Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: PA0moKeULX1xudojymLHIkTTzeEeNpScKo2sx5QSX6E=
Subject key identifier: 7B:5C:A2:E0:73:B5:24:A1:24:F2:44:AD:B7:C7:24:73:93:55:38:67
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0A41617E944C37FF7F7A8213E5CAD29BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A58
Signing time: Tue 15 Sep 2026 08:01:46 +0000
Manifest this update: Tue 15 Sep 2026 08:01:46 +0000
Manifest next update: Wed 16 Sep 2026 08:01:46 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: qvN3ljkkLRFewxIEEJTbUzQGOX3VYG/zR2//oLD+1Wc=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:16:17:e9:44:c3:7f:f7:f7:a8:21:3e:5c:ad:29:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 15 08:01:46 2026 GMT
Not After : Sep 16 08:01:46 2026 GMT
Subject: CN=7b5ca2e073b524a124f244adb7c7247393553867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:d3:bd:5d:09:99:96:de:d5:f1:46:6b:d9:
bc:8a:f2:2e:24:55:1e:9f:41:4a:eb:98:6f:4b:39:
97:3b:cf:3b:84:0f:a5:ae:f5:84:7c:9d:42:bd:5d:
f2:d1:79:06:9a:9d:2f:82:2d:23:46:ad:f0:c0:45:
d4:e0:fc:1f:b6:14:14:f0:39:86:86:e4:da:06:4a:
1f:36:b3:db:23:3c:a3:d5:3b:65:58:5b:c7:57:45:
15:82:11:71:9e:5e:68:73:f1:8d:80:67:b7:3e:db:
a5:7b:8d:14:c0:cc:a9:ba:64:7d:71:21:3f:2d:a1:
54:9a:f9:c7:d8:ec:c1:c5:4e:c2:5e:21:a9:89:4c:
90:7d:2f:1d:cf:41:0c:c8:02:6e:86:7d:a8:fc:55:
f9:09:79:73:dd:2d:d3:d1:b5:b6:b2:37:0a:12:ff:
d1:dd:67:72:c8:18:58:8a:bf:78:d2:9a:52:9d:f9:
67:53:d0:cf:c1:2f:18:70:83:4c:b3:bb:4a:46:53:
65:c1:42:83:8a:8b:ce:0e:04:e8:13:74:c6:37:87:
d9:14:61:8d:83:3d:4a:fa:d6:5f:d1:03:a3:5a:66:
4e:f9:cd:04:75:36:6e:18:c3:21:c6:59:c4:0a:3e:
c2:95:2d:84:de:d3:dd:7a:c4:95:88:eb:42:e1:5e:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5C:A2:E0:73:B5:24:A1:24:F2:44:AD:B7:C7:24:73:93:55:38:67
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b2:da:65:97:2e:73:10:6b:11:c9:ee:6e:11:58:ad:5e:32:
ab:83:b7:03:46:92:66:27:d4:73:a5:af:5b:26:c2:f1:f2:94:
56:f1:b9:ae:55:d7:82:04:5f:fa:90:76:63:31:e4:e2:46:a1:
2c:fe:52:63:86:7e:9b:2c:c1:30:16:20:36:99:7e:2c:26:5c:
22:de:72:cf:19:d1:3a:c1:d4:58:6f:2e:52:da:a6:97:32:60:
47:67:46:ac:30:9e:6b:1c:15:ac:bd:70:60:3a:26:64:ec:aa:
ef:1e:6d:00:18:22:09:3a:45:24:24:3c:8d:f5:e9:dd:ca:76:
f5:fd:54:cd:3b:90:54:c0:fd:1e:68:78:42:eb:50:55:de:30:
32:ec:ef:f1:f5:a4:14:92:a7:58:13:21:23:75:7a:7b:b7:2f:
81:61:62:ff:68:be:5a:c8:80:d7:c5:5e:3b:e6:96:a3:7e:ad:
0a:b2:c8:0e:17:ae:58:6d:64:eb:de:4f:f1:e7:57:6d:44:db:
06:09:52:75:8a:c4:57:af:f3:96:c4:e9:0e:57:66:e1:8d:10:
60:61:30:0c:00:10:be:4a:2f:fe:81:5c:99:24:6a:48:0c:5c:
37:ff:66:14:75:f3:54:4b:78:65:d8:0a:f9:84:de:e5:a9:8b:
6f:04:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:16:24 2026 by rpki-client