Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: bMyVlTpVWYp2mX/wSsKCjgcvrTo8xRuPPlfrmhMoUko=
Subject key identifier: 65:8D:F6:A0:3F:39:93:BC:31:8E:48:A2:1B:C9:57:16:51:19:07:0A
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A05D4570F92BC45E14092B035239391E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A33
Signing time: Tue 01 Sep 2026 14:00:27 +0000
Manifest this update: Tue 01 Sep 2026 14:00:27 +0000
Manifest next update: Wed 02 Sep 2026 14:00:27 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: CPUycXZ2fV8nhZAaKpZVS+5brXGj3Evuo62sRxyqrKg=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:45:70:f9:2b:c4:5e:14:09:2b:03:52:39:39:1e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 1 14:00:27 2026 GMT
Not After : Sep 2 14:00:27 2026 GMT
Subject: CN=658df6a03f3993bc318e48a21bc957165119070a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:15:bf:14:93:ec:c6:b5:6a:25:e9:8b:4d:
06:1f:16:e0:3b:43:9a:d3:e3:a1:10:33:26:71:57:
06:9c:8f:fb:37:eb:e3:51:0e:9e:f0:59:81:75:d7:
59:a6:37:0f:47:b7:67:62:78:a3:2e:66:08:a6:a5:
2e:13:e7:74:17:90:d3:9d:09:a7:a0:17:c7:11:24:
f5:02:55:d8:9d:58:26:38:28:52:54:45:96:c4:6e:
85:f2:29:45:bf:39:b2:f7:37:ef:5c:cf:33:b4:ca:
a5:9c:03:17:be:dc:5b:d0:d8:3b:fd:a4:32:f1:69:
21:3f:92:2b:77:93:9c:d6:72:30:a9:b1:86:18:b8:
e9:87:9b:8a:2a:6e:46:20:28:84:ea:3a:12:9d:e4:
7f:63:fa:42:ff:31:16:d7:c7:c2:af:5f:33:6a:b5:
94:41:85:4e:46:0f:7d:75:0e:c5:ad:86:9d:5d:e4:
37:c4:9f:34:14:5c:43:94:8f:72:f2:8f:46:ae:c5:
00:98:ca:e6:4c:2a:7f:ba:11:05:48:3f:4c:0e:f1:
8c:4d:f2:e4:43:04:c6:70:b6:66:60:6d:74:0e:94:
4c:80:d1:9a:8a:e2:a5:06:50:e1:bd:45:94:87:8c:
b1:bf:d6:56:f8:c6:89:2e:b9:78:96:fe:53:0e:da:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8D:F6:A0:3F:39:93:BC:31:8E:48:A2:1B:C9:57:16:51:19:07:0A
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:8c:19:f2:5e:c0:45:17:c0:e0:22:d3:05:e8:5a:9a:38:93:
9a:73:c5:f6:10:48:e9:9e:d5:28:31:27:d2:de:b4:33:8f:9f:
fb:8b:8c:a3:ad:af:cc:e6:3f:3a:73:d9:96:49:69:5e:45:81:
cd:23:8b:40:f8:f8:ac:49:dc:88:18:df:91:e6:26:62:60:4c:
a3:23:53:82:ed:4a:24:7c:78:bb:be:98:bf:8d:a1:f5:07:c4:
a1:d9:b7:2a:97:34:53:4b:d2:3a:f8:ec:fa:90:80:53:e9:f8:
f0:cb:13:3d:cb:a9:23:50:fb:89:fa:f4:62:41:3a:09:e9:54:
27:c9:45:55:35:81:8f:ec:bc:8c:7a:7b:8f:04:e8:60:2f:b5:
f8:33:fa:0d:f8:98:fb:2f:0e:4a:fc:0c:32:db:f3:b7:75:6a:
41:16:6d:0c:86:7e:cb:e0:f9:ec:97:95:73:7d:02:46:70:78:
77:ad:27:d2:a2:5c:fd:03:85:ff:bb:f1:d7:cd:08:36:5c:10:
c8:eb:88:9b:ef:1d:2c:a4:a0:d6:5a:ea:be:4b:b2:47:a7:15:
fe:b5:77:7b:29:76:7f:cf:42:73:1d:6f:74:24:9a:8c:71:8f:
ec:87:2f:d1:34:a1:e7:76:46:1c:a9:35:72:c9:1e:15:f5:f1:
64:02:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 20:28:44 2026 by rpki-client