Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: TFFSZJzv8tfV0dxbS9kucWX4xy14XxjpHBV5zTVyFjI=
Subject key identifier: ED:96:59:DE:0F:A3:93:4D:73:B2:A4:A1:47:B6:1E:0F:2E:FD:D9:75
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019F8F1056F56C3A44F0D04B3ADD4186E32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 13:00:40 +0000
Manifest this update: Thu 23 Jul 2026 13:00:40 +0000
Manifest next update: Fri 24 Jul 2026 13:00:40 +0000
Files and hashes: 1: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (hash: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: olPcJIGPfAX6nY/66lhMIjbcesCaJ5Gwl8XAQyY3e6o=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:56:f5:6c:3a:44:f0:d0:4b:3a:dd:41:86:e3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jul 23 13:00:40 2026 GMT
Not After : Jul 24 13:00:40 2026 GMT
Subject: CN=ed9659de0fa3934d73b2a4a147b61e0f2efdd975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:88:c6:77:46:1a:f0:53:57:eb:71:6f:3c:
ab:50:b0:cb:1d:99:89:e3:f4:f7:ac:8a:fa:96:f1:
8f:29:44:aa:cc:e1:bc:b5:db:1e:51:c0:6b:1d:aa:
05:9f:3b:9c:0c:96:ed:ed:e9:9e:24:d7:94:a0:4e:
f0:1e:3b:f3:ca:cd:a1:1e:d0:34:58:f6:45:b2:2a:
97:46:bb:1c:04:59:18:70:bc:22:39:ed:49:56:62:
80:9e:ec:7e:db:ba:82:55:9d:3c:59:ac:18:45:d5:
92:20:cc:68:2d:18:3b:09:ff:ee:4a:89:d4:35:c7:
c2:10:8b:2d:2d:68:88:9b:23:0d:b1:ab:f5:dc:a3:
97:8e:8c:08:95:75:be:e3:07:50:70:fd:4b:ba:7f:
aa:d1:64:d5:55:4c:b2:8c:eb:27:83:9c:37:dd:51:
ee:95:43:0e:51:ee:33:2f:50:24:f3:a9:0d:d6:a6:
ff:57:5a:4d:f0:88:75:76:d4:53:6f:e1:a6:35:85:
a3:34:d3:36:52:e3:3d:6a:69:49:b1:b7:d9:2e:8a:
04:e7:93:b5:75:f8:1b:be:7b:25:66:e9:96:10:74:
c9:64:6f:29:1d:fb:d7:28:cd:f9:1d:6a:5a:f3:28:
67:84:76:09:19:04:80:90:30:be:11:63:1e:52:e1:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:59:DE:0F:A3:93:4D:73:B2:A4:A1:47:B6:1E:0F:2E:FD:D9:75
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e7:1f:30:49:70:03:30:f1:67:91:87:95:52:19:ed:ca:2c:
0c:d7:f7:db:7d:5b:99:79:c0:91:39:e7:18:dd:18:e1:6a:41:
39:46:ab:80:28:1d:3c:24:3c:21:25:eb:75:96:f5:cc:28:b7:
95:4a:7c:3a:fc:97:e2:b3:4c:53:e1:92:dc:22:2d:3f:bd:51:
f1:e7:3a:37:8f:1d:d6:37:00:ff:ee:5b:a2:7b:b8:e1:8e:a2:
e7:68:aa:16:96:d6:91:f2:60:2b:a3:0a:44:63:70:e3:ff:bb:
09:dd:be:8e:c2:c7:0f:87:6f:e8:b0:6e:5d:f9:b2:6b:9d:1c:
ac:f2:d2:44:5b:04:c6:7f:c1:bc:cc:e9:7e:2a:64:ac:0e:99:
b9:ac:22:65:54:0f:f0:5d:d1:c5:b3:4b:42:71:e4:41:ad:84:
78:a9:cd:00:cf:d2:a1:ef:2c:a3:2a:3d:1c:49:74:0c:2d:e8:
78:6d:b7:2b:61:f1:bd:c0:06:9d:5e:5f:fa:0b:c1:bf:77:6e:
a0:d7:ba:e3:e4:f2:6b:70:32:7b:01:71:0f:19:11:4f:82:76:
89:90:b3:a2:4b:a2:c6:3d:e4:e0:c0:83:71:73:1e:ab:a3:37:
6e:51:6c:0e:46:c1:40:c3:00:5f:bf:71:0a:56:22:75:42:23:
cf:5c:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:26 2026 by rpki-client