Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: vqm4dZkH4rZI2fescZVw87jmndMqEUp5xCSRJ/BAeYA=
Subject key identifier: 8A:B0:F1:98:B0:BD:B5:70:94:97:D7:54:76:E3:6D:32:1E:B1:D5:1A
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A06311083A5759CA3C1329FA95EDBCEE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A36
Signing time: Wed 02 Sep 2026 17:00:55 +0000
Manifest this update: Wed 02 Sep 2026 17:00:55 +0000
Manifest next update: Thu 03 Sep 2026 17:00:55 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: HIIUr4MB3UGDbRF+7TO6AwykuoK8tpmx15ytD4gUAPY=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 14:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:11:08:3a:57:59:ca:3c:13:29:fa:95:ed:bc:ee:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 2 17:00:55 2026 GMT
Not After : Sep 3 17:00:55 2026 GMT
Subject: CN=8ab0f198b0bdb5709497d75476e36d321eb1d51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:3b:41:fb:7c:05:88:8f:b0:33:a4:c5:6d:
70:24:b7:c0:0d:09:dc:01:3a:7e:cc:cd:e4:4b:e6:
3d:53:f9:6f:8b:5a:90:00:a8:d3:27:16:75:91:1f:
01:39:e6:7c:f0:27:27:9f:e7:60:6b:c0:0a:f8:bc:
43:c5:7b:c3:66:42:3b:d9:03:8c:9c:6a:78:df:79:
dc:38:f5:c4:08:f6:83:0a:7c:e1:fd:5d:fe:ac:ff:
68:4a:2b:f4:e0:e7:12:47:ae:a6:7d:67:da:9e:68:
aa:0e:4d:a6:79:34:af:1e:1a:7f:04:51:2c:58:7d:
8d:49:c7:f6:c1:4a:ef:89:ac:20:90:ae:9f:66:d3:
73:87:34:88:0e:9c:74:64:a2:a7:4f:c3:7a:a6:ba:
e6:31:54:d2:85:63:59:82:ba:2a:7b:3e:db:8a:12:
11:4b:33:f7:a5:eb:d1:4b:9a:8e:14:fe:c8:26:00:
e9:9c:04:13:f5:1d:8e:74:1c:9f:c8:83:a8:f8:f2:
46:d3:fc:e9:2b:11:e3:a2:87:9c:74:14:f3:7a:68:
ea:52:35:54:48:0d:79:59:89:d6:08:a2:95:ae:94:
35:d3:69:8c:54:b3:9d:c9:ca:27:74:4f:c5:3a:9a:
70:e0:f1:a7:8d:97:2f:a4:1e:1c:eb:65:97:d4:53:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B0:F1:98:B0:BD:B5:70:94:97:D7:54:76:E3:6D:32:1E:B1:D5:1A
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:48:f1:a7:95:78:7f:72:e2:69:de:0e:e8:a6:1d:31:30:07:
86:ad:00:94:92:57:e4:60:f9:81:46:12:3d:12:fd:c1:7f:11:
47:7f:26:c9:e1:f5:40:aa:a0:df:21:4a:d2:5c:ed:e7:1d:ec:
93:55:6b:23:75:d3:49:77:58:b2:a0:ed:5a:ac:2f:12:ac:7e:
56:de:aa:3c:ff:e2:66:2a:4d:63:7c:a8:7b:a3:42:23:b4:c3:
3d:18:87:13:1c:a6:9d:79:dc:02:ce:be:e4:57:9f:da:e6:c1:
88:5a:1f:79:0b:dd:63:a4:33:d4:0d:31:00:21:79:fc:63:60:
f6:1f:7d:c6:2e:8b:c7:fd:a2:52:7e:f4:1d:39:87:16:33:29:
ae:57:ea:9e:6b:df:89:d6:71:5b:32:e2:c2:12:a0:95:df:3e:
ac:e4:d4:fd:33:94:ab:25:f6:f7:0d:d5:12:12:3e:0e:12:56:
24:c3:30:2b:27:d1:2e:c7:89:cd:55:f7:3c:c4:06:88:d1:c0:
80:7f:4c:b1:04:f7:7e:53:38:75:85:62:eb:e1:21:1b:52:04:
89:63:3d:fd:24:5d:3d:a6:8b:fb:cf:82:16:00:db:f6:a3:03:
5f:1a:21:35:27:49:15:a5:3c:37:17:50:d7:ed:89:5f:7c:4e:
55:1b:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 21:28:32 2026 by rpki-client