Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 9KDlUIwHXoBAG5OhXuZ2VS4lM/TXy8TnzA4/igM3QJc=
Subject key identifier: D6:9A:64:31:C5:ED:62:E2:CD:A0:12:32:F0:95:78:25:DC:7B:E5:78
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019F8379B0A0D9B29591EF9D6E45C3EDF6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 07:00:18 +0000
Manifest this update: Tue 21 Jul 2026 07:00:18 +0000
Manifest next update: Wed 22 Jul 2026 07:00:18 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: mphZB/UUqfI0npcyJI3zGBpW3cKRzhDBAj23KKMLiT4=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:79:b0:a0:d9:b2:95:91:ef:9d:6e:45:c3:ed:f6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 21 07:00:18 2026 GMT
Not After : Jul 22 07:00:18 2026 GMT
Subject: CN=d69a6431c5ed62e2cda01232f0957825dc7be578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:0a:b8:59:91:e2:05:aa:9c:73:72:15:2c:
38:40:f6:98:d5:8f:75:68:f1:c6:1a:3a:e6:8f:b1:
41:e2:08:6a:fa:48:af:72:04:aa:e9:22:73:e6:31:
40:dd:f4:d0:a5:57:b6:54:58:bc:45:0b:9f:b6:03:
77:ae:31:83:ce:33:42:be:7b:5b:10:39:fd:a2:53:
ba:3b:29:93:aa:45:28:00:14:4b:57:90:78:73:e3:
0e:74:1a:2c:1f:b6:c5:98:02:ee:5b:83:a8:f2:6b:
a0:ff:ca:5f:4f:7e:28:39:69:38:c3:54:5d:1f:f6:
48:4b:78:62:54:0a:ee:9b:76:7b:23:d0:24:58:53:
f8:a4:73:0e:25:02:f5:2b:e6:6a:5d:87:db:86:70:
69:81:c7:5e:08:2c:0b:58:b4:ec:0a:ea:c1:de:11:
f5:50:ff:ff:31:e0:07:4e:ca:e7:ef:45:f7:f0:3f:
05:b1:2e:8d:c1:1d:2d:f2:1a:db:df:f4:85:fa:a1:
23:fa:69:d2:cd:d3:6e:40:e9:6b:05:f5:1f:86:f2:
ff:6a:71:9c:1e:73:96:a5:4f:a5:7f:8e:15:89:9d:
35:18:b4:96:fe:82:f1:82:22:3e:cf:a2:04:81:69:
51:f2:c1:31:0c:05:3e:18:ac:b0:ba:4f:b2:94:96:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:64:31:C5:ED:62:E2:CD:A0:12:32:F0:95:78:25:DC:7B:E5:78
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7e:4e:2b:2b:f9:f9:9e:c4:6e:53:18:3c:dd:20:82:5b:f8:
af:95:90:22:ab:8f:40:2d:4f:c3:bd:5d:d5:5c:c8:bc:44:d8:
e4:df:1a:93:ce:ef:b2:e2:18:87:95:f0:7f:7a:aa:54:54:a8:
23:96:f7:8e:66:02:74:d4:5c:0c:9d:89:27:57:26:ea:b1:5b:
cf:e2:90:f8:e3:73:2b:0d:c6:b7:a5:d6:44:4f:47:5d:e5:8c:
1e:a9:a7:05:21:aa:d6:85:9f:bf:3e:62:9e:45:0a:00:59:7e:
8f:d4:df:48:61:67:74:ca:42:ed:29:7a:ba:a3:98:35:e9:f7:
b8:93:26:6d:b0:8e:de:7b:78:d7:a3:04:b5:a9:3b:a5:e5:46:
c7:0d:98:a9:3b:16:2c:da:47:df:43:f4:82:4c:44:3e:32:0c:
ef:b3:96:0c:15:6d:f2:53:78:f3:ea:43:44:66:e1:e9:da:c3:
b0:b1:7e:55:6a:1c:25:6e:26:40:4d:a0:8c:52:72:85:f6:3b:
fd:22:80:74:da:27:3d:47:79:4b:b3:70:3e:71:18:cb:44:28:
f2:84:ef:a5:6b:c2:fd:4c:72:d4:eb:2f:a1:89:51:f6:1e:e9:
53:93:ad:41:e3:69:09:63:1b:16:b7:a2:7d:d4:28:ea:c9:4d:
40:79:6b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DebCg2bKVke+dbkXD7fbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwNzIxMDcwMDE4WhcNMjYwNzIyMDcwMDE4WjAzMTEwLwYDVQQD
EyhkNjlhNjQzMWM1ZWQ2MmUyY2RhMDEyMzJmMDk1NzgyNWRjN2JlNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH0KuFmR4gWqnHNyFSw4QPaY1Y91
aPHGGjrmj7FB4ghq+kivcgSq6SJz5jFA3fTQpVe2VFi8RQuftgN3rjGDzjNCvntb
EDn9olO6OymTqkUoABRLV5B4c+MOdBosH7bFmALuW4Oo8mug/8pfT34oOWk4w1Rd
H/ZIS3hiVArum3Z7I9AkWFP4pHMOJQL1K+ZqXYfbhnBpgcdeCCwLWLTsCurB3hH1
UP//MeAHTsrn70X38D8FsS6NwR0t8hrb3/SF+qEj+mnSzdNuQOlrBfUfhvL/anGc
HnOWpU+lf44ViZ01GLSW/oLxgiI+z6IEgWlR8sExDAU+GKywuk+ylJZlKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaaZDHF7WLizaASMvCVeCXce+V4MB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX5OKyv5
+Z7EblMYPN0gglv4r5WQIquPQC1Pw71d1VzIvETY5N8ak87vsuIYh5Xwf3qqVFSo
I5b3jmYCdNRcDJ2JJ1cm6rFbz+KQ+ONzKw3Gt6XWRE9HXeWMHqmnBSGq1oWfvz5i
nkUKAFl+j9TfSGFndMpC7Sl6uqOYNen3uJMmbbCO3nt416MEtak7peVGxw2YqTsW
LNpH30P0gkxEPjIM77OWDBVt8lN48+pDRGbh6drDsLF+VWocJW4mQE2gjFJyhfY7
/SKAdNonPUd5S7NwPnEYy0Qo8oTvpWvC/Uxy1OsvoYlR9h7pU5OtQeNpCWMbFrei
fdQo6slNQHlruQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:20:19 2026 by rpki-client