Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: UC/lgpuflJz6ZMYeboEN7ojrZ1frOXtWUVT5uQRTnW4=
Subject key identifier: AB:F0:58:23:B2:E1:41:3F:0B:0B:95:AF:D8:77:9C:59:65:B0:4C:75
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A051AF21D85B0F5B4F1E411AC5FCD4E1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A2D
Signing time: Sun 30 Aug 2026 08:00:26 +0000
Manifest this update: Sun 30 Aug 2026 08:00:26 +0000
Manifest next update: Mon 31 Aug 2026 08:00:26 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 4u6KG9QceQQoK2plLYZbBTod8FwbYor1joFPRCh/EUc=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:af:21:d8:5b:0f:5b:4f:1e:41:1a:c5:fc:d4:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 30 08:00:26 2026 GMT
Not After : Aug 31 08:00:26 2026 GMT
Subject: CN=abf05823b2e1413f0b0b95afd8779c5965b04c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:94:50:4b:a7:ac:af:c9:e7:7b:7b:6a:bd:
03:ab:4b:48:80:2e:d5:eb:88:05:a0:db:51:9c:f6:
d7:a5:64:1f:90:8f:9c:b7:da:f8:3d:d3:f7:bf:92:
42:53:eb:c9:88:bf:42:7f:d5:d1:e5:d6:49:16:14:
b9:f9:f4:e6:8f:f9:5b:92:46:ab:ac:d4:51:e1:f6:
f8:0c:1b:7b:60:58:1d:71:e1:bb:95:c7:88:32:f5:
09:ce:c2:f3:2a:6d:a8:94:9d:86:b3:69:f7:f3:8d:
a6:8b:f6:13:ad:1e:3a:c5:48:60:a0:db:22:c2:aa:
35:dc:7c:e1:f9:0b:93:0a:5d:a5:d4:17:4c:ec:45:
e5:90:73:e6:fc:84:11:47:42:a3:9d:34:74:3c:3a:
9f:47:4a:06:81:9b:90:e8:37:14:29:83:a6:84:8a:
3c:41:30:b2:83:1e:c7:c7:4b:27:73:cf:fa:6a:22:
c9:91:04:48:11:4a:fe:cc:cf:b6:0a:2d:ce:ed:67:
d0:4f:6e:32:8b:38:cb:b0:2b:ee:cf:12:08:0a:48:
e4:f1:37:bb:87:f8:4f:2d:31:b2:c3:5a:14:45:43:
a2:65:5d:54:98:5b:45:b5:20:66:e7:1f:89:75:fa:
51:d3:42:2a:ad:59:31:67:bb:a5:08:80:7c:67:f8:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:58:23:B2:E1:41:3F:0B:0B:95:AF:D8:77:9C:59:65:B0:4C:75
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6f:c1:e4:73:60:23:64:5e:81:4b:fd:50:2d:40:d4:81:38:
18:e6:66:52:66:9c:21:4a:2f:7e:bd:82:4d:35:2b:6d:81:11:
ef:28:9f:3f:cc:ef:9b:0c:d6:6f:c9:4c:a0:35:e3:fb:79:24:
4d:e5:96:3d:0e:ae:7e:36:86:3c:9a:bd:c3:e0:57:d3:5b:26:
b4:a7:74:17:bd:ee:35:16:74:a5:c6:2e:10:52:13:dc:87:ce:
96:bd:b4:04:25:a7:8a:9d:34:b0:1b:41:21:98:12:ca:93:98:
d8:20:0c:03:5d:31:71:6d:cf:af:ed:04:c4:61:8c:5e:55:74:
ed:68:7e:05:90:f3:53:42:f2:84:60:cd:15:c7:51:7e:62:2a:
cb:67:47:7b:4a:92:ed:f9:a2:d4:23:09:26:c8:c2:13:b2:f8:
69:ca:1c:64:8b:d6:46:1d:f2:3d:0b:30:ef:89:c0:75:48:12:
74:8b:74:32:7f:f6:b0:79:33:78:91:04:d3:a2:17:d4:c9:60:
0e:b7:c8:c9:26:8a:6b:15:18:27:be:4c:d0:c7:75:4d:25:41:
b3:e0:06:33:c4:9d:01:2d:29:2d:b0:ef:18:55:60:a8:10:d3:
f8:c8:2e:69:a4:2d:84:81:a4:63:9b:94:43:e2:50:76:fd:9d:
65:14:d6:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBRryHYWw9bTx5BGsX81OHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwODMwMDgwMDI2WhcNMjYwODMxMDgwMDI2WjAzMTEwLwYDVQQD
EyhhYmYwNTgyM2IyZTE0MTNmMGIwYjk1YWZkODc3OWM1OTY1YjA0Yzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrCUUEunrK/J53t7ar0Dq0tIgC7V
64gFoNtRnPbXpWQfkI+ct9r4PdP3v5JCU+vJiL9Cf9XR5dZJFhS5+fTmj/lbkkar
rNRR4fb4DBt7YFgdceG7lceIMvUJzsLzKm2olJ2Gs2n3842mi/YTrR46xUhgoNsi
wqo13Hzh+QuTCl2l1BdM7EXlkHPm/IQRR0KjnTR0PDqfR0oGgZuQ6DcUKYOmhIo8
QTCygx7Hx0snc8/6aiLJkQRIEUr+zM+2Ci3O7WfQT24yizjLsCvuzxIICkjk8Te7
h/hPLTGyw1oURUOiZV1UmFtFtSBm5x+JdfpR00IqrVkxZ7ulCIB8Z/hCUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvwWCOy4UE/CwuVr9h3nFllsEx1MB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2/B5HNg
I2RegUv9UC1A1IE4GOZmUmacIUovfr2CTTUrbYER7yifP8zvmwzWb8lMoDXj+3kk
TeWWPQ6ufjaGPJq9w+BX01smtKd0F73uNRZ0pcYuEFIT3IfOlr20BCWnip00sBtB
IZgSypOY2CAMA10xcW3Pr+0ExGGMXlV07Wh+BZDzU0LyhGDNFcdRfmIqy2dHe0qS
7fmi1CMJJsjCE7L4acocZIvWRh3yPQsw74nAdUgSdIt0Mn/2sHkzeJEE06IX1Mlg
DrfIySaKaxUYJ75M0Md1TSVBs+AGM8SdAS0pLbDvGFVgqBDT+MguaaQthIGkY5uU
Q+JQdv2dZRTWwQ==
-----END CERTIFICATE-----
Generated at Sun Aug 30 18:31:43 2026 by rpki-client