Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: AD3t5hK6CIFTEFEN3emWmXWj28pFWorVKt/4Z/SSqgU=
Subject key identifier: 7E:95:4A:15:3B:08:FB:A1:F4:D7:91:7B:78:C5:3E:1C:7C:69:31:15
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0E99C18721B8EFFAD6E780BF99AF15F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 20:01:56 +0000
Manifest this update: Mon 28 Sep 2026 20:01:56 +0000
Manifest next update: Tue 29 Sep 2026 20:01:56 +0000
Files and hashes: 1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: o9SZMqGERG0dTHjOSTxpvlFHq04WMq6ANs4H2alIIaM=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:18:72:1b:8e:ff:ad:6e:78:0b:f9:9a:f1:5f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 28 20:01:56 2026 GMT
Not After : Sep 29 20:01:56 2026 GMT
Subject: CN=7e954a153b08fba1f4d7917b78c53e1c7c693115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:59:9d:32:e8:d0:3f:07:9a:88:6f:38:d1:
1b:52:da:c1:ff:4b:c8:46:ce:0b:ef:3c:d6:4e:48:
c2:b6:23:b4:4c:24:13:ce:e9:79:2a:78:5d:fb:ed:
d1:1e:eb:c3:37:d9:a5:c1:f1:57:81:71:02:8a:c9:
e6:e8:d2:a5:bb:41:51:23:64:0d:ba:73:2e:7c:de:
25:1c:92:5d:5b:85:a9:23:51:ea:e6:48:75:1f:e4:
9d:38:7b:5e:48:3d:41:a0:e9:d8:3f:ca:64:21:2e:
b1:75:ca:6b:e0:15:82:b5:6d:97:30:40:ea:97:df:
4d:c0:9c:62:99:44:91:91:f2:81:d0:ed:1d:b4:6a:
47:a5:2c:f3:a5:6b:17:57:d5:b8:87:93:35:39:75:
e5:86:c4:68:dc:d8:3f:cb:5f:19:a0:6b:d5:cf:f1:
4b:aa:0c:ff:d0:f6:0e:f2:e4:81:39:47:f8:31:74:
92:df:73:0c:1c:88:39:a8:84:c4:96:e5:81:00:10:
0b:79:eb:f5:9e:72:c4:79:f7:e3:ca:8d:a6:f2:53:
74:c8:55:eb:3a:40:fd:14:52:b9:70:1a:86:61:45:
29:83:f9:58:92:c7:f5:b9:f8:e7:20:39:fc:54:f2:
c8:b7:e0:09:e7:ca:4e:5b:e6:d0:52:8d:3c:a4:22:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:4A:15:3B:08:FB:A1:F4:D7:91:7B:78:C5:3E:1C:7C:69:31:15
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:66:b3:c7:56:b6:46:08:db:bc:5b:65:49:cc:a1:96:4b:5e:
77:a8:ae:43:b5:70:22:a5:7a:85:28:25:70:7e:ae:35:97:64:
75:76:3e:36:e8:f3:eb:08:79:f9:ea:ac:b6:a4:06:2c:42:81:
38:e0:a6:54:ec:e9:ba:98:6e:d9:cf:39:42:b9:d7:ff:d6:2b:
42:2b:a7:4e:37:23:f0:b2:8c:5b:51:dd:e0:ec:67:07:9a:b9:
bb:be:86:46:e6:34:72:af:95:66:8d:35:5f:fa:5a:1a:ec:a2:
c4:d7:43:e1:26:c3:69:f0:ad:34:28:96:9a:9a:25:e4:ac:93:
66:48:3d:a6:7b:21:5e:82:6e:f2:76:5e:1f:ef:dd:0c:a2:59:
1b:4b:61:b0:6c:53:c4:19:31:0c:4c:67:95:00:91:4d:2a:bd:
a3:5d:c2:ba:48:64:96:c5:c5:e1:12:f1:1d:d4:ad:7e:db:a3:
f2:e0:26:78:76:dd:78:c9:79:2d:1e:78:a1:30:31:dd:86:64:
8a:23:fa:0d:02:48:97:c4:b7:25:86:89:2f:a1:1b:57:6a:76:
d0:09:2b:77:b6:ac:01:42:9e:45:f2:a9:ec:bd:68:c8:39:47:
86:cb:ab:e3:3c:20:1d:60:3b:48:90:3a:3a:d1:e5:35:05:9a:
19:fc:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:38:04 2026 by rpki-client