Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: Ml1izuFViszq8vVt8V+8Vi2g4r/9e0uuInCM9pVzEK4=
Subject key identifier: 3A:32:F5:EE:0F:65:52:26:E0:27:07:27:B7:9D:DE:C8:23:5E:A7:A9
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A00E17EDD07E1C921FA8E9668E49A1563A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A0A
Signing time: Mon 17 Aug 2026 05:00:44 +0000
Manifest this update: Mon 17 Aug 2026 05:00:44 +0000
Manifest next update: Tue 18 Aug 2026 05:00:44 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: IXp6u1+u6O+sxZJvHLi1TcZOQSUHgYr0LgH1Rab9Xy8=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:17:ed:d0:7e:1c:92:1f:a8:e9:66:8e:49:a1:56:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 17 05:00:44 2026 GMT
Not After : Aug 18 05:00:44 2026 GMT
Subject: CN=3a32f5ee0f655226e0270727b79ddec8235ea7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:9e:f9:2e:f8:de:0b:0c:92:fc:6f:22:69:
98:24:35:f1:16:4d:ed:d5:7d:d8:43:e0:62:60:b7:
32:f4:e2:f5:3c:5c:15:5d:0d:73:56:04:b7:b5:d4:
6a:40:58:39:20:cd:af:90:cd:08:1f:69:df:f3:2c:
9a:02:4e:a8:00:7a:63:e2:85:ad:39:07:70:b8:3f:
c3:b4:85:a4:93:0e:75:df:87:15:67:eb:5c:04:d7:
3c:58:df:08:b0:a4:fb:bb:62:26:04:84:e5:c7:9b:
4d:9d:10:d6:9d:a9:2a:66:b7:36:85:6a:e1:b3:dd:
8c:9f:f0:dc:1e:39:7d:dc:95:c9:6e:1b:ac:02:54:
49:1f:07:2b:0f:f8:a8:75:4c:5f:7a:ec:9e:98:1b:
d2:59:ce:4f:3f:3d:7b:9f:98:14:ef:e7:93:62:8b:
59:40:d6:8b:ab:63:13:75:18:21:8d:53:5a:21:1b:
19:dc:a3:ae:b4:35:14:67:c6:b7:78:dd:f5:79:a0:
f5:ad:1e:f1:3f:e6:b8:08:e1:95:fe:84:8f:e1:da:
9c:70:b2:66:6f:12:42:44:f3:a0:d1:9d:b9:4f:d3:
49:5b:12:5d:0a:b4:29:eb:9b:cf:7f:eb:29:14:fd:
54:88:b9:d1:27:43:db:cf:aa:ee:fb:54:c6:4f:6e:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:F5:EE:0F:65:52:26:E0:27:07:27:B7:9D:DE:C8:23:5E:A7:A9
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d1:60:57:70:e8:ac:91:eb:0d:76:28:11:2e:4b:65:2a:92:
d4:4c:ec:f6:02:b8:17:84:d8:8f:34:fa:7f:2c:47:17:97:e1:
7d:b6:1e:bf:56:b3:ca:bd:19:2b:1a:67:c8:50:2b:84:ff:73:
4e:5c:9f:92:e3:95:48:76:bb:57:22:21:b7:d2:04:83:f7:60:
ee:6f:50:0a:41:72:db:6a:8c:83:d4:76:29:20:ce:c2:06:ce:
47:de:bc:8e:6d:e2:4a:52:e6:01:3c:16:47:31:c3:6d:dc:f9:
ef:97:84:ff:ff:9a:50:a8:06:91:64:1d:fa:19:c1:ee:1b:ef:
b3:03:aa:b4:36:34:96:aa:7d:54:6d:ba:fe:22:e7:82:b5:c4:
d3:58:bb:92:03:79:04:6f:15:6d:ba:4c:c7:bd:70:a9:9a:c4:
46:47:18:42:1e:52:4e:df:a6:b9:37:24:e9:ae:8b:3c:b4:f1:
f2:2d:68:2b:2f:74:0a:68:08:58:d9:2f:32:03:63:15:09:62:
d4:ec:21:bd:88:af:0a:b5:2d:f0:c1:9b:a8:4c:29:52:cc:bc:
c2:dd:aa:05:5a:a5:be:31:99:4c:5c:8c:86:8c:34:da:0b:bd:
90:df:ef:b7:58:73:5c:8f:3a:e7:ba:ed:a3:ff:dc:9a:29:55:
83:e0:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 08:45:37 2026 by rpki-client