Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: beojGHtJ5iq8qZZnP37bk+4ucie4NDJNPnfqwlxNFHw=
Subject key identifier: 07:14:44:11:54:86:ED:73:2E:54:B9:FA:0E:99:EB:65:87:C0:6D:D3
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FCE886F03474816CEB3D95BD0DCBADF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19E9
Signing time: Tue 04 Aug 2026 20:47:55 +0000
Manifest this update: Tue 04 Aug 2026 20:47:55 +0000
Manifest next update: Wed 05 Aug 2026 20:47:55 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: I90Rt1op24kCDpiQtDwVVOQzYQL1vI/STwm1t5nF3nU=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:88:6f:03:47:48:16:ce:b3:d9:5b:d0:dc:ba:df:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 4 20:47:55 2026 GMT
Not After : Aug 5 20:47:55 2026 GMT
Subject: CN=071444115486ed732e54b9fa0e99eb6587c06dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:f3:9d:16:90:ee:b1:cc:da:b7:74:9c:e7:
32:82:0c:47:f7:1f:50:28:c3:70:ac:c2:41:8c:c3:
b7:f3:00:ba:aa:ff:0b:c8:e0:c7:18:86:e9:10:f2:
37:0c:d7:b9:57:41:5f:9b:de:f8:3d:31:86:40:65:
34:1f:67:65:ba:4c:ba:9e:ac:de:60:de:c9:75:c8:
2e:ee:bd:c8:41:ee:5c:ce:9a:93:c3:ab:0f:73:34:
6f:7a:f0:65:cf:da:0f:97:49:94:7e:ea:ad:d1:dc:
e2:b7:5a:3f:38:6e:a3:41:f9:8e:58:6b:d0:20:43:
2b:8d:2a:f9:c1:3a:c1:bf:bc:a8:38:bb:40:97:dc:
dc:ed:70:3d:12:b6:c7:f7:3b:1e:7b:39:cd:cc:e9:
3e:70:a3:f4:34:6c:fe:cf:7c:99:3e:ce:06:96:d8:
a1:f5:6d:ac:77:03:23:25:f0:a3:77:39:e6:2a:b3:
8d:65:1b:15:ef:5d:e0:4f:a2:6d:86:1d:0a:18:f9:
9c:22:f8:18:e5:c6:ed:d3:7f:38:02:5a:1a:78:56:
4a:f3:19:54:cb:e3:0a:2c:d8:fe:be:5b:ad:f0:9e:
9f:bc:30:10:07:9a:13:ae:29:01:58:00:6a:af:6c:
4e:95:5f:a3:66:05:4b:ea:62:2b:1f:27:bf:c4:6f:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:44:11:54:86:ED:73:2E:54:B9:FA:0E:99:EB:65:87:C0:6D:D3
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1d:06:17:a0:3a:a8:75:cf:9e:a2:13:73:ad:37:27:95:d5:
2e:e4:1f:b2:dc:61:92:27:6d:91:3e:af:60:c8:eb:e7:b8:f4:
90:fd:90:60:33:0d:f5:2c:c7:70:b4:ca:68:72:14:1f:ba:47:
31:bd:8c:ce:21:dc:51:a2:e2:ff:20:34:ea:1d:43:ba:51:aa:
42:d7:ce:8f:91:3b:80:67:1a:93:22:42:fd:82:0c:40:7a:ea:
04:df:b9:e9:dc:1a:e8:b4:2b:2d:2f:32:2c:5e:33:c3:09:6d:
2a:b8:87:29:0a:63:64:f2:a4:a4:60:ab:54:6e:33:5b:8f:d9:
bd:cc:de:4e:bd:6d:f1:5b:73:61:4b:20:a5:29:11:ba:89:31:
1c:9b:ec:57:78:1d:55:aa:30:34:1f:74:a0:f6:e3:36:ea:7a:
7e:31:eb:c8:ac:28:d4:6e:7a:68:81:9c:96:db:58:25:41:90:
ee:ac:48:d7:ea:bf:50:c2:e7:10:43:c3:6b:38:05:15:e5:97:
42:47:9e:4f:ef:22:33:07:73:61:46:98:10:b8:28:f1:e9:82:
90:22:a4:f5:e3:77:81:6c:b8:05:ce:a3:98:6c:5a:0b:50:ef:
0d:b0:3d:0c:d8:84:b8:18:1d:a3:f0:dc:b7:68:93:9c:fa:63:
ba:0c:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 22:26:08 2026 by rpki-client