Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: Q7hEpoVmKgt4VvWb+FVMXCbCva/0eKMKYqcdA4M5i2w=
Subject key identifier: 90:B3:F9:76:76:BD:B6:E2:BB:7F:94:54:81:A5:54:D9:AF:67:BF:56
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A106936AEF9D773D9E8D056DC3806B56EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A8B
Signing time: Sun 04 Oct 2026 11:01:26 +0000
Manifest this update: Sun 04 Oct 2026 11:01:26 +0000
Manifest next update: Mon 05 Oct 2026 11:01:26 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 5MO/GpU336fm23Cyl8bqY6NA+2LHpVamfjvSQKAznzc=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:6a:ef:9d:77:3d:9e:8d:05:6d:c3:80:6b:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 4 11:01:26 2026 GMT
Not After : Oct 5 11:01:26 2026 GMT
Subject: CN=90b3f97676bdb6e2bb7f945481a554d9af67bf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:e1:d2:3b:7f:09:c7:d7:d9:91:e3:1e:87:
ed:c7:3d:ff:5f:3f:f8:e3:04:4d:fd:f1:1c:c4:d0:
9f:63:c2:7b:85:a3:32:38:5c:95:70:e5:e3:d7:70:
15:3e:65:0d:69:d5:bf:da:f4:7d:08:3a:59:6d:8f:
d7:70:0c:e4:fd:ff:e7:c8:04:02:13:20:f6:29:ab:
8e:7b:e1:5a:e5:43:d2:ea:a4:27:ef:c2:ae:aa:12:
85:2f:23:ae:09:6f:7f:0a:b1:5f:da:2b:8b:4b:a8:
87:99:76:b1:93:e7:54:e3:99:9b:dc:49:9e:d2:a5:
11:34:c8:86:4c:1d:48:19:03:f3:ba:2a:05:62:29:
0c:62:49:7d:2c:49:5e:0e:88:54:87:63:f8:54:76:
5e:0f:1d:5c:21:dd:bf:46:19:2d:33:b8:27:8d:d4:
82:90:91:23:a4:6d:85:09:aa:b7:72:b2:16:0c:2e:
1e:b3:f0:61:db:1b:9b:13:37:7e:56:4b:48:46:fb:
ff:96:3a:2f:24:e6:d2:74:63:ff:b5:3e:27:38:1e:
31:79:12:c5:1d:87:4a:f4:ae:5d:a7:95:c1:26:3f:
fb:12:0c:3b:18:85:4a:41:c6:5d:cd:ee:78:13:d2:
c6:3f:61:39:d6:82:0e:cb:8f:94:f9:9a:c0:49:cc:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B3:F9:76:76:BD:B6:E2:BB:7F:94:54:81:A5:54:D9:AF:67:BF:56
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:85:22:fe:67:7b:38:ff:ff:2c:a9:74:e0:13:dd:27:8b:f7:
44:61:06:dd:13:16:b6:a0:f5:78:ae:d5:81:68:30:80:bd:10:
74:9b:a2:0b:4f:5a:ed:b1:df:fe:0a:73:d8:e7:f6:24:d6:a6:
38:e2:4d:af:29:f8:d1:84:7b:b8:3a:93:c3:fb:40:bd:4b:da:
4d:3a:b1:05:83:ba:c4:36:b8:0a:58:6a:13:ed:69:46:d6:fc:
8c:cd:cc:7b:3f:c7:fd:d5:c3:3b:64:97:63:36:16:e8:ca:d5:
51:4f:cc:8d:98:b3:af:57:f1:3c:dc:f4:ad:c0:1d:5e:1c:d8:
5d:c4:a7:6e:d8:95:14:8d:91:4d:a5:aa:3d:82:be:d1:3a:50:
ed:8b:b3:1e:b7:f3:1e:0c:6a:fb:6a:a0:0e:21:7a:f8:ee:7b:
a9:c4:43:8c:7d:5b:83:b3:db:c8:86:42:e0:b1:3d:9e:1b:05:
b3:99:ec:34:d3:07:be:ea:b0:ab:f4:72:9f:32:15:c0:3c:00:
3c:2e:4c:a2:82:a5:f6:57:70:f6:3e:d6:ec:c3:5d:48:67:7c:
cd:47:ba:df:15:96:f9:5e:df:c0:83:6c:40:6f:b0:1f:7c:d5:
ad:d7:cb:7d:65:7d:c8:64:6f:48:7b:ad:7b:8e:c0:34:b4:0f:
33:be:cc:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGk2rvnXc9no0FbcOAa1buMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYxMDA0MTEwMTI2WhcNMjYxMDA1MTEwMTI2WjAzMTEwLwYDVQQD
Eyg5MGIzZjk3Njc2YmRiNmUyYmI3Zjk0NTQ4MWE1NTRkOWFmNjdiZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GPh0jt/CcfX2ZHjHoftxz3/Xz/4
4wRN/fEcxNCfY8J7haMyOFyVcOXj13AVPmUNadW/2vR9CDpZbY/XcAzk/f/nyAQC
EyD2KauOe+Fa5UPS6qQn78KuqhKFLyOuCW9/CrFf2iuLS6iHmXaxk+dU45mb3Eme
0qURNMiGTB1IGQPzuioFYikMYkl9LEleDohUh2P4VHZeDx1cId2/RhktM7gnjdSC
kJEjpG2FCaq3crIWDC4es/Bh2xubEzd+VktIRvv/ljovJObSdGP/tT4nOB4xeRLF
HYdK9K5dp5XBJj/7Egw7GIVKQcZdze54E9LGP2E51oIOy4+U+ZrAScyPUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCz+XZ2vbbiu3+UVIGlVNmvZ79WMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoUi/md7
OP//LKl04BPdJ4v3RGEG3RMWtqD1eK7VgWgwgL0QdJuiC09a7bHf/gpz2Of2JNam
OOJNryn40YR7uDqTw/tAvUvaTTqxBYO6xDa4ClhqE+1pRtb8jM3Mez/H/dXDO2SX
YzYW6MrVUU/MjZizr1fxPNz0rcAdXhzYXcSnbtiVFI2RTaWqPYK+0TpQ7YuzHrfz
Hgxq+2qgDiF6+O57qcRDjH1bg7PbyIZC4LE9nhsFs5nsNNMHvuqwq/RynzIVwDwA
PC5MooKl9ldw9j7W7MNdSGd8zUe63xWW+V7fwINsQG+wH3zVrdfLfWV9yGRvSHut
e47ANLQPM77M5w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:51:07 2026 by rpki-client