Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: B4C8TbOm+ZGtQw9tMS8w8EQ+W3MW+O8vR+Bei0S7uXU=
Subject key identifier: 2B:EC:2C:DD:8D:50:70:D8:0D:30:F1:00:F9:92:DE:62:2B:A1:47:DE
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0DE052F6130D772BA9D9552DE83F7DB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 14:01:16 +0000
Manifest this update: Sat 26 Sep 2026 14:01:16 +0000
Manifest next update: Sun 27 Sep 2026 14:01:16 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: RaWtTDmr9gCQ72AfOf8UrFXZvVU7l8mgqF9972I31Hk=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:2f:61:30:d7:72:ba:9d:95:52:de:83:f7:db:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 26 14:01:16 2026 GMT
Not After : Sep 27 14:01:16 2026 GMT
Subject: CN=2bec2cdd8d5070d80d30f100f992de622ba147de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:98:66:28:b6:6c:a8:01:f6:12:7f:02:cd:
17:1e:de:c7:ab:d2:1c:b2:55:f5:c9:4a:00:bb:9d:
37:b0:f0:de:14:da:81:6b:40:f0:5f:c5:35:88:13:
5d:47:73:65:81:75:d6:83:e9:dd:da:7d:56:8c:10:
ea:25:73:05:1e:9a:1b:3e:bb:e2:9c:6a:5b:12:68:
cd:b9:f6:5b:a8:e9:e0:8b:4f:e7:24:08:88:a4:1a:
fc:c0:6f:62:af:af:af:24:1f:a9:4a:34:b6:09:ef:
2e:85:55:ac:94:27:69:4a:fe:58:e1:c8:2e:2c:fd:
d0:d6:97:35:75:73:97:9d:77:96:f6:46:29:f1:b3:
a8:1e:9e:29:36:50:70:de:fd:f9:ac:62:49:c7:6d:
07:79:f0:27:8f:4b:ad:5f:83:66:5b:23:9c:26:b8:
01:8e:ec:e6:cb:5b:f5:11:9c:66:0a:54:33:90:96:
8b:c7:b5:c5:30:c6:54:2a:41:57:dc:39:d3:d7:93:
e8:ff:d8:5b:bb:20:ce:0a:c2:b2:7a:0d:80:b0:f7:
e9:6c:03:6a:de:77:b2:c5:b1:a4:f6:fc:6f:60:97:
53:4e:91:04:8b:98:2c:7f:20:66:87:66:6b:1c:d1:
32:1a:a9:3d:6a:93:0a:0a:c9:d3:a8:f6:f8:2b:41:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EC:2C:DD:8D:50:70:D8:0D:30:F1:00:F9:92:DE:62:2B:A1:47:DE
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:88:13:75:e5:99:ba:b0:83:e2:28:91:c2:6d:48:50:d7:a1:
b2:93:74:ce:0d:7d:6c:4b:de:df:fc:82:88:55:3b:62:2c:b6:
94:be:bb:66:aa:a6:07:9c:c7:71:24:a8:c2:6c:4d:b8:cf:d7:
d7:48:8b:fe:92:d5:10:f2:15:19:63:73:68:c8:d5:eb:3c:2a:
ba:45:7d:0d:76:a8:9e:fe:18:27:a3:8f:aa:50:e9:15:9e:7c:
60:1a:e4:83:23:12:23:85:11:43:b3:4d:82:83:dc:18:65:42:
d2:d7:7e:43:4e:d6:ca:14:ef:49:8a:ed:fe:0e:21:3d:ad:6c:
26:03:94:9b:0a:57:7e:f8:ee:b5:33:58:2e:40:24:22:7e:d5:
63:fe:ac:2f:6a:69:b8:2b:92:de:79:b3:fd:59:7b:00:51:55:
26:b3:e5:13:9b:20:1d:a7:c5:a7:cc:fb:8d:02:cf:4b:c7:8f:
af:2d:be:bf:0a:0c:10:6e:fa:6e:9b:0b:44:f3:df:ff:2a:9a:
b5:85:3f:3e:c1:21:0f:90:a2:9e:e2:3a:64:59:ad:6f:e2:70:
52:a9:bd:e2:a0:69:b5:22:58:71:67:8c:c5:70:74:d8:c2:65:
3b:df:5f:c6:43:23:29:20:fc:aa:61:58:4e:3f:d1:66:4f:25:
e1:33:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:58:31 2026 by rpki-client