Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 38uFHE8vVcjDfneKhJHvMxOQrBglb69v4ttyY5ztLuw=
Subject key identifier: 5A:18:F6:8B:B2:85:C5:E4:71:D4:61:23:3E:C3:6D:73:49:7A:F1:DF
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FADF68FD3AFC521D57DDF6A4E9F6D22B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 13:00:44 +0000
Manifest this update: Wed 29 Jul 2026 13:00:44 +0000
Manifest next update: Thu 30 Jul 2026 13:00:44 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: AzVtS/ilRigLbfskK38FkX56kbJOexb6aOXqTEKr18E=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:8f:d3:af:c5:21:d5:7d:df:6a:4e:9f:6d:22:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 29 13:00:44 2026 GMT
Not After : Jul 30 13:00:44 2026 GMT
Subject: CN=5a18f68bb285c5e471d461233ec36d73497af1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:81:d4:ce:2a:ad:6a:60:3c:50:c1:3d:f2:
44:2e:85:e0:a4:6c:98:c6:e7:c3:27:56:3b:95:4e:
94:ae:b5:aa:86:09:90:71:ac:20:7e:05:70:fe:6a:
30:f4:19:69:ca:a3:77:a2:b9:25:d7:fb:d2:6d:39:
09:e9:2e:42:89:f6:36:82:0a:8a:c2:4a:88:b7:08:
06:48:c8:96:52:f2:f6:e8:2a:87:6b:b8:b8:b5:6b:
92:b4:8c:d9:9b:31:74:86:51:d4:e0:6b:26:e2:18:
59:19:2b:3c:67:b7:92:56:4c:d1:23:91:bd:15:02:
dc:9f:5f:0b:7c:c4:b5:7c:b1:d7:df:ba:ba:17:87:
11:0e:3c:8c:6b:ad:b8:5e:be:52:a0:c8:c1:33:6a:
66:07:a8:b0:aa:cc:da:93:f2:f6:3f:06:b8:86:f8:
aa:c9:93:55:42:99:25:68:80:c5:b3:1b:a2:24:37:
12:3e:07:ee:ac:66:36:64:8b:fc:0a:bd:c4:3a:e7:
4d:92:3d:9d:5c:40:26:4d:04:b3:d5:41:28:b2:ff:
e9:d2:1e:c5:b9:20:f8:8b:1b:db:c7:6b:53:48:e9:
f6:9a:1f:3b:ad:6b:b9:09:5d:8a:76:ae:cc:48:56:
41:08:ae:76:f6:b5:c0:4a:8e:6e:da:da:af:be:2d:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:18:F6:8B:B2:85:C5:E4:71:D4:61:23:3E:C3:6D:73:49:7A:F1:DF
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:31:a3:89:5b:99:72:80:17:cd:1b:f8:09:09:8d:5a:fa:0a:
e9:22:d5:e0:07:7f:2c:01:59:ae:07:e9:ba:3d:c4:32:4e:af:
3b:53:a3:47:7f:74:9d:79:25:89:16:c3:93:54:21:fc:3d:2b:
1b:a5:37:46:93:b6:15:05:45:ec:eb:f5:b2:d0:e6:90:50:f6:
65:4d:e4:f1:40:de:01:92:32:4a:36:bb:6f:fe:95:c1:c1:bf:
14:bb:87:49:be:7d:aa:13:73:15:68:39:49:89:49:43:e2:23:
38:26:d8:42:ef:46:54:d7:d4:00:82:9d:71:07:2c:00:7c:ca:
27:cf:06:e3:ae:18:24:da:69:fe:b3:27:ed:5f:43:9d:1a:44:
89:ed:cb:60:32:30:31:40:3a:56:fa:1a:bb:b1:7b:4d:c0:27:
06:27:96:8a:37:15:1c:73:a7:7e:22:59:5e:7d:89:08:ff:50:
ae:80:a2:34:ac:2d:f0:0a:09:2e:56:3a:06:f2:f2:23:a4:d5:
43:91:6f:74:47:ad:96:4e:4e:bd:43:c6:9e:54:b6:55:ce:d3:
78:df:ac:f7:52:dd:fa:d9:74:13:aa:72:e0:6f:86:98:65:66:
36:85:b6:9d:06:23:3c:7c:17:dc:ab:80:f8:b0:87:d4:fd:5d:
da:28:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:18 2026 by rpki-client