Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: PpGo20YSs+HzJSyjO8E38B7ltsnIugBZ2mcuGr0hPJY=
Subject key identifier: D7:1F:5D:8A:FF:F2:AE:9A:FB:06:29:6D:AF:8E:C7:3F:77:D9:A9:09
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FC900981446FB62A0BD7678D352439FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19E6
Signing time: Mon 03 Aug 2026 19:01:27 +0000
Manifest this update: Mon 03 Aug 2026 19:01:27 +0000
Manifest next update: Tue 04 Aug 2026 19:01:27 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: kycavAo/Ezxsi+h3p3FQXP+kq6qbpA7NQs0oIDKpzGI=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 14:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:00:98:14:46:fb:62:a0:bd:76:78:d3:52:43:9f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 3 19:01:27 2026 GMT
Not After : Aug 4 19:01:27 2026 GMT
Subject: CN=d71f5d8afff2ae9afb06296daf8ec73f77d9a909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:df:13:92:e3:26:f3:c5:6b:fb:b0:f7:66:
8b:6a:72:df:f9:c6:fb:0e:e3:61:4d:d1:f0:7d:e7:
a2:f3:fc:4d:c3:5f:24:f2:84:e3:e9:8b:2b:0f:11:
65:0f:fe:4e:38:2b:7c:a5:5a:a5:a2:d1:62:bd:b2:
74:94:2b:4d:63:d8:57:87:cb:00:68:fa:10:45:dd:
e1:cb:a9:31:94:70:e7:bc:26:41:82:5e:9d:c7:d2:
4d:fe:75:b4:88:36:8c:da:2c:13:2a:97:a0:9f:0f:
54:2d:96:cc:8a:25:dd:39:90:a1:c1:c4:b8:84:37:
3e:0d:7f:2c:77:8f:96:d0:77:1d:72:59:a5:c0:82:
25:4c:92:cb:ad:63:47:13:21:cb:10:78:1d:c4:50:
27:a7:a9:6e:7d:31:b1:29:23:dd:d7:40:2e:61:1c:
84:28:c3:6d:0d:2e:f0:6e:8b:ef:b4:8f:b1:21:a5:
77:77:73:17:28:c7:54:06:38:cc:c8:ea:15:d3:d3:
57:5a:7c:f2:9b:88:c0:71:5c:3b:fd:45:c0:9a:4a:
76:0d:86:73:a9:49:13:4e:ba:be:dc:81:34:1d:35:
34:9a:25:a2:fe:f3:45:98:e9:2d:27:b1:af:d4:f9:
ee:63:7a:6d:8e:f0:e8:ac:b3:31:06:62:2f:cd:b3:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:5D:8A:FF:F2:AE:9A:FB:06:29:6D:AF:8E:C7:3F:77:D9:A9:09
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:eb:bb:80:e8:5e:8e:4e:de:95:d3:9a:81:4e:33:c0:a5:79:
8b:04:e5:24:e8:66:00:99:e5:df:95:39:5a:84:ba:0b:4f:4f:
3a:b1:33:9b:4f:54:84:2f:1a:a5:a0:13:29:8a:ab:ed:97:a0:
cd:f5:ac:49:90:b6:a8:03:1b:4f:e1:dd:58:e8:44:cd:81:63:
71:b4:d1:91:d5:b9:19:97:66:8d:33:76:ac:d6:ea:ab:2c:9c:
4a:42:50:80:85:8d:b9:e0:c4:3e:2d:da:a4:b6:1f:b4:99:23:
d4:34:08:e5:1c:d6:c4:31:9b:ed:b0:be:a5:c5:63:ef:2e:78:
5b:76:85:ba:c4:5b:a5:26:5f:79:3d:f4:a0:8d:57:36:c4:80:
0f:72:4d:ee:66:1c:e4:85:18:bd:20:02:b4:b3:7d:03:cb:24:
7f:00:d5:eb:cb:94:27:3a:92:37:c3:30:31:20:d0:26:83:cd:
d9:23:d4:7d:fa:63:19:d5:25:22:92:5a:19:b0:bf:c8:57:62:
6d:c3:0f:2e:d1:dc:5d:20:f5:5c:ec:48:ea:8d:1f:f8:68:c9:
db:a1:2e:0a:3d:ad:cc:83:3a:06:a5:48:6b:42:b0:46:80:57:
41:9e:99:21:59:a0:61:a1:ac:21:9e:ab:b0:e8:83:90:1e:fc:
77:48:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 21:39:47 2026 by rpki-client