Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: qcUTiVjsC//kgrgt5g5f8055E5AE8hWWFFTRLM4LyK0=
Subject key identifier: 83:1C:46:52:8A:B2:8B:E2:0D:D5:F0:4A:9B:C8:8B:41:36:2E:1C:17
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0FAFDABDF068ABE4F509A4150B1BF2BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A85
Signing time: Fri 02 Oct 2026 05:02:03 +0000
Manifest this update: Fri 02 Oct 2026 05:02:03 +0000
Manifest next update: Sat 03 Oct 2026 05:02:03 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: Vdqf3u26v2dB7NElWseiGm6WsBbf+FoHMChsaHjdSRQ=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:fd:ab:df:06:8a:be:4f:50:9a:41:50:b1:bf:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 2 05:02:03 2026 GMT
Not After : Oct 3 05:02:03 2026 GMT
Subject: CN=831c46528ab28be20dd5f04a9bc88b41362e1c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:a9:4d:5a:ea:56:e1:ed:f4:ca:d0:1a:70:
db:10:0c:1a:24:7a:97:3a:0a:7b:a2:d8:28:59:a2:
46:43:86:52:68:f3:ea:32:91:dc:24:7e:13:3d:f5:
d6:9e:5b:d3:ea:37:d8:94:ad:2a:20:6c:1e:45:df:
22:66:2f:7b:31:df:c5:d8:d4:41:21:8e:50:90:f1:
eb:f7:86:4b:b3:99:12:aa:fb:84:87:f2:75:05:b5:
0e:10:07:98:6b:72:7d:da:9f:8e:40:3a:e4:26:6c:
92:0f:55:f0:6f:38:8b:6c:c8:77:17:18:7b:78:d3:
5b:3a:53:86:d3:d3:d7:73:d5:39:83:f0:30:bd:8c:
34:54:f5:72:d2:7f:f7:87:39:f1:ec:d6:fa:e8:c2:
ec:6b:83:db:80:62:78:32:39:66:84:e2:07:05:47:
a5:83:c4:81:f2:07:7e:02:c4:2f:38:b0:41:cd:1d:
5e:b1:77:e1:32:64:d0:8d:a0:8d:7e:af:49:49:c1:
f1:8d:18:2a:31:d1:12:ad:f4:d7:85:6e:0f:21:47:
67:56:c5:c4:63:bb:16:da:3a:97:5c:6e:35:5c:c9:
96:a6:1c:38:a2:a3:47:4c:5e:f8:01:d0:a5:df:d9:
24:2e:c9:90:89:ff:db:2d:fe:2b:a3:ba:55:68:09:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:46:52:8A:B2:8B:E2:0D:D5:F0:4A:9B:C8:8B:41:36:2E:1C:17
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f8:ab:6f:c7:df:9a:04:c1:26:c3:a8:bb:ec:28:3c:c9:47:
d6:7e:0d:28:21:64:af:15:be:b4:06:65:45:84:19:42:37:29:
68:25:af:55:38:b6:2e:33:bf:74:dd:1e:ab:c0:69:4a:be:ae:
ec:74:f5:b3:4c:73:1f:29:7d:46:d8:47:50:81:9b:25:8f:f0:
7f:32:71:8a:cd:e1:72:cd:16:1f:c3:2f:df:20:ec:c9:27:bf:
c4:cf:25:d3:4d:6c:aa:fe:aa:1c:b1:9a:f5:44:05:61:39:f2:
c9:ce:31:80:f0:a0:0f:e6:9f:ae:14:be:1e:0e:b4:1c:53:71:
70:67:5c:18:14:86:e8:cc:11:f8:60:a7:eb:04:8d:28:d8:1b:
32:11:c5:b6:f5:41:2f:ad:05:4a:ee:96:6d:19:e4:6b:35:18:
01:a8:46:3d:1e:40:47:2b:26:ba:1c:bc:f1:44:e1:5c:53:48:
72:af:1e:df:55:58:e4:6a:9a:41:ac:42:bc:a8:bd:48:09:df:
cd:a3:14:c7:ae:a2:cc:c9:0c:09:40:d0:0a:78:86:04:4b:88:
4d:a8:3d:81:cc:c8:00:4f:39:26:ff:09:27:ef:86:81:79:97:
ff:b9:4f:26:68:30:0a:97:f7:a9:29:67:da:f8:77:2d:64:85:
3c:e4:df:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:33:15 2026 by rpki-client