Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: dAsOtyWysR5fscWYCvrMe0Ut+rgwaUKZpv6bI7xd8g8=
Subject key identifier: 83:9F:DA:B3:D9:B6:6F:1A:EC:2A:5F:58:63:EA:97:28:1B:B2:C2:44
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A023564BB57084DEEEE7E0C791F2320538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A15
Signing time: Fri 21 Aug 2026 08:00:52 +0000
Manifest this update: Fri 21 Aug 2026 08:00:52 +0000
Manifest next update: Sat 22 Aug 2026 08:00:52 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: m68PVq6PjE6fRfxjiB3ITPccLUohjWWoeH7r15ddFD8=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:56:4b:b5:70:84:de:ee:e7:e0:c7:91:f2:32:05:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 21 08:00:52 2026 GMT
Not After : Aug 22 08:00:52 2026 GMT
Subject: CN=839fdab3d9b66f1aec2a5f5863ea97281bb2c244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:58:8c:df:ff:10:9e:55:d2:b8:e4:e0:16:
77:44:93:80:20:7a:de:25:04:63:6b:26:49:16:46:
2c:ed:b6:26:b6:db:34:dc:b4:94:e1:81:23:3f:10:
31:0c:1b:a8:62:86:78:0a:43:12:72:5e:7e:0f:08:
46:3c:53:ad:ae:3c:a1:8b:88:5f:d8:55:f2:40:86:
f8:0f:96:fb:4a:b1:27:63:74:85:16:9c:88:fe:96:
b8:3c:2e:75:30:cc:04:82:9e:51:64:01:a4:9f:93:
09:ea:5d:32:79:0a:ff:51:0d:c2:d6:45:d3:03:08:
cd:30:dd:f9:4b:e0:3a:33:63:0b:d1:71:ba:81:99:
93:fd:64:fb:26:ee:a6:cc:32:91:4e:9b:b5:8b:bf:
23:5a:73:9e:de:dd:5d:76:0e:b4:2a:5b:04:95:20:
5a:5c:83:37:9b:a3:a5:3b:dd:90:f8:a6:72:ac:5d:
69:17:cc:77:6b:5d:eb:a2:9d:41:a4:5d:c2:02:ab:
9d:bd:d8:d3:72:87:b4:e7:b5:1d:f3:c8:11:1d:74:
f2:77:e7:e7:5f:02:79:bf:d0:c6:6f:1f:66:40:03:
7a:8a:f3:9d:64:04:3d:4f:44:bf:a1:74:9c:2d:19:
06:41:b6:c2:17:aa:f1:d4:4a:44:fb:ff:b8:21:c4:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:DA:B3:D9:B6:6F:1A:EC:2A:5F:58:63:EA:97:28:1B:B2:C2:44
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:eb:ef:be:24:91:d6:dd:f7:50:7a:71:55:87:aa:e9:37:60:
07:6e:72:2c:39:b4:98:7d:ae:4e:1b:12:e0:0b:99:22:d5:5e:
79:e0:8f:5d:a8:3e:fc:70:22:15:8f:de:de:58:7e:d0:d1:6f:
8d:fc:df:ba:25:8b:8d:c0:79:8c:96:01:89:8a:c3:8f:3c:2b:
1d:4a:9b:4d:a5:ca:3c:cb:76:98:d7:e4:5a:f6:d4:8a:65:13:
e0:49:52:fb:94:1e:f1:ad:aa:2a:d1:29:e3:cd:d9:63:19:75:
fa:c2:8d:9d:a3:04:e3:43:5d:89:28:d7:14:4f:01:e5:5c:22:
3a:1c:c2:07:ec:83:90:22:91:97:32:d4:5f:c9:74:3a:01:18:
39:f7:12:ac:fd:84:95:1b:b4:da:cb:15:3b:7b:78:59:93:50:
73:7b:a8:4f:03:df:2d:8a:68:df:6c:4c:92:cb:92:72:b7:2e:
35:b4:95:47:19:8d:e0:c2:38:c7:db:8f:2f:d2:a6:4c:6c:d5:
70:83:ca:52:b9:b3:4a:5c:54:da:dc:a8:a5:1e:d5:f9:d0:df:
a6:cd:2f:0d:50:6c:74:1c:48:04:64:40:b4:42:24:7f:28:22:
d3:76:df:a6:ff:58:ac:31:04:70:94:c9:e7:1f:84:c1:92:37:
11:ca:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 11:05:41 2026 by rpki-client