Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: ZCmmnmdVi49RUYoLUqkGo4c56c7UG5hv6BM6Ee5I2Xg=
Subject key identifier: A3:14:B7:65:53:2F:6A:94:83:C2:38:3A:2B:95:DD:8D:B0:19:3F:4F
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FF30F8752C8A42DB6C5ADBD633CB10714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19FC
Signing time: Tue 11 Aug 2026 23:01:48 +0000
Manifest this update: Tue 11 Aug 2026 23:01:48 +0000
Manifest next update: Wed 12 Aug 2026 23:01:48 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: yiTzU5aGDfQbA6R/ESJFy5O7VLyx+7o7yoP9mHxRlHI=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 21:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:0f:87:52:c8:a4:2d:b6:c5:ad:bd:63:3c:b1:07:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 11 23:01:48 2026 GMT
Not After : Aug 12 23:01:48 2026 GMT
Subject: CN=a314b765532f6a9483c2383a2b95dd8db0193f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:6f:1d:61:b2:39:54:a9:82:bd:d3:4e:68:
5c:5c:be:e9:fc:74:bd:bb:7e:16:76:9b:48:ba:64:
f0:41:90:87:20:02:91:29:39:ad:cc:78:a1:a3:59:
ab:69:84:d9:dd:e9:99:7f:5f:f6:c8:a2:35:62:50:
88:52:63:b2:e3:1e:06:07:d2:be:29:fc:90:73:be:
b6:b3:90:e8:2b:6d:06:10:be:ee:a4:a1:b9:0b:62:
07:d0:f3:19:2c:15:5d:b8:55:48:58:d2:92:ab:ae:
86:a5:f0:a1:56:f9:f5:40:bd:b0:16:d7:76:f7:c8:
39:13:a4:7e:4d:a5:f7:9e:8f:9e:af:f9:a0:cb:a3:
1d:9d:0a:ad:24:9f:01:a8:38:79:42:97:c9:07:62:
2b:64:92:f0:62:d6:f0:ea:0a:da:cd:ae:be:b3:51:
21:d8:55:c3:e1:7b:ca:0f:91:97:b6:82:ec:6d:fd:
96:4a:ad:8a:e8:cf:a6:98:8f:33:16:1a:77:f2:d4:
17:d0:61:40:d3:2f:05:c1:ec:4f:63:b1:bc:8e:1a:
90:d1:9e:d5:6b:42:e3:57:8a:b4:fb:b5:c0:0a:49:
a7:c3:f0:92:7c:e1:df:38:1e:c1:8e:60:15:94:7c:
8f:56:8c:8b:c4:55:81:45:ff:93:d3:b2:0f:a7:64:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:B7:65:53:2F:6A:94:83:C2:38:3A:2B:95:DD:8D:B0:19:3F:4F
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2a:d8:db:94:97:5b:8b:46:12:20:00:fa:5a:51:41:b1:93:
7f:61:6a:13:e1:33:55:63:9a:ac:42:ac:f9:19:5f:a2:ad:d0:
47:70:05:d8:37:69:ae:f8:ae:df:d1:e1:71:ea:39:2f:b8:a1:
8c:84:c6:f6:ce:a4:e9:f2:93:09:8d:b0:bd:07:25:57:ca:e9:
83:35:50:8e:4c:5c:8d:b5:bb:4d:1a:da:7a:4c:d2:4e:58:39:
21:b5:8b:02:55:ae:fe:46:bd:d9:24:3e:ec:64:1b:b4:f0:0c:
59:04:af:f7:34:a5:47:eb:24:99:5d:03:27:a0:c9:e6:69:4a:
60:b0:be:ec:c3:ef:6a:71:c2:cf:85:22:26:e5:7a:d5:c3:d6:
03:ac:ab:fa:32:34:13:4d:9f:1e:1a:f2:62:69:d5:97:5e:0b:
c9:a5:46:07:03:6f:4b:63:8d:c0:5f:c3:10:57:36:54:6a:4f:
75:32:94:7d:9e:14:ae:ed:e8:74:3b:e6:f8:1e:d8:2c:fd:d7:
9d:eb:e1:fa:c8:67:29:10:05:5c:55:54:18:4e:26:ea:92:c0:
f4:e5:3d:24:44:28:51:aa:e2:da:e3:ce:42:02:b6:19:28:49:
45:c6:68:b1:27:6e:84:b3:4d:83:1a:c0:c4:eb:cf:4a:d8:ec:
35:ec:1f:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/zD4dSyKQttsWtvWM8sQcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwODExMjMwMTQ4WhcNMjYwODEyMjMwMTQ4WjAzMTEwLwYDVQQD
EyhhMzE0Yjc2NTUzMmY2YTk0ODNjMjM4M2EyYjk1ZGQ4ZGIwMTkzZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15pvHWGyOVSpgr3TTmhcXL7p/HS9
u34WdptIumTwQZCHIAKRKTmtzHiho1mraYTZ3emZf1/2yKI1YlCIUmOy4x4GB9K+
KfyQc762s5DoK20GEL7upKG5C2IH0PMZLBVduFVIWNKSq66GpfChVvn1QL2wFtd2
98g5E6R+TaX3no+er/mgy6MdnQqtJJ8BqDh5QpfJB2IrZJLwYtbw6graza6+s1Eh
2FXD4XvKD5GXtoLsbf2WSq2K6M+mmI8zFhp38tQX0GFA0y8FwexPY7G8jhqQ0Z7V
a0LjV4q0+7XACkmnw/CSfOHfOB7BjmAVlHyPVoyLxFWBRf+T07IPp2QnbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMUt2VTL2qUg8I4OiuV3Y2wGT9PMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCrY25SX
W4tGEiAA+lpRQbGTf2FqE+EzVWOarEKs+Rlfoq3QR3AF2Ddprviu39Hhceo5L7ih
jITG9s6k6fKTCY2wvQclV8rpgzVQjkxcjbW7TRraekzSTlg5IbWLAlWu/ka92SQ+
7GQbtPAMWQSv9zSlR+skmV0DJ6DJ5mlKYLC+7MPvanHCz4UiJuV61cPWA6yr+jI0
E02fHhryYmnVl14LyaVGBwNvS2ONwF/DEFc2VGpPdTKUfZ4Uru3odDvm+B7YLP3X
nevh+shnKRAFXFVUGE4m6pLA9OU9JEQoUari2uPOQgK2GShJRcZosSduhLNNgxrA
xOvPStjsNewfpA==
-----END CERTIFICATE-----
Generated at Wed Aug 12 04:20:46 2026 by rpki-client