Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: r/zJkgJtdF0U0MqaW0P9kyL0NF4ouHT3N/hD216zqBA=
Subject key identifier: E8:50:F1:AE:CD:14:FB:DE:7C:CE:D2:A5:03:8A:56:F7:E7:77:00:5A
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A124D42D5919C79A8F40C8F2E37E062D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A9C
Signing time: Sat 10 Oct 2026 08:00:47 +0000
Manifest this update: Sat 10 Oct 2026 08:00:47 +0000
Manifest next update: Sun 11 Oct 2026 08:00:47 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 6bkO1UW2fovmAtBfGV7hCL8T/Qt7hs71OFLt7t9Gd9o=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:2d:59:19:c7:9a:8f:40:c8:f2:e3:7e:06:2d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 10 08:00:47 2026 GMT
Not After : Oct 11 08:00:47 2026 GMT
Subject: CN=e850f1aecd14fbde7cced2a5038a56f7e777005a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:61:9c:a7:93:b1:94:c2:9e:95:ed:d1:79:
31:33:b1:dc:55:bb:1e:78:cf:52:7f:8e:d4:fb:40:
9c:77:c9:dc:95:52:21:4c:13:09:5b:14:ef:6d:52:
de:cb:a8:c5:a5:fc:60:ea:3a:0f:33:83:93:ba:ad:
29:3f:93:cc:19:4e:0b:f4:5c:42:25:9f:e7:75:d8:
10:e7:52:fd:0f:e6:bf:b0:1a:2b:05:b3:83:9e:53:
3c:89:40:a0:e9:d5:5e:f4:84:f2:12:18:b6:2c:04:
77:f3:df:ba:5d:93:83:a8:bc:a2:63:ef:6d:1c:49:
a7:14:72:a6:38:e3:67:ae:e8:7d:76:6f:16:86:7f:
6f:14:4d:7d:22:97:8c:13:24:38:ca:2d:97:34:8e:
60:34:e4:bc:eb:a0:2e:ca:19:c9:65:3e:42:1e:1d:
57:95:9c:bd:20:7b:85:32:1a:0e:e7:04:7d:bc:04:
a1:0a:c4:2d:3d:aa:fa:3a:76:6c:43:3b:b3:3d:cc:
43:17:f9:d7:4f:20:03:52:34:67:af:16:94:b8:ff:
e3:15:53:54:a7:c1:f5:80:78:2d:fe:52:05:50:26:
af:4b:cd:ec:6d:ab:07:fe:3b:d4:f6:6a:5b:ca:a4:
a6:d2:ec:68:24:89:27:2d:70:32:27:19:bf:c7:4f:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:F1:AE:CD:14:FB:DE:7C:CE:D2:A5:03:8A:56:F7:E7:77:00:5A
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:21:d7:60:fc:df:a4:48:0f:a3:5b:96:a6:ae:29:d9:26:76:
64:2d:49:80:48:51:f2:fc:fa:31:ea:2a:c4:cd:10:e8:8d:c8:
04:6f:1f:87:93:06:5c:30:fe:c4:de:9a:4e:3b:1b:d9:1d:f3:
e6:c7:49:36:33:8b:dc:08:08:e7:38:ff:32:6c:f1:6e:c2:87:
51:37:50:b7:4f:75:e8:8b:36:30:11:af:b1:21:34:0b:39:0f:
e7:d4:5b:7e:08:91:0b:37:6b:67:83:35:cd:1e:8c:3f:b3:ae:
6b:5a:c9:9a:02:37:21:03:00:56:1c:31:b7:c6:22:f2:77:45:
fc:6a:9b:d3:94:8f:57:2b:b1:e3:07:04:24:84:3f:db:53:9e:
26:a0:29:02:b7:c4:e2:e2:a0:cf:0e:24:99:e5:27:6d:1e:cc:
2b:9d:54:c4:cf:28:b7:5b:5d:6d:93:9b:5a:be:9b:3f:e1:87:
4a:81:29:be:ae:40:a5:73:e5:1a:52:c3:8d:a6:db:84:d4:33:
60:30:7e:b8:7c:6b:8d:1f:4d:c0:41:46:97:dc:fd:ba:92:79:
8e:b7:d9:67:c3:b5:61:41:8b:75:a8:c2:91:15:1e:4d:5e:2b:
4e:4b:d0:14:07:b0:c6:73:c9:01:ea:00:a3:b9:e9:fc:b1:35:
7d:49:22:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEk1C1ZGceaj0DI8uN+Bi0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYxMDEwMDgwMDQ3WhcNMjYxMDExMDgwMDQ3WjAzMTEwLwYDVQQD
EyhlODUwZjFhZWNkMTRmYmRlN2NjZWQyYTUwMzhhNTZmN2U3NzcwMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XxhnKeTsZTCnpXt0XkxM7HcVbse
eM9Sf47U+0Ccd8nclVIhTBMJWxTvbVLey6jFpfxg6joPM4OTuq0pP5PMGU4L9FxC
JZ/nddgQ51L9D+a/sBorBbODnlM8iUCg6dVe9ITyEhi2LAR389+6XZODqLyiY+9t
HEmnFHKmOONnruh9dm8Whn9vFE19IpeMEyQ4yi2XNI5gNOS866AuyhnJZT5CHh1X
lZy9IHuFMhoO5wR9vAShCsQtPar6OnZsQzuzPcxDF/nXTyADUjRnrxaUuP/jFVNU
p8H1gHgt/lIFUCavS83sbasH/jvU9mpbyqSm0uxoJIknLXAyJxm/x09yRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhQ8a7NFPvefM7SpQOKVvfndwBaMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiHXYPzf
pEgPo1uWpq4p2SZ2ZC1JgEhR8vz6MeoqxM0Q6I3IBG8fh5MGXDD+xN6aTjsb2R3z
5sdJNjOL3AgI5zj/MmzxbsKHUTdQt0916Is2MBGvsSE0CzkP59RbfgiRCzdrZ4M1
zR6MP7Oua1rJmgI3IQMAVhwxt8Yi8ndF/Gqb05SPVyux4wcEJIQ/21OeJqApArfE
4uKgzw4kmeUnbR7MK51UxM8ot1tdbZObWr6bP+GHSoEpvq5ApXPlGlLDjabbhNQz
YDB+uHxrjR9NwEFGl9z9upJ5jrfZZ8O1YUGLdajCkRUeTV4rTkvQFAewxnPJAeoA
o7np/LE1fUki3A==
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:56:43 2026 by rpki-client