Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: vM7rF+zlrJAvZ6OXi9/ZhLxOvi7qYSJEfcjoyji7CmI=
Subject key identifier: 1C:90:FA:B4:07:B9:0C:85:EB:74:41:A9:8B:23:55:0C:C8:25:1E:4F
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A1570AC5227A93483A5A0E1292909DAAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1AB6
Signing time: Tue 20 Oct 2026 02:01:25 +0000
Manifest this update: Tue 20 Oct 2026 02:01:25 +0000
Manifest next update: Wed 21 Oct 2026 02:01:25 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: n2+YQ21GZw1yX/YQST1hnsFFLYDbs8j9l8fAdGuxo1k=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:0a:c5:22:7a:93:48:3a:5a:0e:12:92:90:9d:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 20 02:01:25 2026 GMT
Not After : Oct 21 02:01:25 2026 GMT
Subject: CN=1c90fab407b90c85eb7441a98b23550cc8251e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1c:24:38:c6:04:4b:c6:d4:13:aa:39:b5:11:
18:c7:38:d1:c0:c2:d0:20:d3:ca:14:0f:57:97:ff:
0c:01:44:bf:df:5e:4b:1d:85:dd:5b:a8:36:60:00:
4a:5c:ed:31:ec:cc:8e:f4:41:96:29:3a:f9:64:af:
1a:dc:1d:73:7b:b1:cb:01:b3:cd:1c:5d:79:39:3e:
c1:4e:3a:fa:ff:ba:cf:12:b1:8b:37:46:2b:3d:3c:
22:6e:48:96:4a:18:7f:a5:21:c0:01:f6:0c:a3:fd:
0f:59:9b:af:84:07:47:2a:05:9b:04:46:b9:8f:2a:
a1:b2:70:fc:ca:14:5a:87:56:84:c9:e3:27:59:6e:
74:5f:ab:2b:94:c1:b3:81:d8:ad:4a:42:16:8c:43:
58:ba:0f:fe:45:36:cb:44:0c:c8:21:1a:92:0f:22:
b5:9c:1f:5a:12:1b:57:01:1d:39:1c:37:5a:e5:51:
ad:07:93:63:c5:69:af:20:cb:52:3c:92:df:05:37:
4e:37:48:42:55:a1:99:04:10:86:6f:b0:28:7e:54:
e1:f7:5a:09:66:43:fe:3f:8e:44:fc:fb:6b:45:b6:
bd:59:54:0e:0d:6f:e8:33:4e:b0:43:40:0e:77:86:
69:15:70:ec:48:91:c8:72:a3:28:11:8c:7e:ad:de:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:90:FA:B4:07:B9:0C:85:EB:74:41:A9:8B:23:55:0C:C8:25:1E:4F
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:18:d4:5f:62:54:33:bd:ba:c7:f4:69:64:29:20:ee:f3:be:
11:26:12:c2:53:83:f2:97:51:fa:90:64:07:b2:be:e0:7d:59:
17:9c:b5:06:05:71:2f:ee:78:54:e6:be:65:72:44:37:17:e8:
9a:36:24:51:3d:06:a8:e2:06:37:c1:ff:c4:44:64:fd:18:40:
b1:da:c8:c8:81:50:09:66:fa:24:c3:0f:4f:98:30:b6:b7:66:
3b:05:65:1e:f9:c9:ad:1f:4b:bd:96:47:d7:f7:6d:74:36:78:
b9:1f:c7:b7:a3:5d:3f:7a:33:f1:a0:de:90:4b:a5:38:f4:fb:
ee:50:32:69:f1:a2:b5:82:44:1c:53:3c:fd:4c:c3:95:1d:da:
96:27:f9:a4:45:9d:cc:73:d8:29:01:ed:a6:8a:3f:f5:9d:a5:
25:fc:9e:7e:b6:77:c2:f6:34:9f:aa:8c:2b:68:b8:c4:6b:df:
79:bf:48:be:fa:89:88:91:84:d7:d9:41:52:ac:cd:68:7a:75:
10:04:34:cd:f9:3f:e1:e9:c1:d7:09:e8:b5:88:65:16:63:13:
ff:4b:ce:c3:d2:7d:9c:51:82:f9:77:f0:e2:83:9c:77:d5:31:
4c:31:08:68:b9:03:6b:07:ac:a3:79:00:31:6f:31:46:e3:3a:
49:d4:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:14:48 2026 by rpki-client