Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: doHItcssurxonD1v46Sg+AmfzXj9krxRWIYvH1zN9lU=
Subject key identifier: DE:F3:E0:D9:35:2D:23:4E:A0:6A:51:79:1F:7B:EE:91:CC:9F:57:5A
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0A7F229ABC395D5DED407EE21A3764533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A5A
Signing time: Wed 16 Sep 2026 02:01:00 +0000
Manifest this update: Wed 16 Sep 2026 02:01:00 +0000
Manifest next update: Thu 17 Sep 2026 02:01:00 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: QS+9Nuy5aJa4d8Df2BLrDqbWTgqdoWkxdi+bAawOR4w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:f2:29:ab:c3:95:d5:de:d4:07:ee:21:a3:76:45:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 16 02:01:00 2026 GMT
Not After : Sep 17 02:01:00 2026 GMT
Subject: CN=def3e0d9352d234ea06a51791f7bee91cc9f575a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:de:cc:3b:81:ec:36:5d:d3:fb:3c:c2:75:a5:
5d:2f:38:54:c3:b6:19:f7:e1:b1:ac:45:75:1f:55:
b2:2b:27:ad:c7:a9:dc:ba:46:94:da:48:1c:64:52:
d8:00:6b:99:49:1d:d8:a8:a4:0b:6e:12:89:a2:80:
0d:2d:cb:ca:36:58:25:11:90:fa:d5:61:5e:cb:0a:
f8:3a:04:d3:87:c7:d8:77:17:5b:5a:7b:2c:8f:9a:
6b:e3:6d:6d:3f:3f:ee:6c:5f:f7:0d:c3:e9:05:73:
01:36:ba:af:b5:e1:73:7f:23:59:7b:50:ae:bd:5f:
6d:8f:81:71:bf:3a:75:e9:d7:17:97:6a:7a:7a:d0:
99:ec:8a:73:71:6f:ea:e8:d0:d5:d8:94:04:b5:4a:
7c:61:2b:46:fa:14:4a:5c:4c:74:17:a8:2a:5f:68:
51:99:ea:da:f0:51:89:fb:08:c5:11:0b:61:1b:51:
b3:95:63:a0:0c:0e:b4:8b:c6:32:46:50:10:b4:5a:
0c:d2:7f:0e:72:5a:74:26:1a:5a:e7:b6:95:3b:e5:
5c:be:8d:a0:47:8d:19:b4:24:a5:05:18:ec:86:c7:
d2:c9:e0:32:10:53:19:fd:f3:24:e5:46:0d:07:d6:
58:94:ef:be:5b:38:c6:7a:ad:83:d5:bd:e1:5c:4a:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F3:E0:D9:35:2D:23:4E:A0:6A:51:79:1F:7B:EE:91:CC:9F:57:5A
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:81:54:b6:b5:fd:34:a9:96:42:2e:98:e3:04:0a:11:91:fc:
18:08:26:0a:5f:3a:8b:2c:a3:6e:bb:3a:52:6c:53:22:3b:43:
61:a0:37:8a:29:2e:b9:ff:3b:56:be:5c:83:b7:65:42:f7:17:
73:23:3c:c2:de:63:c2:28:e2:0d:b7:f7:e9:aa:1d:aa:10:02:
5c:eb:b3:f6:20:da:d1:16:81:8f:19:b0:4e:c4:80:24:8b:52:
a3:4c:93:84:1a:df:22:24:4d:97:a3:f2:8b:fa:3b:67:cd:a3:
6c:f5:32:20:89:11:67:22:58:88:9d:b0:a3:f4:43:c4:ad:15:
52:14:79:f7:0d:92:ab:4d:fb:c9:3a:37:89:a0:18:53:89:cc:
c4:5a:6e:7e:7c:c4:9e:bf:60:e2:bf:3c:a3:f8:cf:22:6d:9a:
37:4c:ed:46:b8:b6:63:9d:98:c0:16:3a:4c:c2:11:50:45:b7:
ff:45:04:92:b7:d3:c7:e1:29:fe:8b:71:b7:91:4a:51:3b:ae:
eb:a7:16:11:58:d4:4f:c5:20:da:da:a8:9d:d2:ee:b0:31:7c:
dd:df:e3:02:1e:e8:7d:ee:ce:6b:fa:89:31:13:e1:54:36:a4:
0c:85:13:7d:92:40:5f:3b:a8:2f:b6:a7:35:a0:10:4c:25:3e:
7e:c1:73:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCn8imrw5XV3tQH7iGjdkUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwOTE2MDIwMTAwWhcNMjYwOTE3MDIwMTAwWjAzMTEwLwYDVQQD
EyhkZWYzZTBkOTM1MmQyMzRlYTA2YTUxNzkxZjdiZWU5MWNjOWY1NzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N7MO4HsNl3T+zzCdaVdLzhUw7YZ
9+GxrEV1H1WyKyetx6ncukaU2kgcZFLYAGuZSR3YqKQLbhKJooANLcvKNlglEZD6
1WFeywr4OgTTh8fYdxdbWnssj5pr421tPz/ubF/3DcPpBXMBNrqvteFzfyNZe1Cu
vV9tj4Fxvzp16dcXl2p6etCZ7IpzcW/q6NDV2JQEtUp8YStG+hRKXEx0F6gqX2hR
mera8FGJ+wjFEQthG1GzlWOgDA60i8YyRlAQtFoM0n8Oclp0Jhpa57aVO+Vcvo2g
R40ZtCSlBRjshsfSyeAyEFMZ/fMk5UYNB9ZYlO++WzjGeq2D1b3hXErzWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7z4Nk1LSNOoGpReR977pHMn1daMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoFUtrX9
NKmWQi6Y4wQKEZH8GAgmCl86iyyjbrs6UmxTIjtDYaA3iikuuf87Vr5cg7dlQvcX
cyM8wt5jwijiDbf36aodqhACXOuz9iDa0RaBjxmwTsSAJItSo0yThBrfIiRNl6Py
i/o7Z82jbPUyIIkRZyJYiJ2wo/RDxK0VUhR59w2Sq037yTo3iaAYU4nMxFpufnzE
nr9g4r88o/jPIm2aN0ztRri2Y52YwBY6TMIRUEW3/0UEkrfTx+Ep/otxt5FKUTuu
66cWEVjUT8Ug2tqondLusDF83d/jAh7ofe7Oa/qJMRPhVDakDIUTfZJAXzuoL7an
NaAQTCU+fsFzbg==
-----END CERTIFICATE-----
Generated at Wed Sep 16 12:30:55 2026 by rpki-client