Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: IooGn3hNfB55ycQdGWA+iNLJb8Tb0JxNo9Ru4RVjNq8=
Subject key identifier: 8B:53:04:A9:A7:A0:F2:DE:3A:84:6D:B5:C4:26:51:96:48:44:AD:B5
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019CAA21DBB5046F453101AEF2874BAC41DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:01:11 +0000
Manifest this update: Sun 01 Mar 2026 16:01:11 +0000
Manifest next update: Mon 02 Mar 2026 16:01:11 +0000
Files and hashes: 1: 4pTe3zVq_LBaEng6PDXChOvOrYM.asa (hash: ajIeKP46hnwug0OLXYz0+5iBNt1utjAL/IG5/ovLQUU=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 3hxhalZY46v1Sp3H5CFns7ng66ygZxsI0KwASU8IqaQ=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:db:b5:04:6f:45:31:01:ae:f2:87:4b:ac:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Mar 1 16:01:11 2026 GMT
Not After : Mar 2 16:01:11 2026 GMT
Subject: CN=8b5304a9a7a0f2de3a846db5c42651964844adb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6f:1c:05:39:e6:6d:c7:42:f9:f2:83:9b:b9:
ca:03:4c:77:4a:14:eb:df:41:ae:47:c4:4a:f6:f3:
fd:9a:7e:03:c1:ac:c2:9d:77:8c:89:a7:d9:ed:0f:
eb:a0:a2:9e:36:ad:52:da:fa:c8:46:0b:a3:02:74:
b7:d4:d8:91:40:d8:c9:89:52:5f:ec:88:ca:32:80:
ad:88:32:a4:a6:99:b6:c7:ce:7d:d3:ff:0b:31:c4:
23:b6:99:9e:b3:93:fd:02:61:db:16:c0:1c:9f:f8:
b0:5e:09:0a:65:18:fc:b2:9e:5d:f7:58:37:09:ef:
fa:95:45:75:59:33:55:41:8a:18:07:77:c5:88:71:
5a:70:3f:ef:66:3c:d8:4a:c3:21:a3:16:b8:9e:27:
5d:fb:2c:68:2a:b5:e9:a3:4a:c4:6a:7c:4d:bc:5a:
40:51:a8:54:c7:52:05:64:73:a2:3f:96:0f:f1:b2:
b3:5e:50:0a:1e:d5:c0:0d:2e:da:c0:50:a1:66:db:
6d:81:21:09:fd:69:77:fa:06:50:82:6c:99:62:ab:
a3:4f:f9:06:be:59:0a:b0:10:31:88:50:af:f2:df:
d1:bb:0c:6a:ca:87:f8:e0:1a:a3:6d:40:db:76:4a:
6f:dc:8a:63:82:18:2b:bb:a4:34:4c:4e:95:e9:6e:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:53:04:A9:A7:A0:F2:DE:3A:84:6D:B5:C4:26:51:96:48:44:AD:B5
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:64:f6:84:39:80:44:d3:5a:c6:0a:db:ee:6f:ee:ee:8a:9e:
7b:12:15:3d:0f:dc:f8:fa:4c:64:3f:ec:af:42:05:fb:2e:ae:
a9:56:06:04:12:df:30:7e:13:b4:00:13:d0:57:69:12:bc:8f:
6a:ca:d7:57:ec:66:80:ef:2e:9d:58:af:ac:4f:55:1d:86:ee:
34:41:1e:bf:08:4d:b3:c6:0d:4f:fc:92:3b:d9:0b:f9:50:64:
73:a6:ca:41:e8:c9:58:63:d2:25:79:4d:31:5a:50:90:2a:5f:
e0:ea:59:a4:50:36:f8:4e:f3:95:2e:91:c2:d2:6a:25:76:35:
0a:5a:1c:28:91:0a:68:da:db:32:3c:6f:a5:b1:7f:e8:ca:49:
cf:7a:12:a4:70:87:5f:45:71:45:bf:20:34:e4:7b:7e:35:47:
42:1e:78:3c:1f:e5:05:c5:31:81:65:96:df:5a:d3:0f:d6:02:
b3:bb:98:1e:22:10:40:3f:29:86:b0:37:25:dc:75:f8:78:4b:
0e:05:be:72:91:86:64:7b:cd:5e:48:d3:2e:14:e4:70:5d:ac:
c9:97:d2:98:6d:b2:17:40:6e:bb:16:2b:e5:a8:58:26:8c:65:
4a:8e:b9:13:2d:33:9b:b6:a9:2b:e1:69:f7:71:95:3f:c9:d4:
00:1a:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:24:00 2026 by rpki-client