Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: cLqJBZMbc81a2tnH4I1n/zGKjV3mxPkH+z37/+j+Ink=
Subject key identifier: F1:B1:85:ED:F1:B7:6E:2B:6B:A6:38:90:71:6D:92:44:8A:38:00:3D
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FB79FCBDB50A83EDC66AD3A3A53E77054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19DD
Signing time: Fri 31 Jul 2026 10:02:10 +0000
Manifest this update: Fri 31 Jul 2026 10:02:10 +0000
Manifest next update: Sat 01 Aug 2026 10:02:10 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: mFjFsP8EELjvxSkA+4TK94+FFsVVEfSLFCyDo4pY/fE=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:9f:cb:db:50:a8:3e:dc:66:ad:3a:3a:53:e7:70:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 31 10:02:10 2026 GMT
Not After : Aug 1 10:02:10 2026 GMT
Subject: CN=f1b185edf1b76e2b6ba63890716d92448a38003d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:c0:ad:4c:71:4a:2f:85:df:65:c1:f0:a3:
bb:f4:ad:19:38:c8:1b:3b:25:70:f2:af:a7:fa:95:
01:e0:b6:b3:19:cd:a8:44:b2:b3:68:13:92:af:a2:
2d:7d:1e:9e:89:63:a9:be:6f:89:1d:c5:53:17:ef:
b3:47:9a:16:0f:4d:43:09:c1:84:bf:d6:70:e3:88:
d6:2e:99:3a:d4:76:2c:60:9f:dc:07:77:fb:16:8a:
25:f5:22:06:f7:08:8c:b2:ff:4e:29:0c:97:88:66:
88:61:69:a0:4b:4b:48:41:3c:c9:84:0a:8e:3d:6c:
4a:d1:f7:84:43:c3:44:9d:cc:9e:fe:98:e3:65:bb:
3b:ac:45:68:0c:5b:98:04:9d:0f:74:d3:29:ed:cf:
88:66:82:e6:f2:f1:88:24:0e:ae:c4:7f:e1:bf:35:
ef:ad:9e:5b:22:fa:d4:6a:ce:7b:de:77:f2:57:e8:
9a:51:cb:21:6a:35:35:50:0d:aa:dc:57:44:55:6d:
2d:9e:2d:23:e0:93:2a:b5:d7:5f:bc:23:71:9e:88:
78:79:d7:16:98:9f:7e:01:d4:4c:4f:2a:07:e7:f5:
ac:78:0a:49:b0:f4:e6:d2:b1:cf:49:75:43:5d:93:
4e:a2:ed:26:97:20:be:a9:77:f7:0c:ba:a1:9e:d4:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:85:ED:F1:B7:6E:2B:6B:A6:38:90:71:6D:92:44:8A:38:00:3D
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:33:90:e2:ff:45:db:f4:68:b5:62:90:60:b4:8d:eb:8b:0a:
eb:f1:45:ef:bc:4a:82:e8:27:cb:79:f7:4d:90:cf:87:51:45:
8d:37:92:d0:46:dc:ff:0b:58:f6:67:67:97:8e:74:9b:61:7d:
3e:2b:39:b8:94:8d:61:9b:20:bd:43:ac:e5:95:c2:0f:8c:43:
9d:e2:43:fa:31:1d:22:6b:a6:55:48:e1:ce:36:ea:af:e2:89:
38:86:62:ab:5d:44:c7:35:f5:4e:03:59:dc:05:bc:2f:5c:4e:
5d:a9:1f:30:bb:57:0f:e0:cd:5b:5b:2d:85:1c:93:7a:af:0f:
7c:05:a9:b5:5d:38:6e:bc:aa:04:7d:cb:e9:ee:61:ce:79:f5:
34:9f:15:e5:26:7d:7c:57:38:27:6f:61:cc:17:a4:68:5d:a9:
6e:b0:c9:25:f2:5a:48:15:fc:40:b5:48:20:65:a5:3d:3e:07:
6f:a0:d3:f2:4f:c8:80:d7:24:90:f0:29:bd:2c:53:72:96:bf:
2d:30:07:85:0d:ba:be:37:33:71:65:67:8f:a5:dd:f4:21:5e:
e8:6c:00:0f:54:cf:e3:3b:ce:a3:08:2a:93:8b:1b:e4:5a:15:
0c:d1:49:c9:0e:ae:59:ef:46:cf:8e:a8:10:4f:05:24:3e:8f:
3f:1a:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 19:46:09 2026 by rpki-client