Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: QHh1PYlZ+jHnj497Z25WhBshop0mYpKvu855l+zCgU8=
Subject key identifier: 22:AB:3A:76:0F:B0:CA:B2:5B:A0:10:7B:B2:7A:80:85:40:AB:1A:4C
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FBD6ADF2D58BA990ACBCE1FE52FB57B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19E0
Signing time: Sat 01 Aug 2026 13:02:05 +0000
Manifest this update: Sat 01 Aug 2026 13:02:05 +0000
Manifest next update: Sun 02 Aug 2026 13:02:05 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: oHIMmgSEDsPpO9TLG6j1Sr2eGjAk+OpyLW6TkEuC9Ig=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:6a:df:2d:58:ba:99:0a:cb:ce:1f:e5:2f:b5:7b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 1 13:02:05 2026 GMT
Not After : Aug 2 13:02:05 2026 GMT
Subject: CN=22ab3a760fb0cab25ba0107bb27a808540ab1a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:50:77:1d:ab:78:2a:cc:6a:80:93:7f:b9:
a4:32:f0:26:92:d4:01:d4:26:48:e5:d0:84:56:ce:
d7:a5:95:ac:a9:00:c3:4e:b2:35:35:d6:1d:5d:d6:
91:74:41:db:46:28:9c:dd:b1:d3:c7:ed:31:50:14:
52:ff:b8:d3:02:89:72:dc:ec:7f:bf:0b:2d:f1:9a:
6c:ce:1f:fb:77:84:3b:68:c6:82:cb:d4:ea:20:d7:
01:ec:bf:38:94:e9:a2:70:e8:b6:b4:e1:c3:d6:89:
dd:9d:7f:8c:b6:e0:ed:30:5c:4b:0d:55:cb:37:6f:
36:7f:46:ae:88:8f:1e:5e:af:9e:58:09:3d:b3:75:
61:b0:df:f0:44:b6:0f:98:7c:c2:74:87:b6:9f:66:
fb:5c:c9:1b:3e:c3:1e:29:e5:8a:d0:a8:57:c6:12:
2f:c7:86:b9:33:10:f7:a4:f9:76:bc:61:27:8b:12:
70:0f:01:87:91:54:10:d7:41:cc:71:78:36:0d:26:
38:7c:e9:83:d8:ba:ed:c0:60:99:2a:61:bd:59:b1:
50:ca:d9:5b:31:cb:65:64:3b:39:29:d5:93:26:f0:
f0:e0:cd:33:3f:17:0a:ce:86:23:bc:85:08:1f:23:
3d:42:63:9d:3f:10:7a:46:82:9d:85:1e:c9:05:d2:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AB:3A:76:0F:B0:CA:B2:5B:A0:10:7B:B2:7A:80:85:40:AB:1A:4C
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1f:8b:d3:59:6c:97:58:18:c5:3c:05:e2:84:b9:6f:bb:79:
4f:89:9e:9a:5b:bf:68:bc:09:b0:55:c4:61:c6:df:95:12:75:
75:0e:5b:e1:48:f1:65:f8:51:f0:23:4b:4b:0d:d9:d2:9d:cf:
7b:4a:69:03:f7:0e:f1:08:3d:1a:25:fd:73:7a:5d:11:7c:a7:
33:fd:77:38:20:bf:20:2f:11:b4:57:27:4c:90:56:20:e1:1f:
c7:1f:0c:2a:3c:35:ec:a8:ef:a3:3d:d0:82:96:44:1d:88:f1:
81:fb:8d:d2:20:ca:1c:78:56:01:c8:76:21:45:5b:d6:5f:bb:
0d:f7:f8:10:e2:38:4a:a9:68:90:c2:57:a1:7f:69:9c:e4:f5:
59:44:e2:1c:d7:91:c6:b4:b9:c6:5b:a7:75:5d:1d:89:db:47:
f4:ca:d4:6e:11:c6:f6:b0:06:ab:52:24:53:00:03:af:f9:26:
86:1e:87:55:51:12:cf:b2:15:9d:1e:ee:30:69:91:b0:31:b7:
56:ea:6e:11:14:2f:21:d7:4e:b7:71:5a:bf:da:e4:d5:8d:f0:
cf:75:de:a5:4b:54:c0:85:64:8b:6b:f9:a9:34:ca:4a:0d:4e:
ec:07:8c:1e:2f:57:ee:ab:e9:fc:90:62:fa:0f:7c:79:bf:fc:
34:31:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 20:53:20 2026 by rpki-client