Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: J2+8Xd7QoMqsbkohWISPCZSvB/0nD43Up77gBAEjXeE=
Subject key identifier: 4F:7A:ED:C6:89:02:DE:14:78:BA:23:0C:B7:6E:FE:AA:B3:24:E9:09
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A081F725315F2B7EEACB59687675133927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A46
Signing time: Tue 08 Sep 2026 17:00:52 +0000
Manifest this update: Tue 08 Sep 2026 17:00:52 +0000
Manifest next update: Wed 09 Sep 2026 17:00:52 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 04etBRLD8DbOicai3eJ2GMcyTsyUaqcyxCXI0vflfe0=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:f7:25:31:5f:2b:7e:ea:cb:59:68:76:75:13:39:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 8 17:00:52 2026 GMT
Not After : Sep 9 17:00:52 2026 GMT
Subject: CN=4f7aedc68902de1478ba230cb76efeaab324e909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:df:12:7a:7e:56:4b:33:29:14:2a:20:f0:
47:f4:60:c6:ba:fd:12:e2:c0:d8:fe:98:9f:1b:68:
0b:22:9f:f1:ca:1f:17:93:b0:8a:95:b0:95:ad:ba:
dc:5f:b3:9d:6f:45:67:64:bd:91:2f:17:d7:5a:de:
51:66:1e:5a:c5:49:ef:27:fc:b2:bf:bc:07:f5:2d:
82:ec:a2:75:6a:fc:d6:32:72:0d:80:f0:52:2e:7f:
37:ef:5c:a8:0d:bc:69:8e:09:62:45:1c:52:1f:42:
08:30:df:8b:be:d3:22:e2:91:bd:97:51:11:b9:e9:
de:11:35:19:ea:9d:93:d2:4c:1a:b6:14:cd:e4:d3:
a1:7f:6b:e9:44:38:ee:57:4c:7b:a0:4f:0e:5d:a2:
59:ef:0d:c8:42:3b:4e:79:88:ae:bd:ab:1e:bb:c6:
93:8f:32:04:94:0c:5b:28:79:8f:b3:7e:03:59:aa:
08:a8:68:85:07:22:f1:c3:bc:fc:e5:10:fa:9e:2f:
39:3a:f0:85:1f:93:19:ad:0f:52:8f:cb:9f:f1:bc:
8d:5d:fe:bc:bf:71:da:e6:ec:14:ad:56:8c:76:76:
bd:67:26:e4:22:27:ad:3f:0f:b5:1d:6d:6e:b3:39:
31:26:60:a9:df:2f:77:49:a9:ac:79:9f:ab:cf:36:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7A:ED:C6:89:02:DE:14:78:BA:23:0C:B7:6E:FE:AA:B3:24:E9:09
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c2:ca:14:86:b1:99:cd:71:96:7a:cc:a5:bf:ae:3c:26:3b:
8d:98:ab:ba:6d:a2:b0:01:87:06:29:a0:04:81:65:35:85:6c:
4d:e6:b7:af:05:e4:39:30:c2:06:b7:92:c1:a8:03:26:93:97:
a9:84:9c:20:a2:d9:82:8f:59:39:a0:bf:65:b2:fc:a6:b8:dc:
e3:9d:22:7b:f0:6f:15:0f:ce:78:ad:f6:62:c5:e6:59:1f:e7:
ed:e1:9f:d2:89:77:3a:c6:fa:98:ca:b6:5f:71:1e:18:a5:1f:
0a:0a:f7:cb:dd:fb:29:c5:66:6a:c2:02:a8:56:16:43:a3:6b:
a6:26:4b:24:ae:9c:75:f4:64:52:9a:9b:d4:54:27:9e:b3:13:
72:ac:8f:75:8a:68:8c:8b:04:72:67:93:17:fc:3b:4f:da:6e:
a2:30:aa:1e:b7:f3:d6:d5:b0:57:b1:32:fd:90:38:f1:eb:73:
25:dc:19:04:db:25:dd:ef:36:9f:27:21:79:77:cc:b0:65:f8:
e3:40:cb:9a:6a:6c:4f:63:d0:0e:e6:aa:72:e1:52:db:72:18:
b6:09:a2:17:08:de:7c:bd:62:ca:40:e6:84:a6:68:3d:59:e2:
84:29:4a:b3:d0:ca:47:79:0b:92:9f:ea:27:1f:eb:d4:eb:b5:
ad:59:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:07:57 2026 by rpki-client