Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: ed4e75oylvDz9YZcbtph9yCyNxPu7WI89hGcSG8x9pI=
Subject key identifier: 8B:F5:2F:76:34:86:1B:27:61:24:98:E0:F6:50:6F:84:F8:DE:53:B2
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FA2601A19BC27401048F8C95896ED5CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 07:00:34 +0000
Manifest this update: Mon 27 Jul 2026 07:00:34 +0000
Manifest next update: Tue 28 Jul 2026 07:00:34 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: kGAGnZ/Q9HA14HJznGr7QZWTZmJf39wCAuZ2MwGlQHs=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:1a:19:bc:27:40:10:48:f8:c9:58:96:ed:5c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 27 07:00:34 2026 GMT
Not After : Jul 28 07:00:34 2026 GMT
Subject: CN=8bf52f7634861b27612498e0f6506f84f8de53b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:d5:e0:95:4a:51:90:4f:fa:d1:a6:72:4a:
f8:a4:b3:04:e6:50:48:ce:a8:98:8c:a7:55:15:64:
c6:27:8d:8d:33:6b:28:f6:df:3e:a7:8e:e3:38:ac:
d6:ac:6f:af:f2:93:7f:b5:80:f8:01:72:f3:91:4b:
e9:10:23:d1:2f:75:50:bf:74:87:e9:e8:e7:9d:f8:
8b:9e:05:12:a3:34:1c:14:23:31:00:85:2d:59:dd:
d0:a4:26:65:2d:fe:27:f2:e7:bc:89:fe:19:57:b2:
d5:f2:78:40:19:21:c4:b3:64:e7:5b:c7:d8:8b:a1:
71:34:c0:3d:77:2b:09:23:86:70:ae:93:66:50:90:
45:3c:34:28:06:d7:ca:c2:29:d6:e6:e3:ca:dc:da:
3f:7c:5f:68:a5:bd:d6:cd:09:8f:fe:a4:21:d5:2b:
e3:ea:b4:1f:e9:a2:f7:4f:09:b4:c7:21:ae:18:be:
fc:98:3d:42:7b:c5:f3:6c:48:b6:1e:76:51:b4:78:
e7:ec:9d:90:57:5e:35:f8:fb:22:58:15:7f:ac:bb:
d1:93:9d:e3:bb:01:47:e6:d7:b6:a2:01:3e:af:56:
cb:32:bf:ed:a4:27:10:3e:53:df:38:e8:d4:87:1b:
b7:0e:61:0b:9e:91:97:79:9b:58:35:16:21:f8:7e:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:2F:76:34:86:1B:27:61:24:98:E0:F6:50:6F:84:F8:DE:53:B2
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bb:b9:7a:3e:56:00:33:bd:7a:bf:6c:cc:78:3f:b0:a5:ef:
bf:02:d9:5d:0f:ab:ce:8a:af:aa:98:63:c5:de:93:21:50:fe:
b6:d9:20:34:b0:b5:6a:fa:d0:d9:f9:45:79:f6:7b:4c:57:55:
fe:f0:6e:ec:01:86:34:a2:10:c0:41:b9:3b:b6:74:a3:b6:b4:
f8:35:f2:79:bb:ba:77:15:5c:56:a3:c2:a7:3c:71:db:58:e8:
31:88:32:e8:40:de:40:50:56:87:a1:7b:14:fb:bf:da:b2:d8:
17:f4:8c:28:64:46:78:73:c4:d0:0e:4e:6c:a7:cf:e7:52:3f:
1e:3a:e2:ef:6e:7c:f4:56:99:29:09:c9:8b:b5:23:d9:df:ed:
b4:28:39:4e:12:b3:df:97:4a:1b:10:dc:28:4a:76:d3:02:7f:
be:51:ed:50:13:a4:67:75:14:f3:08:e7:d9:78:cc:5b:a5:f2:
08:bb:da:5e:03:34:06:cd:78:1a:80:e2:2e:bb:65:53:0a:86:
f8:3b:4f:1c:05:c5:f7:e6:aa:bf:3f:1d:4a:3e:36:ee:b5:58:
a4:6b:2c:aa:0a:db:d9:d2:3e:9e:20:55:e4:d5:06:ff:97:10:
75:f9:a2:c2:15:5f:cb:58:64:3e:01:0c:88:1e:6e:ba:3f:80:
79:cb:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:40:58 2026 by rpki-client