Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: OCZhmWbhuSxispxBw2y8H87BnSCn6V48AKRKttWgcMQ=
Subject key identifier: B8:6D:08:5F:12:A8:3C:A5:8C:1F:FF:31:AD:56:44:CD:58:31:30:8C
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FA82B56105D816D77322BFAD23882D2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 10:00:40 +0000
Manifest this update: Tue 28 Jul 2026 10:00:40 +0000
Manifest next update: Wed 29 Jul 2026 10:00:40 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: p5II7WZ30RHO8cAxJEmMKhYIamFvOi4ieDNIbm082FY=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:56:10:5d:81:6d:77:32:2b:fa:d2:38:82:d2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 28 10:00:40 2026 GMT
Not After : Jul 29 10:00:40 2026 GMT
Subject: CN=b86d085f12a83ca58c1fff31ad5644cd5831308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:c8:14:7c:d7:f2:05:3d:52:1a:0e:52:cf:
1a:39:84:8c:ae:2b:45:ab:39:b3:bc:5f:52:58:0a:
be:14:df:19:85:a2:c4:f6:32:4c:99:41:77:e0:07:
08:ff:5a:64:e7:59:00:b5:29:83:c9:f7:80:85:90:
f5:4e:d5:ff:75:cc:b1:e8:00:92:53:24:2f:33:35:
b9:9f:88:54:9f:8a:d9:44:f3:14:f7:dd:85:df:bf:
ac:c0:da:42:f3:11:d7:88:87:11:c2:47:c9:8c:40:
20:78:1e:de:26:bb:9e:5a:cd:6a:8a:6a:f9:64:95:
e2:2f:e1:73:76:1e:55:58:e4:01:09:6c:34:60:63:
ad:5f:c1:72:da:b0:a9:bc:ba:24:3f:78:ac:6c:c4:
a6:30:ee:0d:62:01:68:22:13:ff:5d:7a:b4:c6:db:
0f:80:f3:ad:ec:48:dc:f6:15:ed:94:ed:61:b1:0b:
cb:c9:77:88:72:bc:b9:3b:1a:78:88:7b:fb:7a:08:
05:68:ba:00:07:dd:1d:9a:11:4e:b2:42:0b:00:dd:
d0:66:c8:c6:d3:a1:fa:8a:c0:88:c8:da:5a:e9:ee:
b7:f1:7b:b8:42:28:8b:45:9c:c3:29:92:5a:ce:6e:
a8:41:51:7a:f2:c0:48:c7:f8:c7:fa:7f:d4:ab:e7:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6D:08:5F:12:A8:3C:A5:8C:1F:FF:31:AD:56:44:CD:58:31:30:8C
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:67:41:87:a7:d9:bd:3a:fa:f3:86:eb:2c:f2:8c:05:b3:
93:12:d7:65:ef:eb:a5:4e:7d:4e:eb:28:3c:99:1a:83:ea:e4:
b3:2a:a7:35:76:14:cf:10:53:33:39:91:b6:49:22:69:06:cc:
aa:66:83:f6:08:02:df:78:c0:6b:31:c8:03:88:a0:b7:ff:5a:
19:64:cf:6e:95:b9:02:32:ae:a9:75:e3:3b:dc:a0:0e:18:eb:
bc:27:c5:35:44:ae:dc:3f:60:4f:eb:59:e7:aa:db:43:81:60:
2f:d3:e3:45:bb:2c:c1:a1:9f:e3:42:e6:9b:c7:b9:3c:0f:cf:
d1:7b:bd:ae:e2:72:66:c9:b9:8f:83:6c:de:19:37:7e:c4:24:
99:a2:fe:07:cb:c4:b2:80:ec:39:66:0f:0c:02:be:d5:8f:11:
67:49:0c:55:a2:fc:56:06:9c:4a:79:1b:41:26:a5:81:31:68:
43:3e:cd:56:b0:13:4a:ab:4a:9e:16:a1:84:0a:a9:6d:93:e3:
f0:7c:0c:16:a0:c7:57:a1:cd:80:c9:a3:62:48:e6:6b:23:35:
e9:fe:85:1c:df:5f:91:73:8b:2d:49:50:af:c0:e0:30:5f:93:
ad:a3:9f:6e:46:5b:5a:e5:75:1c:28:52:74:36:a0:d4:ce:bf:
79:2b:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:26:07 2026 by rpki-client