Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: ZFF35oI+qZbDuInpkj2eovlt4BctFxT2tjAMocj7KuI=
Subject key identifier: 8F:28:90:91:2A:F0:9D:9C:ED:C6:AE:B7:7B:03:53:CF:C5:E7:E2:E8
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A07E1A309E5EF6E81E1566832C0B9441C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A44
Signing time: Mon 07 Sep 2026 23:00:40 +0000
Manifest this update: Mon 07 Sep 2026 23:00:40 +0000
Manifest next update: Tue 08 Sep 2026 23:00:40 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: ti7PiSu1m48grRTzfRP9y7WkFhmHKz3CIlIip8hSfuE=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 21:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7e:1a:30:9e:5e:f6:e8:1e:15:66:83:2c:0b:94:41:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 7 23:00:40 2026 GMT
Not After : Sep 8 23:00:40 2026 GMT
Subject: CN=8f2890912af09d9cedc6aeb77b0353cfc5e7e2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:56:79:5a:82:4e:06:82:6e:e0:dc:75:35:
92:2f:86:24:54:aa:28:bc:62:a0:3d:58:bf:75:bd:
b4:7b:aa:f0:db:5c:45:f9:94:81:e9:6d:f4:9a:17:
2e:0d:d4:3d:56:85:6b:3e:05:13:7a:45:21:0f:38:
64:48:79:aa:da:a8:a0:cf:ef:55:ed:c4:60:2a:c8:
49:ea:88:8c:78:ec:eb:24:68:9e:6c:fe:da:6e:14:
0f:b9:b5:c0:79:b7:71:91:46:07:63:c9:7b:27:c1:
3f:32:f8:16:38:a1:d6:75:67:bc:a8:75:0c:e2:d1:
68:d0:3b:bf:ef:d0:ac:de:9c:96:df:8e:42:3c:8e:
13:05:c9:d4:11:d6:bd:c9:0a:73:16:ee:bd:f3:a9:
77:69:25:92:bd:46:3e:ea:ba:d5:6d:59:91:a0:26:
46:96:81:ff:05:cb:41:4a:21:56:f1:0a:a0:2a:ec:
40:3e:4e:d8:fc:6f:dd:2b:2f:2c:8d:7a:96:07:0b:
16:c6:5e:5f:3e:8f:1d:2e:97:f8:c5:4a:63:c8:78:
ea:a5:f2:51:c8:54:41:ec:46:c8:25:44:34:e7:bc:
a0:d0:25:d2:24:fa:ab:1a:eb:e6:bf:39:fa:a4:b8:
56:31:8d:06:83:96:93:3d:ca:d5:18:60:a6:db:10:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:90:91:2A:F0:9D:9C:ED:C6:AE:B7:7B:03:53:CF:C5:E7:E2:E8
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2f:9e:6f:5d:e0:82:84:17:ab:cf:0c:27:31:4a:f3:84:23:
bb:86:5a:f7:1b:6c:f9:e3:69:5e:8b:a5:dc:e1:4f:5b:c6:46:
aa:5a:ca:7f:72:b1:a3:09:9d:84:ac:aa:2a:4e:fc:8a:ed:dc:
0c:8f:e1:84:24:0a:c3:ba:ac:e5:5b:41:57:05:ef:e7:ad:68:
36:98:35:cd:ec:b3:08:81:5b:43:93:b2:ea:f4:16:a1:a5:82:
05:f1:2d:99:cd:14:4d:9a:3e:6d:e2:5f:d1:d4:a5:b7:c5:06:
67:f4:74:b7:c1:b8:da:8f:92:76:0f:c4:03:74:64:99:5b:6d:
c1:37:fe:b6:55:cd:f4:b2:c9:54:78:6e:a3:37:91:36:74:ef:
b0:84:33:0d:5b:28:82:69:b5:0e:c0:32:0a:f9:85:fb:28:66:
c1:18:89:c2:59:9a:c9:2d:ca:dc:ad:c6:c7:87:79:b3:a3:fd:
e3:f8:b8:20:63:8e:68:ce:8b:49:eb:7e:50:06:58:f5:33:b3:
b9:bd:a9:c0:87:49:b5:43:78:27:c9:65:48:92:82:04:61:ff:
10:86:be:eb:a6:95:e2:c0:56:c9:f7:f2:2d:4c:84:16:f9:18:
94:21:d0:06:b2:6b:27:63:de:06:8e:34:65:79:3c:b0:a8:fb:
4a:3a:20:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaB+GjCeXvboHhVmgywLlEHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwOTA3MjMwMDQwWhcNMjYwOTA4MjMwMDQwWjAzMTEwLwYDVQQD
Eyg4ZjI4OTA5MTJhZjA5ZDljZWRjNmFlYjc3YjAzNTNjZmM1ZTdlMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6VWeVqCTgaCbuDcdTWSL4YkVKoo
vGKgPVi/db20e6rw21xF+ZSB6W30mhcuDdQ9VoVrPgUTekUhDzhkSHmq2qigz+9V
7cRgKshJ6oiMeOzrJGiebP7abhQPubXAebdxkUYHY8l7J8E/MvgWOKHWdWe8qHUM
4tFo0Du/79Cs3pyW345CPI4TBcnUEda9yQpzFu6986l3aSWSvUY+6rrVbVmRoCZG
loH/BctBSiFW8QqgKuxAPk7Y/G/dKy8sjXqWBwsWxl5fPo8dLpf4xUpjyHjqpfJR
yFRB7EbIJUQ057yg0CXSJPqrGuvmvzn6pLhWMY0Gg5aTPcrVGGCm2xB0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8okJEq8J2c7caut3sDU8/F5+LoMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAei+eb13g
goQXq88MJzFK84Qju4Za9xts+eNpXoul3OFPW8ZGqlrKf3KxowmdhKyqKk78iu3c
DI/hhCQKw7qs5VtBVwXv561oNpg1zeyzCIFbQ5Oy6vQWoaWCBfEtmc0UTZo+beJf
0dSlt8UGZ/R0t8G42o+Sdg/EA3RkmVttwTf+tlXN9LLJVHhuozeRNnTvsIQzDVso
gmm1DsAyCvmF+yhmwRiJwlmayS3K3K3Gx4d5s6P94/i4IGOOaM6LSet+UAZY9TOz
ub2pwIdJtUN4J8llSJKCBGH/EIa+66aV4sBWyffyLUyEFvkYlCHQBrJrJ2PeBo40
ZXk8sKj7Sjog4g==
-----END CERTIFICATE-----
Generated at Tue Sep 8 03:47:13 2026 by rpki-client