Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: Iw6Lk0X+H3y6xNPss6u72iNLHcdZT9DNi/B7R+uEb+8=
Subject key identifier: F0:BF:F9:EC:5B:50:49:2A:46:E1:D5:94:52:BD:5E:6C:D5:2E:00:68
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019FED43CE6E1898A5A90871E19D4456E240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19F9
Signing time: Mon 10 Aug 2026 20:01:11 +0000
Manifest this update: Mon 10 Aug 2026 20:01:11 +0000
Manifest next update: Tue 11 Aug 2026 20:01:11 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: xWNMBszvnSUVG0iJOFOKfJlTYSdvsQqxBIT3CH8gvWg=)
2: lMZZ6igHX1x1GYPQpeLUXkG2_Z0.asa (hash: 3b7Yie2qITakZCy9knVLRJ5bDjiy0XSyb0DWzgN8P1w=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:43:ce:6e:18:98:a5:a9:08:71:e1:9d:44:56:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 10 20:01:11 2026 GMT
Not After : Aug 11 20:01:11 2026 GMT
Subject: CN=f0bff9ec5b50492a46e1d59452bd5e6cd52e0068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:80:ba:ea:7a:77:eb:27:6f:ec:33:4e:6f:
db:0f:22:45:5b:0e:da:8e:84:88:4d:7d:e3:b0:dd:
92:a0:8c:22:7d:87:e4:71:a7:cf:78:d5:ae:64:26:
44:3d:b6:44:99:33:e8:8d:c0:d9:42:1a:94:d2:c4:
31:06:cc:c5:3e:c4:f5:b1:32:21:b1:55:ee:51:e9:
dd:c3:9d:eb:27:59:c8:e3:de:05:e9:1e:96:ef:6f:
9b:c7:7d:29:63:27:4c:8e:0c:2e:4e:e1:8f:4c:56:
68:39:01:10:41:b3:22:95:fa:22:1b:92:6f:e9:ca:
a9:8d:50:9e:47:e0:c6:48:bd:44:04:45:93:b7:fe:
aa:94:5b:c3:49:55:3c:08:c4:aa:06:c4:53:eb:fa:
68:c9:1b:1f:df:68:41:3b:c3:9c:af:64:2e:1c:a5:
24:cf:93:d7:8b:ad:8f:21:2f:0e:50:36:55:e1:30:
d3:38:96:7d:ac:99:7b:80:f3:27:ab:4f:56:9e:27:
16:74:b5:db:b2:00:4e:c4:3c:90:f0:e1:3f:ef:2f:
35:13:94:35:20:88:1e:df:71:05:a1:45:35:87:5f:
d4:d6:e0:0f:32:70:57:5a:64:62:a7:d2:17:0a:bb:
dc:7a:1b:2e:d3:34:c1:d7:a2:17:98:89:41:d4:1f:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:F9:EC:5B:50:49:2A:46:E1:D5:94:52:BD:5E:6C:D5:2E:00:68
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:b8:03:27:8c:21:63:95:4d:7f:67:d2:a7:46:4b:72:8b:
60:e2:e0:40:3a:b3:1c:b2:f1:a4:88:30:28:b6:49:0b:4d:d6:
98:62:bc:4a:a6:89:90:71:c6:99:8b:2a:86:67:bd:73:5c:f6:
45:83:bc:da:a3:59:da:36:6d:18:df:53:0a:cc:1d:d8:2f:a8:
37:45:1a:a3:71:fc:02:6e:18:db:3d:30:f6:3c:5c:76:06:89:
42:b2:a1:c1:bc:cf:93:ea:eb:ca:aa:69:34:12:e0:c8:73:38:
90:63:f3:4c:be:1a:d9:7f:96:4d:8a:a1:b2:c0:41:20:b2:c2:
9d:40:ce:ed:f4:38:f3:c9:80:cf:91:07:c8:13:4a:f4:50:06:
8d:49:82:f3:a7:3d:ea:72:9c:41:a6:aa:26:ac:f1:28:78:4e:
41:96:9c:b9:56:07:9e:f9:78:d9:46:ba:4c:38:cc:4d:59:af:
d7:9c:ad:ee:7a:e5:e3:39:cf:03:23:8f:c8:e4:21:d2:fe:3a:
9b:3a:90:ae:ca:b1:cc:bd:61:4d:8e:54:5b:71:45:0e:67:89:
da:9e:35:8c:bc:d7:75:42:f7:9f:67:ce:5f:10:f1:f8:4f:2b:
6e:15:d9:ae:d8:55:86:ed:eb:dc:92:3b:04:e8:1e:67:dc:14:
a1:f9:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 03:33:25 2026 by rpki-client