Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: qySocoQhFHWOJBQU/zIqzpDLIK6UGzFq22eEGOKy/KY=
Subject key identifier: AA:B1:94:44:90:72:4E:BC:6A:C8:34:E3:30:5B:9F:75:D0:03:BF:06
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A01D8ADBA80918E4AB078C0BCDE718892C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A12
Signing time: Thu 20 Aug 2026 05:00:34 +0000
Manifest this update: Thu 20 Aug 2026 05:00:34 +0000
Manifest next update: Fri 21 Aug 2026 05:00:34 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 2/lETcseZzaLO1JilCYyBxXEXHLOBdiMyjQqUSIOT1Y=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:8a:db:a8:09:18:e4:ab:07:8c:0b:cd:e7:18:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 20 05:00:34 2026 GMT
Not After : Aug 21 05:00:34 2026 GMT
Subject: CN=aab1944490724ebc6ac834e3305b9f75d003bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:ef:54:22:8b:8a:57:02:b9:74:e6:de:dc:
8b:ee:6c:e6:62:0b:64:07:bf:99:5c:b9:38:c4:a6:
a1:ea:a9:00:30:72:00:77:68:43:88:6c:df:5f:7d:
10:5a:45:41:d6:bd:b8:7a:5f:7a:71:67:32:82:19:
ef:6b:f1:f6:a6:e8:7d:fd:7f:a5:09:fb:ee:af:ef:
74:85:98:28:05:4b:36:13:9d:41:2a:39:78:85:cb:
6e:ff:75:7e:de:86:39:98:09:80:db:d4:74:40:2e:
77:7b:c4:b4:5e:d5:16:e8:8d:05:62:46:f4:ac:c7:
90:5c:1e:dd:73:4a:d2:73:43:43:b9:fa:66:d3:78:
d8:33:ce:2b:57:bc:b4:77:06:70:02:b2:b0:a1:c7:
9b:73:40:0b:98:c3:7f:5c:e3:e2:3f:fc:66:35:98:
0e:10:a9:75:41:0d:1a:77:34:dd:90:2c:65:7a:10:
97:3b:96:d8:6f:f9:7c:7b:34:a6:3d:90:ab:53:11:
e6:cd:35:78:28:d2:66:e4:55:f6:28:be:3a:42:e4:
b7:fe:a2:0f:da:77:81:fd:fc:1e:0b:c3:ac:5f:13:
ca:c7:95:3b:d2:18:e6:03:42:b3:e3:5e:57:64:c8:
98:fd:9e:47:be:34:ab:8e:3c:06:95:b6:ff:04:fc:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:94:44:90:72:4E:BC:6A:C8:34:E3:30:5B:9F:75:D0:03:BF:06
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3b:67:99:c1:b1:1e:f7:67:ed:10:2b:fa:81:e6:5c:bc:e7:
6b:53:f5:8d:41:65:71:68:71:18:af:24:de:4b:37:00:75:0e:
0b:5a:66:54:9f:b0:c7:bb:38:b1:33:43:9a:dc:63:22:58:2e:
40:ab:a7:19:88:5b:a1:1e:3f:16:4c:e9:2d:2d:17:f1:1c:ee:
c4:72:54:1c:10:46:9e:79:bc:9f:d0:dd:ac:1e:2c:83:07:91:
67:75:52:78:9b:c0:09:28:84:38:76:f2:a1:ed:66:3f:e3:1b:
ed:3b:73:98:c9:66:0a:de:fd:40:e0:74:00:f7:7e:26:cb:a7:
70:69:a7:1b:6d:de:60:e4:fc:a9:b9:9e:46:ef:84:21:9d:44:
e5:1f:30:c8:6c:20:2e:70:9e:a8:99:65:df:8a:3f:51:1f:de:
b2:37:48:94:e5:0b:bb:b1:80:af:aa:65:ab:00:87:66:59:4d:
da:be:72:62:38:f6:58:af:fe:7a:c9:19:a6:dc:c1:15:12:2d:
2a:51:eb:c7:cd:9c:07:ba:48:c5:e1:bf:01:4a:75:ea:91:d8:
92:1d:c9:43:12:46:48:d4:ef:b6:bf:e9:16:96:aa:d9:16:ed:
74:3f:60:98:c7:b7:7f:c1:fc:cb:63:21:10:78:c9:1b:92:ce:
c3:78:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 10:15:38 2026 by rpki-client