Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: 6XqQ506cRAy4akAYRybH1vMiZV3RME/RCvoqslt0SJo=
Subject key identifier: AA:5F:AD:CE:60:C7:C7:B5:E9:35:22:9A:D3:34:B1:B2:3F:F7:43:FB
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FD8062E37F5CED5DFA7ECA100E6A9EA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19EE
Signing time: Thu 06 Aug 2026 17:01:51 +0000
Manifest this update: Thu 06 Aug 2026 17:01:51 +0000
Manifest next update: Fri 07 Aug 2026 17:01:51 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: Ney+nsH7Ny4y1fo9gfuyU0xUAX8UC9Umy3oTwei5UGA=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:06:2e:37:f5:ce:d5:df:a7:ec:a1:00:e6:a9:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 6 17:01:51 2026 GMT
Not After : Aug 7 17:01:51 2026 GMT
Subject: CN=aa5fadce60c7c7b5e935229ad334b1b23ff743fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:9d:95:9b:05:4f:8f:f4:a2:df:67:cf:ba:
c2:a8:50:e7:26:2d:c4:c6:27:83:13:bc:7f:de:61:
9a:a8:a4:56:92:a7:b7:e4:28:37:9d:e7:de:a5:99:
8d:91:24:7f:d0:a5:10:de:93:07:73:be:ae:fd:3c:
7e:d5:b4:6c:73:c7:e4:2d:b6:fe:5e:13:eb:79:27:
71:4e:1a:13:e4:39:d6:d1:d3:3b:5a:26:86:fc:92:
a4:00:3b:a5:66:f6:dc:fa:bb:a1:ff:5e:37:1e:17:
25:25:b8:4f:f7:5d:79:df:a9:55:87:78:a1:3e:d6:
6f:65:79:5c:75:2e:b9:60:27:5a:ae:f7:f4:c3:72:
0e:9f:81:51:83:0f:90:ce:e5:65:53:08:7b:22:0f:
4e:89:ff:24:85:a6:ec:54:2b:1b:b3:68:20:32:3a:
99:a0:e6:7a:1e:2d:cb:90:15:ad:58:bd:e7:84:ff:
8c:f9:eb:79:a0:0e:41:b9:1a:ec:0d:3e:dc:f3:2a:
80:aa:65:e4:a1:b5:89:58:a0:35:89:54:83:ff:31:
b7:a9:8d:89:51:0e:07:4a:36:a3:09:57:66:e7:1c:
c3:a4:ae:e2:d2:ce:48:14:a3:13:0e:dc:37:af:b3:
4c:0e:bb:82:2b:37:69:c8:d6:9d:9d:51:2f:3f:47:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5F:AD:CE:60:C7:C7:B5:E9:35:22:9A:D3:34:B1:B2:3F:F7:43:FB
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bc:a1:c5:e5:a6:3d:b9:77:18:3f:ba:fc:03:37:9b:2f:f4:
a3:69:e0:c4:dc:5b:66:66:18:38:f7:50:8e:c7:8e:95:fe:e2:
eb:a1:c9:d3:f3:c8:9e:3e:b0:c1:d1:3c:b7:24:2b:ee:b1:ef:
ea:77:38:2d:fd:71:79:72:2a:fe:0a:e5:29:c5:57:aa:6a:4b:
e5:5f:b5:6c:c5:d4:06:c4:c0:8d:ec:d6:78:c2:68:1a:bf:3f:
f2:e5:4b:36:cb:d7:f9:4c:9c:93:20:da:17:c6:7c:e9:7a:c3:
96:ca:3b:c0:81:a7:7d:70:45:b3:a6:f8:8c:fd:e5:7f:95:12:
c0:a7:8c:1b:d0:05:cb:f8:7a:ba:06:e1:91:d2:b8:92:a4:02:
ca:37:46:95:3b:a3:f2:d8:5b:c2:42:f4:7a:07:0a:f2:1b:21:
31:b0:e9:6e:e7:a3:48:ed:c1:e0:fa:74:61:33:44:a6:e9:34:
d0:99:98:25:4d:98:b7:50:a1:bf:5f:ea:c8:e5:12:58:38:91:
b3:d0:c9:ee:ee:b5:5b:b2:07:ed:c3:07:ee:83:a6:c1:1f:8f:
d8:0e:65:20:3e:c8:93:1e:a8:87:be:9e:ae:ad:f7:a8:81:7f:
eb:d9:95:b1:c2:b0:20:88:c9:ac:10:64:08:2f:68:d4:c1:02:
ef:6a:4c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/YBi439c7V36fsoQDmqeovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYwODA2MTcwMTUxWhcNMjYwODA3MTcwMTUxWjAzMTEwLwYDVQQD
EyhhYTVmYWRjZTYwYzdjN2I1ZTkzNTIyOWFkMzM0YjFiMjNmZjc0M2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqamdlZsFT4/0ot9nz7rCqFDnJi3E
xieDE7x/3mGaqKRWkqe35Cg3nefepZmNkSR/0KUQ3pMHc76u/Tx+1bRsc8fkLbb+
XhPreSdxThoT5DnW0dM7WiaG/JKkADulZvbc+ruh/143HhclJbhP911536lVh3ih
PtZvZXlcdS65YCdarvf0w3IOn4FRgw+QzuVlUwh7Ig9Oif8khabsVCsbs2ggMjqZ
oOZ6Hi3LkBWtWL3nhP+M+et5oA5BuRrsDT7c8yqAqmXkobWJWKA1iVSD/zG3qY2J
UQ4HSjajCVdm5xzDpK7i0s5IFKMTDtw3r7NMDruCKzdpyNadnVEvP0erZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpfrc5gx8e16TUimtM0sbI/90P7MB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7yhxeWm
Pbl3GD+6/AM3my/0o2ngxNxbZmYYOPdQjseOlf7i66HJ0/PInj6wwdE8tyQr7rHv
6nc4Lf1xeXIq/grlKcVXqmpL5V+1bMXUBsTAjezWeMJoGr8/8uVLNsvX+UyckyDa
F8Z86XrDlso7wIGnfXBFs6b4jP3lf5USwKeMG9AFy/h6ugbhkdK4kqQCyjdGlTuj
8thbwkL0egcK8hshMbDpbuejSO3B4Pp0YTNEpuk00JmYJU2Yt1Chv1/qyOUSWDiR
s9DJ7u61W7IH7cMH7oOmwR+P2A5lID7Ikx6oh76erq33qIF/69mVscKwIIjJrBBk
CC9o1MEC72pMFw==
-----END CERTIFICATE-----
Generated at Thu Aug 6 23:16:57 2026 by rpki-client