Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: Ee+aGvEgZydbcU5sasNMqty8VpINdmKSRwSmSZS+K0U=
Subject key identifier: 75:DD:8E:EE:FA:B3:3F:58:5D:F7:94:B3:63:4E:67:BD:5C:79:16:23
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0423C942D5062D88A3BF2464483E03047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A25
Signing time: Thu 27 Aug 2026 08:01:01 +0000
Manifest this update: Thu 27 Aug 2026 08:01:01 +0000
Manifest next update: Fri 28 Aug 2026 08:01:01 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: baa/q1cq2YkwYyjAjB0mzBDlcsU/Mo5kvn817RwambA=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:3c:94:2d:50:62:d8:8a:3b:f2:46:44:83:e0:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 27 08:01:01 2026 GMT
Not After : Aug 28 08:01:01 2026 GMT
Subject: CN=75dd8eeefab33f585df794b3634e67bd5c791623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:ee:3a:9f:80:9c:e4:29:88:44:c7:1a:0c:
e1:52:f9:2b:7e:93:4a:55:6b:2e:c7:7a:d8:07:29:
80:7f:1d:91:5c:4b:d9:07:d8:8e:e4:0a:0d:94:f1:
a8:ba:b8:e8:19:df:5b:42:1e:46:26:03:67:ca:ee:
50:10:24:2f:78:08:b0:5d:96:8c:6f:95:68:68:fd:
fe:82:0b:b8:48:04:c0:dc:97:7a:aa:fb:21:41:99:
8e:d1:b1:55:2b:fd:3d:e9:68:f0:04:51:16:01:16:
25:fb:4d:d9:0e:ae:33:29:68:99:bf:55:77:48:f0:
92:01:6d:5d:44:aa:0c:55:ab:0b:7f:b4:63:70:33:
4c:54:98:2c:cc:2c:dd:7d:35:42:dc:d6:2c:0f:16:
b8:8c:a3:33:1b:73:09:fc:87:0b:d2:fe:99:b4:bb:
55:0d:38:73:d1:f4:ad:01:f5:f1:39:b4:35:9b:a6:
c1:ab:be:8a:54:a3:14:b4:83:7a:3b:49:12:43:c6:
61:37:2a:6e:99:6a:d1:1c:59:92:c3:82:79:1b:5b:
09:2d:de:aa:4d:99:bb:26:21:cf:9b:77:3f:89:5d:
b1:3c:d9:62:be:d6:75:1f:0f:41:71:16:98:02:56:
6c:b9:f6:d6:60:85:b8:49:35:8f:f2:cf:a5:0a:95:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DD:8E:EE:FA:B3:3F:58:5D:F7:94:B3:63:4E:67:BD:5C:79:16:23
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e0:64:a3:7a:2b:12:d2:46:3d:e6:61:1b:61:cd:c0:3d:ef:
4e:f3:41:b0:7c:e9:34:bd:6d:68:3b:b9:9f:9f:79:2a:5c:a8:
f7:22:64:b8:c6:64:fd:26:9a:fc:c2:4d:66:aa:ca:c8:83:60:
51:f7:5a:e5:53:5e:4b:1f:b5:b1:df:6a:25:7d:21:76:00:70:
38:d5:1e:44:28:50:23:28:05:87:59:97:3b:c0:6f:28:4c:4e:
d0:c9:4c:9b:8f:e2:9f:22:a2:92:ff:1b:e7:95:67:3b:f6:77:
8c:3f:ab:82:b6:17:d9:ad:f8:ac:85:21:1e:21:49:ca:84:33:
37:09:c2:70:9c:fc:45:f8:68:34:00:dd:cb:c9:17:06:28:7c:
f8:6a:c4:4f:37:5c:7f:15:e7:04:48:79:25:9c:9f:03:83:1e:
e9:ca:51:5c:56:48:43:64:52:d3:2a:0c:bc:70:95:71:3a:86:
df:08:c7:e2:b8:e0:bc:8c:14:e1:e9:d7:57:dd:63:d9:0d:76:
6d:94:07:07:99:e8:a1:6d:81:fc:ec:58:a8:7f:83:5e:6f:02:
b3:6d:50:d2:6b:ec:ae:d3:d5:16:02:64:67:e9:6c:2c:c6:ca:
45:d7:51:99:5d:bb:41:0d:ae:e3:c7:1d:f4:d2:26:51:5b:dc:
45:4a:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:59:30 2026 by rpki-client