Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: Ra//frpM1bGgfcJ887XeHN/RB3Yvk+yfL7+yIivIuxQ=
Subject key identifier: AE:A7:7A:08:7B:3F:CA:86:88:13:B2:A6:5C:1A:2C:92:C6:E6:A3:0E
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A06EA7D557501C2598A9F529ABA9BACEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A3C
Signing time: Fri 04 Sep 2026 23:01:27 +0000
Manifest this update: Fri 04 Sep 2026 23:01:27 +0000
Manifest next update: Sat 05 Sep 2026 23:01:27 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: EIHACgZpvfxgSFuk6mRYAyXXwPysXi+5KXarRyMxufY=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:d5:57:50:1c:25:98:a9:f5:29:ab:a9:ba:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 4 23:01:27 2026 GMT
Not After : Sep 5 23:01:27 2026 GMT
Subject: CN=aea77a087b3fca868813b2a65c1a2c92c6e6a30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:6b:fa:9c:56:3f:49:13:11:00:3d:f3:d4:
35:f3:47:be:d8:57:92:9b:a8:a1:af:b5:12:0a:22:
b4:2c:bf:9d:01:bb:a7:67:89:ee:95:a7:e8:79:25:
a4:d0:d3:c9:cb:9b:fe:2d:f8:6a:97:51:eb:7a:bc:
76:7a:e9:2e:34:d1:cf:d8:bf:83:6b:54:b5:6d:87:
a8:29:0b:9e:94:fe:ec:41:dc:d7:fa:9b:14:c3:99:
15:eb:6c:35:4f:bc:fa:e5:1c:cf:8f:53:1c:df:aa:
5a:95:a0:e6:57:88:c7:ed:70:b8:ea:28:41:ba:4e:
a2:3f:78:ee:81:5f:12:6e:13:3a:77:89:10:6b:fd:
49:dc:c2:a9:00:bb:6c:de:18:c7:d9:88:fa:f2:76:
a9:e3:42:42:ad:06:49:11:fb:7b:f8:20:6e:3e:70:
a3:1a:41:94:e9:dc:8b:2d:4e:46:10:03:de:be:28:
45:1f:c7:85:b0:52:63:4b:35:cb:01:4e:8c:c0:c8:
fe:64:0b:ce:00:fd:0d:0f:b5:1e:54:e7:c1:28:61:
e9:84:ca:f6:1e:d9:25:41:2f:f5:df:40:6f:e7:53:
33:9e:77:47:34:de:cb:64:23:7e:d3:26:d5:83:f1:
29:b0:73:3c:dd:94:f3:38:87:a2:1a:99:6e:9c:0c:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:7A:08:7B:3F:CA:86:88:13:B2:A6:5C:1A:2C:92:C6:E6:A3:0E
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b1:06:19:1d:bc:b4:a6:2b:84:4e:aa:13:f3:74:58:e6:9c:
ff:ea:32:45:45:d3:ab:9d:f2:0e:ca:66:6b:bd:9d:9f:81:57:
50:f8:20:b5:85:ce:f0:9c:17:c5:99:49:2d:fb:ef:a2:33:05:
30:63:e4:48:b4:d9:3b:4d:3b:0c:d8:f6:98:cd:fa:49:ca:77:
fe:7a:6a:87:8f:5f:c3:03:24:30:b2:3f:7a:1a:a9:af:b4:82:
2a:4f:9b:54:b8:35:71:93:2b:78:49:c9:7b:d0:8c:aa:5d:70:
be:4d:dd:61:45:25:8e:c7:34:7f:a1:95:42:18:6d:7c:60:45:
37:93:5b:de:d8:95:72:04:e8:f3:6f:18:f6:18:1e:07:2d:ba:
c2:25:94:a4:9a:5a:58:d9:66:19:ef:6e:66:27:37:f5:90:5b:
16:d5:c0:56:83:dd:42:0c:98:37:72:7a:50:db:f1:17:d8:ba:
45:95:3a:9b:e4:89:a9:3a:04:77:44:b0:e5:4c:5b:f2:46:c4:
aa:98:c7:a7:06:32:11:d1:bf:bf:80:69:f6:da:3d:ee:9f:2e:
fc:ae:59:1f:ad:b1:08:51:d8:7f:9f:9d:5b:60:f2:9f:51:c4:
b3:ae:b3:6e:4e:26:7f:a0:45:1d:0f:89:ab:32:a8:81:2e:53:
9c:8a:56:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup9VXUBwlmKn1Kaupus7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwOTA0MjMwMTI3WhcNMjYwOTA1MjMwMTI3WjAzMTEwLwYDVQQD
EyhhZWE3N2EwODdiM2ZjYTg2ODgxM2IyYTY1YzFhMmM5MmM2ZTZhMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Jr+pxWP0kTEQA989Q180e+2FeS
m6ihr7USCiK0LL+dAbunZ4nulafoeSWk0NPJy5v+Lfhql1Hrerx2eukuNNHP2L+D
a1S1bYeoKQuelP7sQdzX+psUw5kV62w1T7z65RzPj1Mc36palaDmV4jH7XC46ihB
uk6iP3jugV8SbhM6d4kQa/1J3MKpALts3hjH2Yj68nap40JCrQZJEft7+CBuPnCj
GkGU6dyLLU5GEAPevihFH8eFsFJjSzXLAU6MwMj+ZAvOAP0ND7UeVOfBKGHphMr2
HtklQS/130Bv51MznndHNN7LZCN+0ybVg/EpsHM83ZTzOIeiGplunAyfRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6negh7P8qGiBOyplwaLJLG5qMOMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7EGGR28
tKYrhE6qE/N0WOac/+oyRUXTq53yDspma72dn4FXUPggtYXO8JwXxZlJLfvvojMF
MGPkSLTZO007DNj2mM36Scp3/npqh49fwwMkMLI/ehqpr7SCKk+bVLg1cZMreEnJ
e9CMql1wvk3dYUUljsc0f6GVQhhtfGBFN5Nb3tiVcgTo828Y9hgeBy26wiWUpJpa
WNlmGe9uZic39ZBbFtXAVoPdQgyYN3J6UNvxF9i6RZU6m+SJqToEd0Sw5Uxb8kbE
qpjHpwYyEdG/v4Bp9to97p8u/K5ZH62xCFHYf5+dW2Dyn1HEs66zbk4mf6BFHQ+J
qzKogS5TnIpWEw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:48:50 2026 by rpki-client