Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: kHmc0SErONij3MD+M2OvUV2gbYl3ajSJDqYGdZaH6hQ=
Subject key identifier: D4:4B:40:07:2D:0A:EE:75:63:3A:9F:08:66:F0:47:36:A7:12:0A:A3
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0DC16D091D5CE031D48527B34025FC016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 05:01:17 +0000
Manifest this update: Sat 26 Sep 2026 05:01:17 +0000
Manifest next update: Sun 27 Sep 2026 05:01:17 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 4MUeDRKaI1pA5m54oC18eGCikz53RnuZixdPPhN5YpM=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:d0:91:d5:ce:03:1d:48:52:7b:34:02:5f:c0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 26 05:01:17 2026 GMT
Not After : Sep 27 05:01:17 2026 GMT
Subject: CN=d44b40072d0aee75633a9f0866f04736a7120aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:a2:01:75:1e:00:5f:d2:f6:7b:c2:be:bf:
22:6b:73:66:cf:7d:c2:a5:7a:7a:fd:36:0c:40:e1:
2a:00:25:69:ca:4e:bb:f8:94:7d:a3:03:60:67:b7:
fb:e9:f7:c9:6b:63:bf:90:09:fc:72:78:ae:0b:f9:
4f:f6:ba:87:b2:5c:e2:5d:e1:41:e7:d5:8e:b2:d3:
2e:00:5d:ee:c9:b0:58:bd:8b:24:0b:2b:a7:75:02:
1a:8e:b3:49:04:21:61:c4:2c:03:16:b2:44:1b:2b:
33:e9:cf:62:8f:ab:74:6e:d6:39:6f:e2:8e:5a:be:
94:0a:3a:ba:f0:b5:f5:b2:45:7f:8c:1f:24:a2:07:
27:21:4f:72:7b:52:f4:c6:73:42:97:8e:37:56:23:
46:2b:60:7d:e1:dd:65:d9:e7:57:14:7e:dd:61:e7:
52:89:67:49:b0:ef:dd:11:28:75:27:cb:5c:04:c1:
68:70:76:39:19:6e:55:e4:d8:10:96:69:b6:da:e6:
dc:f1:26:b2:98:50:c3:8a:ae:1a:3c:94:39:6c:a1:
14:11:02:40:e8:fe:ce:08:43:d2:76:7a:f4:1d:f4:
a2:dc:ee:67:00:55:5d:37:fe:85:93:25:1c:53:e6:
05:b0:a0:01:84:cd:f3:8a:a0:09:88:aa:bd:ef:b1:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4B:40:07:2D:0A:EE:75:63:3A:9F:08:66:F0:47:36:A7:12:0A:A3
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f4:ca:e0:15:ab:49:2e:43:c7:bb:be:72:56:da:34:b5:27:
aa:bf:ae:61:99:4a:3a:b1:14:f0:8b:53:60:1c:c7:3d:14:53:
7b:bd:ef:60:ca:bc:c5:15:b5:c5:e8:56:00:dc:3d:86:ba:fa:
c2:de:57:05:1f:81:5a:3a:2c:ab:45:b6:05:2e:99:b9:77:9a:
b7:2c:2e:8d:97:94:56:25:6e:b6:09:c5:86:4b:3c:e7:a3:64:
f5:a7:d5:84:1c:41:72:e7:c4:60:85:c3:53:f6:b4:f7:f4:e1:
aa:f1:37:58:32:69:6a:09:6f:ff:1d:36:5e:ec:60:f8:f5:a4:
93:ac:5c:7f:5b:05:4c:68:05:2f:91:b7:cb:72:b2:ad:2e:98:
c3:be:27:36:3f:e7:fd:32:31:95:43:cd:32:44:fb:7f:fc:1e:
cb:9e:0d:83:7f:c0:eb:3e:1c:78:4a:85:bf:38:06:69:3e:73:
0f:42:06:b3:1f:af:26:59:02:99:e6:4d:35:f3:ae:df:70:f1:
85:1c:7b:60:f8:c8:2a:95:c9:33:17:ce:96:10:e4:18:6e:cd:
13:5b:ea:9e:cf:24:58:de:8c:18:a9:da:42:fc:b1:a6:96:7a:
0d:e5:55:f0:62:0c:c0:bd:85:32:e2:f3:81:29:0f:1d:2e:cf:
c6:28:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:47:18 2026 by rpki-client