Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: NNLHNA/VbRzi9wMFn9B3zruAeIPmRj9aOXmOU/sh2Fk=
Subject key identifier: EF:14:2D:C9:1F:39:D2:29:A5:FA:E3:39:8A:D6:E3:90:06:1C:53:DC
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FE778C80DA663707AF825642FF182F236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19F6
Signing time: Sun 09 Aug 2026 17:01:20 +0000
Manifest this update: Sun 09 Aug 2026 17:01:20 +0000
Manifest next update: Mon 10 Aug 2026 17:01:20 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: Xe+w72yoG4bzIMANZ4ywmM0uyiRP9whII0LYM367JIs=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Aug 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:78:c8:0d:a6:63:70:7a:f8:25:64:2f:f1:82:f2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 9 17:01:20 2026 GMT
Not After : Aug 10 17:01:20 2026 GMT
Subject: CN=ef142dc91f39d229a5fae3398ad6e390061c53dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:9a:a1:73:d4:61:68:c9:17:9c:0a:0c:d6:
a7:90:db:82:0f:53:b4:53:4b:7b:f0:21:22:da:fc:
4c:6c:79:65:3a:b5:d7:a8:34:c7:49:fd:31:70:53:
27:9c:6a:56:18:0a:36:8a:4c:28:bd:c7:83:8b:0f:
f0:e6:2a:3e:f8:97:73:ef:d6:29:ac:dd:5d:82:28:
75:5e:b8:bb:7d:38:78:86:4a:80:d1:ff:96:07:e5:
5f:66:88:0d:75:b1:af:94:92:6f:ee:53:d1:aa:52:
f4:4d:88:4d:c0:d7:11:ce:15:3e:3e:34:b9:b5:28:
7f:8b:69:b5:0a:a0:62:d8:b6:7c:d3:01:63:6a:bc:
04:1b:24:33:1d:b1:68:84:80:67:a2:b0:73:35:af:
8e:25:0e:d9:9f:d2:9b:92:a3:60:fa:c6:fb:76:82:
c6:40:93:02:a7:a7:1d:aa:55:c1:79:81:24:2e:ef:
65:c5:e9:9f:e9:92:9b:4f:fb:06:93:a4:7a:97:2b:
74:ce:0e:06:72:b7:27:6d:43:35:c8:9f:96:c3:f0:
b6:bc:41:28:12:de:73:f5:0d:4b:d8:95:4f:77:11:
09:20:e6:cf:16:dd:76:97:05:7f:55:43:82:ad:cd:
d1:85:1f:fd:e0:be:52:73:c7:f6:20:93:2d:01:4e:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:2D:C9:1F:39:D2:29:A5:FA:E3:39:8A:D6:E3:90:06:1C:53:DC
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d7:66:b4:b5:a3:07:9c:3b:4c:a4:e9:f7:ec:35:9c:45:ee:
6d:27:77:2e:f4:07:dc:b1:6d:62:20:8b:ce:fc:e2:2d:42:ee:
b6:b5:69:e6:e9:e8:aa:39:9c:44:69:a7:d2:04:d3:40:76:90:
92:0e:c0:a5:59:5e:a4:aa:40:42:35:75:82:37:3e:51:20:87:
f4:c3:f4:02:2e:58:c6:99:5b:07:de:ff:db:b8:7f:90:66:bb:
d7:78:d8:28:1d:d8:ae:1f:5a:cb:01:c8:b2:16:99:22:66:6d:
1f:83:87:8a:9f:b8:25:54:74:ae:fa:90:21:30:88:0d:16:39:
8c:20:00:46:15:2f:81:cf:bf:b2:af:59:60:ae:9b:55:a8:58:
28:f9:cb:50:88:11:87:15:1d:f2:0d:c1:d3:da:cb:d9:08:cf:
b1:19:64:89:d3:c0:57:35:ba:b9:ac:21:d5:34:5c:b5:a9:88:
c6:a4:42:b6:77:6a:ef:a0:50:51:1d:c5:63:4b:f9:3b:96:c5:
dc:33:90:49:f4:ca:bd:11:db:55:2c:6b:30:c1:3e:00:19:38:
38:28:bd:f5:e2:86:d2:d0:0f:17:9b:ff:3d:7b:7a:ed:c3:18:
e9:a4:75:48:21:78:83:44:80:df:de:93:fe:87:e7:cd:a9:10:
ca:cf:e0:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/neMgNpmNwevglZC/xgvI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwODA5MTcwMTIwWhcNMjYwODEwMTcwMTIwWjAzMTEwLwYDVQQD
EyhlZjE0MmRjOTFmMzlkMjI5YTVmYWUzMzk4YWQ2ZTM5MDA2MWM1M2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr22aoXPUYWjJF5wKDNankNuCD1O0
U0t78CEi2vxMbHllOrXXqDTHSf0xcFMnnGpWGAo2ikwovceDiw/w5io++Jdz79Yp
rN1dgih1Xri7fTh4hkqA0f+WB+VfZogNdbGvlJJv7lPRqlL0TYhNwNcRzhU+PjS5
tSh/i2m1CqBi2LZ80wFjarwEGyQzHbFohIBnorBzNa+OJQ7Zn9KbkqNg+sb7doLG
QJMCp6cdqlXBeYEkLu9lxemf6ZKbT/sGk6R6lyt0zg4GcrcnbUM1yJ+Ww/C2vEEo
Et5z9Q1L2JVPdxEJIObPFt12lwV/VUOCrc3RhR/94L5Sc8f2IJMtAU52WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8ULckfOdIppfrjOYrW45AGHFPcMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntdmtLWj
B5w7TKTp9+w1nEXubSd3LvQH3LFtYiCLzvziLULutrVp5unoqjmcRGmn0gTTQHaQ
kg7ApVlepKpAQjV1gjc+USCH9MP0Ai5YxplbB97/27h/kGa713jYKB3Yrh9aywHI
shaZImZtH4OHip+4JVR0rvqQITCIDRY5jCAARhUvgc+/sq9ZYK6bVahYKPnLUIgR
hxUd8g3B09rL2QjPsRlkidPAVzW6uawh1TRctamIxqRCtndq76BQUR3FY0v5O5bF
3DOQSfTKvRHbVSxrMME+ABk4OCi99eKG0tAPF5v/PXt67cMY6aR1SCF4g0SA396T
/ofnzakQys/gtA==
-----END CERTIFICATE-----
Generated at Mon Aug 10 02:14:48 2026 by rpki-client