Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: RLIqHQ6KMToaqt8XXI7hA+Ix1P4t0dk4518uWT/1sPU=
Subject key identifier: E3:C1:F6:47:B1:E6:CB:09:AB:7F:1D:67:D2:D2:41:A1:DD:0B:9E:C6
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0084D4894BD101153F8BDEEDC0F981829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A07
Signing time: Sun 16 Aug 2026 02:01:17 +0000
Manifest this update: Sun 16 Aug 2026 02:01:17 +0000
Manifest next update: Mon 17 Aug 2026 02:01:17 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: Ru0Qtllt0tu/DxUKOfkOc6Z8ohndBDwtf0yJTPWeN0Q=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:08:4d:48:94:bd:10:11:53:f8:bd:ee:dc:0f:98:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 16 02:01:17 2026 GMT
Not After : Aug 17 02:01:17 2026 GMT
Subject: CN=e3c1f647b1e6cb09ab7f1d67d2d241a1dd0b9ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:21:3d:42:27:fc:90:e5:24:62:87:65:57:
18:2b:a4:00:a4:ab:3b:e3:c5:de:b5:55:30:cb:fe:
18:05:aa:07:9f:2b:b1:52:ca:03:2b:ab:e4:99:e7:
8e:6f:74:14:50:94:d6:c3:f1:c1:d0:ae:8c:b1:f8:
18:21:42:f7:ac:cf:fa:6d:e0:ab:9f:b7:c1:b9:39:
f9:32:62:a5:21:07:c6:c0:ec:65:65:45:98:fa:6c:
1b:e9:06:28:cb:cd:e9:dd:7a:fd:c8:79:7c:78:ff:
06:af:cc:f8:18:26:c1:ce:4b:8e:9e:8b:ef:b0:c4:
3f:00:ff:00:d9:13:c6:bb:47:80:71:94:d1:43:45:
46:37:b5:46:43:ce:d3:78:b3:81:34:54:0c:c7:c2:
d9:75:10:ec:ac:b2:da:74:c6:71:f2:b3:9d:d4:76:
ef:29:61:3a:a2:e1:35:f4:25:8d:49:b7:69:2f:5e:
00:6e:f5:74:a4:6c:40:dd:81:d3:bc:25:1c:52:95:
e8:6b:0e:39:1d:7d:72:fa:7c:a3:40:48:31:58:0d:
4c:d9:1f:c3:12:70:dc:63:23:c5:92:81:8a:8c:e8:
be:fa:37:aa:86:41:5c:3d:73:a8:2c:dc:94:74:7d:
f3:ac:db:75:05:4e:14:10:f2:ea:33:f7:2e:d3:b3:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C1:F6:47:B1:E6:CB:09:AB:7F:1D:67:D2:D2:41:A1:DD:0B:9E:C6
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c2:97:7e:f7:05:29:c1:69:a6:0e:2d:1e:15:34:8d:6d:c8:
3a:a1:b9:74:b4:4f:8d:ac:29:ee:b6:a0:77:34:bd:38:82:61:
a8:4a:93:24:a8:b5:b2:fa:76:7d:83:07:f2:1d:a1:d1:e7:c2:
71:52:60:68:d9:cf:95:c8:72:33:15:8e:23:88:20:75:1c:5c:
34:ac:f4:d4:98:b9:49:dc:c0:62:1d:f6:ee:ba:a9:64:59:ca:
15:ed:6f:e0:80:9c:c7:ae:92:16:72:95:96:b1:e2:12:ee:28:
6b:89:df:b7:64:8f:0f:28:1b:f0:47:8b:15:95:c7:40:81:f2:
76:48:dc:e8:94:f3:8e:4f:27:93:12:4e:84:c4:af:61:76:38:
3b:5c:89:e6:3d:99:41:38:aa:91:9b:00:aa:15:f1:84:9b:ee:
49:fe:b0:6d:1e:dc:8a:2a:43:0d:8b:ef:ab:55:b6:64:7d:3b:
40:96:bd:ab:38:df:0d:14:e4:3c:9b:47:a3:09:a5:25:fa:fb:
27:cf:34:73:96:09:36:cf:d5:8b:1e:44:1b:cf:84:a8:32:79:
65:da:40:7e:a7:5e:09:92:4d:76:ea:94:d0:6f:72:20:15:20:
52:28:62:62:b8:1b:d9:da:c8:6e:8e:b1:4c:4c:36:0d:47:f4:
33:b8:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 07:01:29 2026 by rpki-client