPpZ
N+E2x0YTFDPSjWM5lMZb94va4BrWqx1W1AKw2AxjpZyccaie5Kb2iCOC3Cc55et+
4twXklfwIe20o2fO/lelo4Vakn4jzM357ok6GLnLa/gdRU3OslDdrzyzU7MMknE0
kxUCp9Ip5hZeyZ7kRAJo53doVVFrHwuZUYOlb5FLUeKb9F2qzXFIs1HWJlIEAmV2
/r1MU/5GuwnoMo6FPdk8clotsGtdGBYUs3uQ5Sv4UhbABsAUyBpaF+GR6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEFoDE9Xa2g7SH5N8aRFyVuB5TcMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv0W77mF
IFQxl4rjkLjYzZK2Ee0YK8QnnQH6jGtRp95siZZfvtXuh9/EgbFgREqxluZ1+G8G
EV623dGsiGYdTBZj5a7C1GET26osjgz16ClXR9WC5V5+x9tzx9SJdX+5rk9uDq5y
iTE5XaZvPSy0pQYdhwlbMBE+oD90/WGyBgEsvpWoAD+WxD+iKVjBs6KdHiD62wRy
HoyFwvc99nJH37d/SUBqdjtaUgJ415zlgsjfnz+NUlUNcuJ+wCohcwbPxr8kPB2X
PLzePwF0HOarx1NP27RoCFj5FUBBnBchg+W7gjwbYvPZoPb2T4qOwe+jMTsK2EMK
r/MFH9UzEPe6bw==
-----END CERTIFICATE-----
Generated at Mon Sep 7 03:31:51 2026 by rpki-client