Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: Y4YnBPHXrVESnnWmc5+QRjNCEfpgsrJ/Cda/ogUK2yA=
Subject key identifier: 8D:6F:8B:3C:D3:6B:83:69:FE:97:42:29:DE:4E:9E:B5:FC:B2:5F:34
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FFCB715D09B5C47C916E88FCFAD7244A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A01
Signing time: Thu 13 Aug 2026 20:01:24 +0000
Manifest this update: Thu 13 Aug 2026 20:01:24 +0000
Manifest next update: Fri 14 Aug 2026 20:01:24 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: +LBAV2mUB1JEL87S2C5eRN/OzJpOUIIsbZCnq7tIjzg=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:b7:15:d0:9b:5c:47:c9:16:e8:8f:cf:ad:72:44:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 13 20:01:24 2026 GMT
Not After : Aug 14 20:01:24 2026 GMT
Subject: CN=8d6f8b3cd36b8369fe974229de4e9eb5fcb25f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:5d:31:81:09:be:0a:8d:e1:4b:f4:44:b2:
8d:9e:ac:d3:7c:08:28:b4:ad:80:11:cb:b5:b2:6b:
d3:ff:02:da:ef:8c:00:89:64:3e:aa:fd:45:cb:8c:
05:2c:e3:83:e0:c9:4d:38:98:69:5d:a6:b5:1a:11:
e9:bb:07:45:a1:fc:9f:07:7e:57:63:27:20:ad:18:
9f:e9:1a:b0:fd:c1:31:58:b5:de:84:74:4c:1c:f1:
83:44:59:89:48:90:6b:32:24:da:59:ec:b1:8d:55:
e8:a6:a2:e6:c7:96:11:cf:0b:1b:cf:02:d3:40:88:
ce:4b:46:30:5e:c6:0f:16:d2:60:30:4e:d2:90:18:
a6:fb:73:22:a6:e6:7c:36:10:52:85:49:f8:bb:5c:
04:73:de:80:dc:a0:8b:62:d7:e2:f7:bc:dc:3e:8d:
3a:3b:c9:0e:53:a6:9c:c9:d3:d7:81:47:c2:2b:ed:
2c:89:b3:33:21:55:25:d6:5a:18:2d:99:b9:49:c1:
e5:8d:3c:54:6f:6c:d8:c0:71:54:99:57:db:fc:20:
e7:a4:7e:10:cc:43:c8:a5:72:20:c6:91:7b:01:4a:
38:db:ab:83:42:96:2e:47:6d:4c:b2:9b:55:2a:4f:
bc:e6:d0:ee:4b:b9:ac:6b:29:c3:89:91:b1:31:26:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:8B:3C:D3:6B:83:69:FE:97:42:29:DE:4E:9E:B5:FC:B2:5F:34
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:36:cd:b2:72:6b:7f:81:ed:ec:9e:99:24:5d:bd:56:2d:8b:
15:ca:38:6c:89:d0:43:f0:ba:00:6d:1a:aa:71:6a:c1:fe:31:
80:40:6e:dc:a6:4d:89:2e:73:02:70:59:35:26:85:13:f6:81:
8b:25:f8:47:12:a2:78:b1:88:2f:b9:e3:37:dd:a9:f2:ae:f2:
71:58:94:60:b0:68:2c:da:38:84:51:1c:68:9a:db:ef:6c:81:
cc:ee:12:8a:ca:23:ce:f4:c1:65:d6:21:5f:20:67:44:99:60:
d0:67:9d:52:2b:bc:1b:ce:a3:ba:15:93:5f:07:45:04:77:5b:
f4:fe:3e:ed:16:ef:54:55:97:7b:59:21:1a:2e:58:65:68:0b:
af:12:9e:34:c0:28:b1:04:2c:db:5f:7a:8f:8d:63:44:4d:c1:
94:5d:4a:2c:70:a7:c6:d7:10:ca:91:75:66:5a:08:fc:17:2e:
d2:c1:6a:99:87:73:6b:7d:e4:6c:3b:fd:b1:65:81:69:cf:ba:
8b:85:3b:03:3c:5f:a5:ce:bf:f6:08:e0:74:57:8b:76:25:4c:
cf:21:88:84:c7:06:c7:b2:5b:cd:41:b5:90:57:97:a8:be:cb:
db:fb:64:26:aa:94:d8:9e:98:b8:43:ec:9c:0a:ef:66:7c:76:
b4:1d:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 05:45:01 2026 by rpki-client