Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: Ye5cNEFwy5WIcaoP6EeNxctbpTMIPvw0dV4TF57OShc=
Subject key identifier: 02:4C:C5:33:AA:BD:BA:60:7E:6E:37:62:22:0C:5D:A2:F5:6C:A5:64
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A198B38FBDC93A60BBFAE765B4BF66A2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1AD8
Signing time: Sun 01 Nov 2026 20:01:06 +0000
Manifest this update: Sun 01 Nov 2026 20:01:06 +0000
Manifest next update: Mon 02 Nov 2026 20:01:06 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: NNUUnKoCv7VQcCr+A+RYTWSq/zs09GikJ448/48mvpQ=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:b3:8f:bd:c9:3a:60:bb:fa:e7:65:b4:bf:66:a2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Nov 1 20:01:06 2026 GMT
Not After : Nov 2 20:01:06 2026 GMT
Subject: CN=024cc533aabdba607e6e3762220c5da2f56ca564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:4d:b4:41:3b:de:dd:92:90:5d:b3:ea:87:
1f:fb:34:5f:4a:48:d3:e5:58:88:be:9a:73:a1:48:
47:c8:7e:a2:ec:e6:32:7f:06:b8:02:41:c0:bb:f5:
e7:24:22:4f:3e:62:5d:27:51:6f:15:5e:98:b1:2d:
45:49:84:e0:45:f6:13:a0:2a:a1:ed:8b:b7:af:93:
d6:c7:3f:a1:a8:2e:0f:1f:4a:56:df:ef:70:a0:1c:
df:f3:ef:a4:fe:81:65:d0:70:8f:ab:4a:84:7b:36:
78:85:ba:2a:1a:ce:3d:36:99:89:0d:cf:2e:23:f7:
9d:73:b4:06:9f:67:a1:79:4e:34:3b:dc:31:f0:d0:
7c:bf:9c:0e:ce:3b:79:bb:e3:fb:85:36:11:44:6a:
2c:80:22:f0:ab:14:f3:da:4b:ca:b5:b8:9f:db:76:
32:7e:5d:72:23:0c:62:74:24:9a:44:c3:de:b2:3c:
b1:09:ce:3f:24:7c:b3:1d:1f:3b:7f:c2:a7:d0:48:
d6:73:63:ab:35:72:a0:f0:19:39:9e:5d:b2:42:6b:
d3:35:85:24:00:39:a2:7d:ec:4b:e1:ef:4a:ea:c8:
13:9c:72:96:a4:16:47:80:99:44:b9:b2:56:35:03:
73:d0:c0:c6:36:70:69:9c:be:b6:43:7d:f7:3c:ca:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:C5:33:AA:BD:BA:60:7E:6E:37:62:22:0C:5D:A2:F5:6C:A5:64
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5a:65:c7:45:fe:54:81:f9:b4:6e:d3:2b:f8:6d:0f:1c:44:
52:3b:86:5f:56:8e:36:0b:65:d2:51:7d:3b:7a:79:65:20:81:
41:fa:a7:be:d9:56:6e:49:4b:f0:25:17:d6:d9:92:74:fd:e5:
a9:e1:c5:fa:08:56:9c:7f:c5:2b:32:b9:64:23:36:d6:1f:7b:
00:4c:be:3d:ef:fb:4c:ce:2b:e2:fc:1b:1d:a9:06:2d:b0:c5:
0e:25:b6:2b:f0:f0:ee:e4:7f:8a:0b:d1:9a:b3:10:f0:34:d2:
b9:30:38:1b:30:4b:6d:9b:af:0a:f7:5f:1d:89:34:32:b9:cd:
e3:f0:18:61:0f:6b:5b:77:e2:1d:02:00:c0:11:8b:28:5f:ca:
08:c8:0a:16:64:c2:70:26:c9:f7:29:55:38:0a:52:55:f1:0d:
7c:73:b3:44:bf:fa:be:4a:bf:06:e1:fb:15:42:85:95:45:6d:
6d:7a:02:6f:08:70:2b:88:34:07:8b:af:3e:e1:20:d7:d9:11:
ca:82:7f:f8:18:27:58:45:67:8f:20:75:74:f1:e3:7c:df:a1:
8c:59:f1:23:22:40:b7:26:ff:8d:22:00:1d:ba:f4:a9:14:5e:
a7:ed:98:17:5c:db:eb:92:dd:e9:71:87:0e:77:b4:49:81:3a:
22:15:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 05:53:56 2026 by rpki-client