Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: HSVDzBuLPiT2bKWukJrEa6UdsdwOZrULlZEb6E2uQEs=
Subject key identifier: 01:84:96:F1:E7:51:FA:CE:C1:40:79:50:BC:B9:3D:66:64:EF:AE:25
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019F7DAFC49058BDD02317ABB80AB36E076A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19BF
Signing time: Mon 20 Jul 2026 04:01:38 +0000
Manifest this update: Mon 20 Jul 2026 04:01:38 +0000
Manifest next update: Tue 21 Jul 2026 04:01:38 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: DhbKb+krcuvSN1niDTrelEC9jE+tccNYNPsTdyfVIfg=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7d:af:c4:90:58:bd:d0:23:17:ab:b8:0a:b3:6e:07:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 20 04:01:38 2026 GMT
Not After : Jul 21 04:01:38 2026 GMT
Subject: CN=018496f1e751facec1407950bcb93d6664efae25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:45:00:7e:08:5f:7f:7a:51:9e:f9:47:4d:
12:8e:a6:e8:f5:51:be:e6:95:4c:50:27:8a:50:87:
a8:fc:d5:cd:c6:4b:f4:9f:7f:38:34:30:f6:9b:22:
4d:ea:cd:19:91:1f:dc:0e:ed:26:c2:aa:60:d6:cf:
40:5f:72:57:c3:1f:63:be:98:2e:74:60:84:70:00:
77:75:d7:23:47:62:45:02:ab:66:cb:26:c3:b2:2f:
6b:33:73:76:6c:cd:e1:b6:ec:d0:71:db:3c:e3:bb:
1a:e1:3d:ec:79:50:a8:ac:0b:16:21:45:3f:32:97:
92:9a:d1:7c:21:87:13:95:b9:14:4e:99:6c:13:a0:
df:8d:66:63:b3:43:b5:65:1b:34:6a:02:07:c5:41:
17:5a:e6:0f:8b:1c:a0:d4:3a:bf:ed:3f:be:98:37:
3f:6e:fe:63:ca:2f:c5:b5:24:0e:e9:2f:13:0b:89:
13:cd:4e:ae:69:e9:ac:58:46:ff:cf:93:b6:b7:88:
90:7d:da:b9:01:7e:f7:e7:62:9c:72:ba:c4:8f:85:
d0:ed:3b:7b:15:9f:d3:69:b0:53:29:73:87:fc:bf:
05:81:16:4f:bb:85:57:33:7f:67:35:a9:1e:c7:68:
da:75:39:11:c7:7d:8e:13:c3:70:fe:36:d5:56:13:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:84:96:F1:E7:51:FA:CE:C1:40:79:50:BC:B9:3D:66:64:EF:AE:25
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ce:05:ef:19:d1:af:16:61:83:60:1b:c8:96:d0:18:b4:27:
c0:54:59:09:c5:78:3a:d1:fa:b5:91:3b:cd:cb:29:a6:5e:3c:
73:94:c8:da:78:9f:16:1a:40:7e:bb:37:a7:95:ed:6c:66:a7:
76:58:be:d7:84:3f:e7:0b:c6:f7:f2:66:df:e5:d6:d1:66:9f:
94:86:b3:11:60:e8:10:88:f2:ff:b4:c8:ac:19:b2:77:77:aa:
48:14:68:19:fc:25:b7:d6:a8:72:c2:d1:47:33:74:51:19:a6:
31:d8:2c:3f:b7:6c:39:4e:59:38:c1:b2:33:88:36:2b:a2:d3:
de:6f:8f:bc:e3:49:82:b4:d6:d6:24:96:7a:ba:17:ab:82:cb:
b3:dc:b6:cd:00:52:68:d6:e2:28:9c:95:01:96:a0:a1:96:e9:
63:74:15:c8:8f:1e:61:bc:49:0c:0e:49:65:6d:fe:96:5b:1b:
5c:fd:46:9b:21:f9:df:89:9a:73:a1:8c:34:b8:ef:13:6f:c9:
87:c0:3c:75:24:ef:59:23:08:1a:af:d7:cb:7f:ac:66:07:3c:
ee:45:a0:8d:a5:82:5a:7e:a9:f1:9c:6b:73:3d:ec:8d:61:f7:
67:4e:b2:30:db:f0:c7:f8:9f:3a:00:a0:59:db:38:c3:a3:3e:
f3:f8:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 09:28:00 2026 by rpki-client