Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: pfKSb6z6J1VyOAme1yMEKiAX2Q5ihmrUGK5w1Qt+MBI=
Subject key identifier: 75:6A:D6:55:E2:DA:77:44:5C:6C:69:10:9A:32:48:FA:47:AB:A4:CF
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A07283F2A1534D21BC20D59BA231767F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A3E
Signing time: Sat 05 Sep 2026 17:00:44 +0000
Manifest this update: Sat 05 Sep 2026 17:00:44 +0000
Manifest next update: Sun 06 Sep 2026 17:00:44 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: TMmbgGDmQhS5gCDm2OLFI2MdcPWg63QvXjewwvusFyo=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:83:f2:a1:53:4d:21:bc:20:d5:9b:a2:31:76:7f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 5 17:00:44 2026 GMT
Not After : Sep 6 17:00:44 2026 GMT
Subject: CN=756ad655e2da77445c6c69109a3248fa47aba4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:a6:1b:d9:47:81:5b:6f:f9:b2:0d:73:97:
f7:21:45:62:d4:7b:ae:80:16:c5:f6:88:70:8b:6b:
0b:9b:5c:dd:4a:f3:dc:93:ad:c0:76:95:d0:1b:6a:
be:de:81:ca:b2:f5:a1:49:bf:46:1e:0b:78:92:80:
cb:e6:3d:ff:fe:75:06:b1:93:3e:82:e7:e1:6a:25:
f3:99:6c:f5:d4:c5:e5:41:70:d9:5d:4f:a4:03:a2:
50:91:8b:35:09:89:c7:10:42:b4:f6:01:5f:8e:a8:
34:8e:63:90:cd:80:7f:e3:71:e2:75:91:70:80:e7:
16:26:2c:05:0a:b6:fa:84:06:21:a9:cf:25:c6:f0:
bb:c2:34:48:56:3a:89:0b:23:26:08:a0:31:d1:ee:
c3:24:ea:77:cc:83:f5:3c:74:69:de:03:67:ae:3b:
f3:8d:e0:8a:c2:4c:a1:10:c6:87:f8:33:d2:c7:47:
cb:37:23:b7:ef:e6:37:9d:fb:eb:d6:fd:20:e4:36:
91:f3:2c:50:e2:a2:fe:83:4e:77:93:14:2a:d9:f2:
91:57:6b:8a:9a:97:33:7d:e4:14:41:61:83:da:83:
6e:e2:a2:fc:9d:00:56:52:a7:df:83:31:35:f7:c0:
df:10:d6:6e:49:2d:66:e1:33:11:39:df:a9:a7:93:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:D6:55:E2:DA:77:44:5C:6C:69:10:9A:32:48:FA:47:AB:A4:CF
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:21:b5:39:f0:77:4e:28:53:6f:76:c6:51:47:01:bb:49:90:
3b:dd:a9:9c:78:3f:fe:4f:d9:2f:ad:d1:79:aa:12:9a:4c:9f:
6c:47:93:66:c6:14:38:a0:7a:29:ac:d3:72:f2:5b:b7:a4:8d:
96:0b:07:5b:90:1f:d0:68:c5:66:b8:71:67:c6:e2:2d:42:5b:
ab:a5:ad:ef:4d:1d:97:14:70:f2:a0:7d:0f:71:95:e8:7a:05:
d9:0a:56:fd:e8:ef:b1:3a:4d:04:e1:c9:b8:ba:87:cb:f4:42:
19:44:80:5c:be:30:21:df:91:37:8c:13:5a:7c:1b:ce:e2:4f:
f4:f8:59:7c:d1:eb:18:ee:66:54:c3:66:1c:b5:d6:7c:c4:d1:
54:e1:70:c8:bd:61:06:a4:6d:6c:a2:34:79:da:c1:9d:41:a0:
7f:f1:83:4d:b6:9e:4e:5c:39:80:b7:34:cc:e3:ec:f5:30:91:
9c:30:9d:e6:42:2e:e1:39:4a:50:59:17:76:cc:2c:6e:63:49:
65:d7:de:bd:c4:cd:90:d2:71:17:eb:4d:8a:b9:66:ee:e6:d4:
b4:26:c3:a9:5a:ee:ad:45:10:75:c7:27:19:8c:a5:fc:de:11:
91:ca:6b:ed:ad:c6:fe:e7:6e:5a:78:00:26:90:66:dc:d3:6c:
98:7b:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 02:21:50 2026 by rpki-client