Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 96tBmteeN4ClXOfU7LIu3tyHaOxbSxBW3h0ltHtkb0E=
Subject key identifier: 54:E3:B0:AF:F7:87:B9:F1:2A:65:D0:F3:E4:BE:74:45:D9:58:A4:E8
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A017C08CBFE0A3C09B01FD20437CB692E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A0F
Signing time: Wed 19 Aug 2026 02:01:29 +0000
Manifest this update: Wed 19 Aug 2026 02:01:29 +0000
Manifest next update: Thu 20 Aug 2026 02:01:29 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: cKE9tYtGwtf+b6kqA88WQ4aQPbrPOmymHZ71x12YcEk=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:17:c0:8c:bf:e0:a3:c0:9b:01:fd:20:43:7c:b6:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 19 02:01:29 2026 GMT
Not After : Aug 20 02:01:29 2026 GMT
Subject: CN=54e3b0aff787b9f12a65d0f3e4be7445d958a4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:e4:8b:67:c7:de:34:22:9e:4b:98:fa:6f:
d7:e2:2f:6e:31:43:d7:21:92:d7:53:1a:e2:f1:c7:
94:93:78:e8:53:26:73:a1:ae:8d:c6:47:8f:6c:2b:
3a:6e:8d:e4:fd:e3:b2:26:7d:6d:61:ae:da:9c:21:
8a:29:59:97:80:77:25:b2:14:07:e2:ef:a4:00:12:
05:dc:f4:2a:22:35:ca:5a:ba:62:59:51:26:1e:57:
59:30:c3:fc:97:64:33:1e:d3:60:55:0b:b5:cf:b7:
33:f9:f4:10:2e:86:ba:0a:44:1d:c3:d4:29:05:49:
e3:34:5a:d3:61:86:35:15:a1:43:b5:d7:35:d3:ae:
bc:77:22:f9:a4:7f:82:1d:b2:ba:02:0b:63:d3:93:
ab:84:c6:68:4a:5d:96:96:ff:47:ca:8f:b7:cd:3a:
73:59:08:45:1e:ec:a0:19:0e:bb:65:30:9e:30:f1:
a0:ce:25:88:96:e8:32:fe:b2:8a:46:ab:12:ea:44:
73:00:b7:35:2b:9f:0e:9d:32:62:0c:dd:e0:8c:e1:
43:d9:5b:02:c1:8a:25:cd:c0:73:20:aa:54:be:66:
87:4b:bb:a0:6b:84:e1:c0:70:dd:d6:31:13:a9:85:
bd:df:6b:b8:05:49:00:ae:2a:32:af:8b:6c:84:da:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:B0:AF:F7:87:B9:F1:2A:65:D0:F3:E4:BE:74:45:D9:58:A4:E8
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:37:d9:ed:94:3f:3f:a0:5c:01:97:dc:02:8a:54:e7:ba:
39:a5:0c:2a:74:66:36:53:28:b5:d5:f9:ec:42:d5:e1:b4:45:
32:dd:56:b1:8b:21:ca:7c:ed:fe:bf:37:17:4f:84:00:db:a1:
26:ed:bc:fa:af:77:0c:fd:5d:23:44:1d:e2:bf:2e:fc:98:dd:
c5:ba:b7:97:79:3b:8c:ae:28:d4:bf:0d:fe:9c:c4:b0:77:7b:
18:f6:c6:1b:66:3f:94:45:01:9e:45:bd:c3:2c:14:ad:df:99:
22:5a:6f:3d:a6:e0:af:b9:50:1e:89:ad:5a:36:13:b7:a3:2f:
7d:47:a6:b2:e3:82:a3:66:fd:8f:44:5f:a5:d4:32:2e:b9:db:
fb:00:e2:76:f6:4c:5c:d7:ec:11:79:aa:94:49:08:ea:d0:eb:
92:b8:1d:cd:fc:0c:c6:a7:f3:d8:2f:1c:f2:00:7c:e2:37:d6:
c9:68:9e:38:df:8f:7f:e4:df:1d:92:50:a1:df:d5:84:95:7e:
e2:98:51:7a:42:91:87:bb:88:49:f6:84:4c:40:f8:c2:2b:11:
f6:5b:1d:44:7c:ff:cf:bd:62:42:0c:02:ea:92:68:ce:1e:55:
95:8a:bf:e5:23:67:55:58:37:45:45:6a:b7:5b:77:24:d8:b0:
25:b8:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:16:47 2026 by rpki-client