Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: WBjGzZrlUjOy8f0h8Hu55abxUvj4d6Q6L/g1iLNWbdQ=
Subject key identifier: 0F:36:55:12:88:46:48:18:68:F4:B9:1E:8C:35:FA:D5:69:01:7D:61
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A14985B733E48365E4F52BE321B28A7BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1AAF
Signing time: Sat 17 Oct 2026 11:01:02 +0000
Manifest this update: Sat 17 Oct 2026 11:01:02 +0000
Manifest next update: Sun 18 Oct 2026 11:01:02 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 0rgLd3rQKq2Q3SgrmD1eQsVIp1R7hT2x1q4TEnGIwGI=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:85:b7:33:e4:83:65:e4:f5:2b:e3:21:b2:8a:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 17 11:01:02 2026 GMT
Not After : Oct 18 11:01:02 2026 GMT
Subject: CN=0f3655128846481868f4b91e8c35fad569017d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:ca:04:94:4b:7e:18:ae:06:6d:b4:08:dd:
5a:16:6f:2a:17:d6:27:7a:b2:38:bb:53:b5:b4:54:
90:8e:ba:03:5c:21:d5:21:00:5a:da:ea:f8:62:6c:
78:5c:a8:98:62:6e:8b:af:6e:bf:b1:ed:2d:f7:03:
58:95:05:9a:d0:d9:a3:87:7a:80:55:5d:34:6a:fd:
45:9c:dc:db:16:b7:00:24:40:c5:bb:29:b7:bb:4b:
c4:58:71:af:5e:10:f8:92:21:e1:b5:49:93:d1:75:
20:43:ca:d6:f3:8b:e7:19:e1:52:19:20:cf:10:2b:
6c:f0:27:38:5f:a6:da:5a:4e:8a:61:e6:b4:bc:63:
01:51:b9:93:cf:a4:2b:17:b7:7f:09:71:83:2c:15:
56:9e:4c:dd:01:f4:5c:8a:ba:21:d5:92:75:7a:69:
5e:fe:8b:e2:9d:54:62:c4:8f:44:67:4b:8e:72:b7:
0f:99:ae:3c:15:b2:f4:9e:f2:03:7f:fb:d4:59:7b:
9d:56:f2:29:e0:22:92:97:6c:7d:b2:f6:a7:96:87:
ef:a9:ea:b6:cb:5a:b1:58:67:f7:52:37:54:9b:8a:
33:ec:f9:31:b8:86:93:4d:27:0d:a8:92:a2:4d:62:
6b:03:08:7d:5a:82:e1:4b:94:01:59:1d:e0:5b:3a:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:55:12:88:46:48:18:68:F4:B9:1E:8C:35:FA:D5:69:01:7D:61
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f7:d6:65:89:4c:97:e3:40:18:cd:ab:0d:b6:e5:a1:b9:a9:
b7:ec:55:dd:ed:6e:b3:71:2e:13:9e:9c:59:9b:c7:fb:03:ff:
0a:c2:17:47:11:2f:2c:76:4d:78:45:2c:84:12:d7:15:72:c5:
ae:0d:8e:e5:9a:48:a1:07:0c:4b:64:ae:af:eb:de:23:be:7a:
a7:29:4a:4a:4d:b0:17:88:f1:5c:e6:0a:6c:83:49:a3:92:56:
fa:04:eb:01:c6:b3:03:4f:48:23:85:c2:f5:cd:de:b8:5e:e9:
d9:87:9e:eb:d8:eb:bc:e4:ce:a1:24:70:95:8a:03:c0:99:dc:
50:ce:0e:7f:1f:fc:cc:b2:c8:ca:85:da:ab:24:ec:c4:bf:8c:
4d:cf:be:e9:eb:70:78:db:57:e6:f9:82:5b:f1:41:67:e2:82:
cd:c1:82:34:41:13:46:03:4e:03:75:51:76:34:67:79:99:34:
cb:fd:a4:e7:ec:68:51:74:4d:af:94:83:41:1b:7d:b4:50:d0:
5e:8d:6f:8a:76:66:7d:5b:c0:2c:22:5f:b8:a8:35:81:eb:27:
41:5d:ef:f3:41:ee:1b:77:39:18:9f:19:68:d7:c0:66:30:49:
f6:06:8e:ce:ca:3e:99:24:57:24:e5:38:c5:bc:1e:ff:28:76:
01:ad:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:14:36 2026 by rpki-client