Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: lphCz3mdOLrXqPiwzvhfU9ALIWlvbkO+VCiCnQb1DEI=
Subject key identifier: 8E:2A:59:91:46:DC:D9:56:38:6A:2D:86:4C:2E:A1:A0:9C:BA:B9:7F
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A128B0F652697F377E0E66E923E40AA129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1A9E
Signing time: Sun 11 Oct 2026 02:00:48 +0000
Manifest this update: Sun 11 Oct 2026 02:00:48 +0000
Manifest next update: Mon 12 Oct 2026 02:00:48 +0000
Files and hashes: 1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: i6K0tJghtkFuPrNRseFbNBu/VmiSg3hSHNSwLeblNLU=)
4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b0:f6:52:69:7f:37:7e:0e:66:e9:23:e4:0a:a1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 11 02:00:48 2026 GMT
Not After : Oct 12 02:00:48 2026 GMT
Subject: CN=8e2a599146dcd956386a2d864c2ea1a09cbab97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:99:52:e8:a0:90:49:9e:4c:29:4b:0c:24:
b1:d0:ce:1e:fd:c5:34:f7:bb:3e:a0:9b:e5:2e:8e:
be:ab:cd:25:38:a1:37:2d:ad:70:b1:69:86:1b:ad:
96:fe:24:7d:b7:d3:b9:36:f1:78:54:d4:af:67:d8:
ca:d8:de:64:87:f4:b5:2c:18:32:45:9c:39:4d:82:
d5:0f:4a:63:2b:bd:87:b9:77:11:bc:84:c2:8f:05:
9f:87:19:62:cf:ec:06:f0:10:02:f4:79:d2:b7:cc:
8f:41:f5:00:6c:79:d8:e8:60:b5:e7:28:11:30:d8:
51:7a:ae:86:f5:b0:af:12:61:34:c4:f6:87:44:f1:
b4:12:aa:31:d6:0e:38:61:1e:5a:f7:de:29:d8:d3:
de:18:81:21:76:ae:98:1a:8a:d0:e5:95:45:d6:db:
94:d9:0f:64:bb:99:03:78:83:ee:7e:39:3c:14:14:
4f:42:03:a6:e7:f5:c6:a6:64:18:bd:ac:2a:5c:91:
7c:29:a8:d5:b3:0b:6e:0d:2e:76:2c:dc:55:2e:78:
ad:7a:69:c6:a5:d2:fc:41:8e:56:98:71:57:98:0b:
f8:7a:19:ab:e3:d5:7c:d1:d5:e7:fd:02:85:ee:a1:
23:66:ae:99:9b:3f:30:5c:f2:b3:e5:1a:7a:cc:7c:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:59:91:46:DC:D9:56:38:6A:2D:86:4C:2E:A1:A0:9C:BA:B9:7F
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:48:14:28:79:15:1b:00:33:9f:95:ba:d2:34:b1:f1:b1:67:
8c:57:a5:08:81:4c:8f:fa:7b:42:e9:43:ed:86:f9:26:e0:c9:
66:c9:75:5c:f8:f9:61:b7:aa:47:3f:dd:8b:77:bc:9e:9f:6c:
6c:22:22:49:cf:f2:6d:16:41:43:0d:c4:2a:fd:fa:2d:db:4b:
27:8f:d5:43:5f:e2:50:36:74:05:c6:ae:e0:0e:1a:67:96:0e:
06:1d:3a:fb:08:87:55:da:0e:c2:51:3c:91:e2:a8:15:bd:9b:
35:31:d0:dc:52:cb:23:f2:a5:dd:77:07:54:ee:30:94:55:2d:
af:bf:bd:f0:82:68:8e:ed:1f:68:10:ca:a7:ac:ae:56:81:11:
c9:7a:49:45:46:b2:dd:04:3d:4b:13:6e:aa:eb:e3:d1:41:e9:
94:a6:17:05:3f:1a:84:05:b5:5b:47:a5:6e:a7:ab:e1:ee:d8:
b3:7b:f5:3a:c5:f1:06:df:92:57:60:c0:fb:4c:66:e2:f5:0c:
ab:a7:22:f5:da:13:4f:75:60:8d:11:3e:54:37:cf:2f:c5:5f:
d7:b7:1b:7a:f7:31:b6:00:50:1f:9f:9a:9a:4a:71:93:df:59:
07:c3:96:f0:38:b4:ac:83:47:53:fc:ae:c0:8e:92:b1:72:e5:
fd:d9:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:02:25 2026 by rpki-client