Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: VT48btlyZHf7OhYuRuq1HLMxr60ZJK7EXNsc64NIHVE=
Subject key identifier: 89:B2:36:46:EB:65:F5:7B:14:64:39:B0:0C:05:70:1E:0D:1D:80:BE
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0C8C6E8F92BEECD650422992F6E1CD183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 11:01:13 +0000
Manifest this update: Tue 22 Sep 2026 11:01:13 +0000
Manifest next update: Wed 23 Sep 2026 11:01:13 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: LcWwYoc08JRS9+U0RqfoxQwCp9RKXiv54aozFXxECEM=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:e8:f9:2b:ee:cd:65:04:22:99:2f:6e:1c:d1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 22 11:01:13 2026 GMT
Not After : Sep 23 11:01:13 2026 GMT
Subject: CN=89b23646eb65f57b146439b00c05701e0d1d80be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:a6:b8:00:40:92:85:f7:2d:c8:2b:e5:eb:
c4:50:a6:4a:d2:8f:5d:39:ff:08:33:51:a0:25:b1:
cb:20:c3:0b:a3:df:a6:d8:fc:e9:4f:fe:09:5a:c2:
a4:d8:28:a2:21:72:04:78:4f:f9:ec:67:f0:1c:85:
4c:19:7b:1c:aa:03:89:90:b0:6f:20:be:33:7c:e5:
46:25:24:7f:21:b0:06:1f:14:ef:95:16:6a:d8:ef:
88:6d:f2:53:d0:b7:07:26:97:d0:15:a4:5c:e4:99:
01:bb:a7:2d:7c:ea:34:14:4f:b3:b7:c6:4f:02:f6:
37:0f:2f:fa:e1:0d:93:c0:db:28:f8:f9:e8:e2:3c:
c3:43:82:16:b1:22:fc:8d:08:7f:7c:45:1e:5f:f2:
b5:6c:31:c1:da:82:8f:b9:14:6a:da:33:d9:c7:74:
fe:ab:a5:57:ec:a7:5a:0d:8b:5f:e2:89:13:c6:00:
e5:ca:17:7c:64:e3:35:84:d0:38:08:bb:64:ee:bc:
c2:0c:63:37:e6:56:13:e3:eb:aa:f4:2a:df:f1:37:
70:55:7c:2e:96:93:68:4f:5c:fe:e8:7e:9f:8c:e1:
0b:84:a5:34:9b:f9:2f:1b:52:03:c2:16:60:5e:1c:
e1:3a:e1:c8:ab:b8:54:4e:8f:94:2a:2c:31:ab:5f:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:36:46:EB:65:F5:7B:14:64:39:B0:0C:05:70:1E:0D:1D:80:BE
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e8:21:b3:bc:82:3c:e1:82:97:61:d4:45:0c:94:92:7e:f5:
2c:cc:8d:8c:44:36:6e:dc:78:28:b1:b5:58:11:b1:b8:66:ed:
db:cb:09:72:e7:96:f5:24:9b:d9:2e:ac:50:a2:be:b4:d1:35:
19:16:f8:37:19:c1:55:9e:95:8e:0d:e2:e4:8f:8c:cf:14:af:
08:ca:c5:0e:9a:18:7a:67:25:16:78:26:a6:82:6d:87:4f:46:
15:f7:5f:56:04:42:05:db:4b:cc:c7:77:cb:07:ec:22:84:6d:
1a:37:d8:c9:56:3d:d1:d7:4a:91:56:50:07:7d:e3:35:e8:d2:
dc:bc:3c:21:3a:3e:82:98:d1:a9:d8:8e:f8:ca:76:d5:be:22:
69:a2:a9:3c:2d:16:f4:8f:47:05:e5:8a:de:dc:18:e3:4b:80:
98:07:70:68:1f:a0:a7:2f:92:8b:63:e7:d7:50:6a:28:72:00:
99:9d:38:c1:fc:93:a5:8a:ce:31:58:33:4d:14:53:38:6b:3e:
51:73:fb:3e:20:77:25:28:fc:76:2f:31:5e:0b:d2:c8:c5:99:
bb:ec:54:92:49:56:f4:63:56:32:85:40:3e:84:d7:ee:0d:f0:
45:5d:d1:fc:12:c3:46:8a:c5:c8:e9:94:b5:68:2f:c6:72:b6:
65:71:00:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxuj5K+7NZQQimS9uHNGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwOTIyMTEwMTEzWhcNMjYwOTIzMTEwMTEzWjAzMTEwLwYDVQQD
Eyg4OWIyMzY0NmViNjVmNTdiMTQ2NDM5YjAwYzA1NzAxZTBkMWQ4MGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR+muABAkoX3Lcgr5evEUKZK0o9d
Of8IM1GgJbHLIMMLo9+m2PzpT/4JWsKk2CiiIXIEeE/57GfwHIVMGXscqgOJkLBv
IL4zfOVGJSR/IbAGHxTvlRZq2O+IbfJT0LcHJpfQFaRc5JkBu6ctfOo0FE+zt8ZP
AvY3Dy/64Q2TwNso+Pno4jzDQ4IWsSL8jQh/fEUeX/K1bDHB2oKPuRRq2jPZx3T+
q6VX7KdaDYtf4okTxgDlyhd8ZOM1hNA4CLtk7rzCDGM35lYT4+uq9Crf8TdwVXwu
lpNoT1z+6H6fjOELhKU0m/kvG1IDwhZgXhzhOuHIq7hUTo+UKiwxq1+EhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImyNkbrZfV7FGQ5sAwFcB4NHYC+MB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmughs7yC
POGCl2HURQyUkn71LMyNjEQ2btx4KLG1WBGxuGbt28sJcueW9SSb2S6sUKK+tNE1
GRb4NxnBVZ6Vjg3i5I+MzxSvCMrFDpoYemclFngmpoJth09GFfdfVgRCBdtLzMd3
ywfsIoRtGjfYyVY90ddKkVZQB33jNejS3Lw8ITo+gpjRqdiO+Mp21b4iaaKpPC0W
9I9HBeWK3twY40uAmAdwaB+gpy+Si2Pn11BqKHIAmZ04wfyTpYrOMVgzTRRTOGs+
UXP7PiB3JSj8di8xXgvSyMWZu+xUkklW9GNWMoVAPoTX7g3wRV3R/BLDRorFyOmU
tWgvxnK2ZXEAyw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:33:04 2026 by rpki-client