Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: bF9YRgHOnM1i4mTW/ITCylXUYe3LTa2N9pw70YtiD4w=
Subject key identifier: 49:40:55:85:FC:B4:29:80:9F:DB:B4:BF:F5:B0:EA:B8:09:6A:5E:41
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019F92ED836819EA4D6F0F21C0A1300270CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 07:01:06 +0000
Manifest this update: Fri 24 Jul 2026 07:01:06 +0000
Manifest next update: Sat 25 Jul 2026 07:01:06 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: /eKpGUc9Y0vsDwvcvxbnCwa1MoYM7eQCF/XwcVe59uw=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:83:68:19:ea:4d:6f:0f:21:c0:a1:30:02:70:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 24 07:01:06 2026 GMT
Not After : Jul 25 07:01:06 2026 GMT
Subject: CN=49405585fcb429809fdbb4bff5b0eab8096a5e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:13:7a:4b:5b:36:d3:72:ef:3f:22:11:04:
47:21:06:9c:53:19:21:27:80:ff:d5:3a:e6:50:e8:
27:30:24:1c:d7:72:cd:81:08:e2:71:8d:67:06:2c:
ee:33:18:41:de:10:a3:7e:d7:fd:48:48:b6:ea:fe:
a0:19:f8:f4:92:e1:28:45:6d:93:80:59:d9:de:36:
df:3c:60:cd:c9:e7:5f:11:c3:ba:95:b1:c1:08:0a:
58:28:62:b9:2d:cd:c3:b3:c2:43:f4:43:39:bf:a4:
1a:94:19:ce:9b:dc:2d:04:4e:e9:95:cc:81:92:d5:
21:e9:80:e8:4b:6e:d4:c0:ff:c1:bf:31:2b:c4:3b:
c2:e5:fd:8d:80:2e:1d:77:46:ce:aa:c1:6e:d9:50:
f9:9b:09:94:31:35:d5:7c:39:e0:ba:3a:97:e8:51:
01:83:29:e8:1e:fe:5c:dd:8a:bb:d8:9c:96:15:25:
dd:64:08:47:53:23:a7:01:97:87:f9:07:1d:bd:35:
e2:1a:74:36:1c:dd:c8:99:ad:0f:0e:b6:c7:c5:f2:
37:68:22:37:85:68:e4:7b:f5:18:d6:26:74:2a:61:
12:9b:88:4c:51:0e:54:a1:80:69:2c:dd:d4:17:ad:
f3:b7:0d:ca:47:00:fe:7a:8d:0f:0a:77:31:61:b4:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:40:55:85:FC:B4:29:80:9F:DB:B4:BF:F5:B0:EA:B8:09:6A:5E:41
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:7c:34:b8:38:e7:f4:72:6d:e9:f0:e6:49:24:cf:03:3b:
2c:8a:a0:bb:f2:c2:c3:49:a0:45:0e:49:d4:76:e5:02:78:56:
6a:31:5e:65:38:d4:98:bc:6a:ba:51:8a:d5:87:c2:1a:47:28:
19:38:59:82:1c:29:9c:4a:24:33:0c:fd:67:02:74:00:e5:12:
ca:e9:59:96:7f:d7:7d:fb:3c:e6:61:34:fa:20:d1:d2:0c:05:
65:f9:2e:30:09:97:1d:fc:7d:a2:bb:13:e2:4f:e5:9a:98:58:
2e:4c:eb:c4:b8:f3:17:a3:2b:a5:b6:9e:0e:da:15:89:72:a1:
82:b0:87:0c:32:7c:a0:2c:e2:08:65:f8:9c:24:ad:64:13:59:
22:6f:a5:0d:61:70:7e:30:03:2a:07:d7:bb:3c:00:ac:d4:b6:
8b:d4:72:a0:9e:73:76:e7:a2:74:96:5e:ce:17:6c:63:cd:40:
d3:84:3a:68:fb:61:7e:4d:60:81:5b:28:91:83:c9:ad:55:90:
ff:82:5d:27:06:fb:a7:f0:f9:91:d8:0d:66:f8:50:83:e5:42:
d2:d2:b2:e0:8c:f2:55:19:2f:32:e0:70:eb:73:33:75:63:c4:
ac:18:e9:f6:ca:f1:5b:f3:37:58:5f:35:f2:81:f5:b0:7f:a9:
cd:10:4d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:31 2026 by rpki-client