Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: ln2M3QKvk7YnbQMi9pYRGch/WIgHHJ64IaenZT0OPm8=
Subject key identifier: EA:1C:2A:E9:59:94:4E:AB:31:BA:9F:DA:E6:A1:A8:B9:CF:60:93:1F
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0028213090CD0243FA2FD089F3DFA2A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 23:01:14 +0000
Manifest this update: Fri 14 Aug 2026 23:01:14 +0000
Manifest next update: Sat 15 Aug 2026 23:01:14 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 4VAWouGH0juU1E/ZNghmUMP0LI8HiIGZ5buoC60CHnw=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:13:09:0c:d0:24:3f:a2:fd:08:9f:3d:fa:2a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 14 23:01:14 2026 GMT
Not After : Aug 15 23:01:14 2026 GMT
Subject: CN=ea1c2ae959944eab31ba9fdae6a1a8b9cf60931f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:27:a9:71:1a:2e:9a:a2:4c:5e:01:8b:cf:
63:6a:84:db:92:ba:ef:da:89:95:5d:5c:80:d3:b1:
7c:3d:4b:09:b8:94:e2:0c:77:e8:b9:af:51:71:17:
fd:9e:ab:7d:1c:b3:f7:bd:59:aa:9f:84:8e:4e:bd:
75:5e:d6:8d:dc:e4:04:9b:7e:2a:aa:06:53:4c:18:
c4:1a:5b:12:33:c2:8f:62:07:eb:fc:a2:f5:ab:f6:
18:c2:5f:57:6a:ba:58:b7:e8:01:e8:85:04:af:7b:
02:01:1d:02:8b:48:55:c7:43:95:ac:e7:0c:c1:2d:
b5:8d:b2:29:c0:5b:52:19:0d:43:b5:27:20:36:40:
99:35:f4:f7:9a:5c:ac:da:c8:79:e0:5c:88:97:69:
14:fb:57:cc:8d:74:27:ef:0a:30:24:7a:fd:a6:93:
dc:2e:b0:a5:e3:75:94:11:4c:6c:7a:68:1f:0a:a9:
44:c5:ba:42:e2:e1:40:76:dc:bb:dd:d0:b5:d8:5e:
f9:5b:f1:75:b1:49:ae:17:f1:28:75:ef:cd:db:85:
85:ac:97:cd:62:07:a1:e9:ab:35:cd:4b:71:07:7d:
20:a1:b6:37:14:bf:47:e9:50:74:e4:c6:a0:3e:be:
5d:32:d3:e3:f1:ee:5b:c3:d3:c9:75:b2:4a:37:2c:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1C:2A:E9:59:94:4E:AB:31:BA:9F:DA:E6:A1:A8:B9:CF:60:93:1F
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:de:23:8c:89:1d:fb:37:02:dd:06:3c:d9:85:b5:8a:44:d5:
60:7d:ac:79:95:10:6a:d5:39:2d:36:34:a5:2e:0f:ee:01:36:
a3:ab:27:61:59:23:93:57:85:02:19:ce:2f:45:48:4a:80:4d:
7a:36:ad:e9:2d:01:04:5e:15:88:4a:6c:d2:92:2a:7a:5e:3b:
0b:12:49:32:ae:bf:e1:37:83:fd:9d:5e:56:aa:fa:85:f7:8c:
47:40:62:16:0d:fd:25:22:27:6f:c6:c5:13:ae:61:21:dd:bf:
83:0c:1c:b0:9a:b4:04:28:5d:5a:7b:ad:a9:57:c1:b3:1c:66:
1b:88:ac:2d:38:21:85:09:0a:40:5b:91:32:34:12:93:80:61:
e4:99:70:e6:ca:2c:e2:4c:f7:87:5e:ba:b4:60:e3:62:0d:42:
89:7c:37:e5:51:2e:cf:94:ca:9c:68:cd:20:d7:fa:9e:af:e7:
44:dc:64:3e:df:05:39:51:f7:a4:0b:3c:b6:9c:c0:48:20:33:
cd:46:5a:5d:dc:d0:35:ca:8a:7b:0f:65:08:2f:dc:d6:ec:d0:
f2:f4:65:4d:2d:05:47:fe:26:ce:09:b8:31:cf:81:c3:12:66:
ad:96:c2:6b:78:7c:a9:66:27:a1:ab:6a:4c:c3:35:fa:62:aa:
3e:6b:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:55:27 2026 by rpki-client