Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: qO1UJV5cDhb9D12u6TYKZO6fI24Q37AS42CJEbvS4Lc=
Subject key identifier: 0D:E9:B5:FF:E1:65:EC:F8:92:FA:64:B9:0F:72:46:D5:C5:15:BE:32
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019EC30074E34163C71B072028F684C7E61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 22:00:47 +0000
Manifest this update: Sat 13 Jun 2026 22:00:47 +0000
Manifest next update: Sun 14 Jun 2026 22:00:47 +0000
Files and hashes: 1: IGA1ulxSxKGkoLSG34jnJfGS8GM.asa (hash: Wb9Cwa31gXG46doK7XO0BE6KGITY40XEAXzduJEsDJA=)
2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: E7iy6kEN8AYCfSYZwot7lF2XpkNMzknB3YmlrUe8qEo=)
3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:74:e3:41:63:c7:1b:07:20:28:f6:84:c7:e6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jun 13 22:00:47 2026 GMT
Not After : Jun 14 22:00:47 2026 GMT
Subject: CN=0de9b5ffe165ecf892fa64b90f7246d5c515be32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:50:aa:18:0d:b2:4f:17:6f:11:32:ee:14:
5a:90:6b:fb:58:56:d6:e9:bd:a5:a9:97:af:b8:5c:
2b:d8:5b:a4:e3:a2:21:71:2f:e1:a7:96:a7:9b:46:
8e:67:59:31:72:2e:e3:06:65:f6:0e:b3:d6:43:c7:
09:ba:bb:21:fd:c2:6b:1a:49:d0:df:90:5b:f0:90:
76:51:4f:47:17:de:0f:28:e5:58:08:f6:43:07:75:
e5:10:d2:3e:8a:ce:e4:94:ed:ea:93:18:41:8e:46:
ce:bc:01:d6:54:6a:65:91:48:1f:d2:0c:21:58:a4:
76:cd:8d:5b:ee:02:a2:63:a1:b6:a5:91:d8:4b:8f:
fc:90:86:02:c7:f8:00:1f:7c:ac:94:68:2d:e6:77:
fb:a4:67:25:87:62:96:f7:95:e7:f3:43:a2:6e:87:
85:7d:bf:68:b3:37:46:5f:62:ec:b5:8f:d5:4e:f0:
b2:8a:3f:a4:e1:28:e4:40:06:8c:5c:c4:3f:b0:03:
a9:4c:72:03:1f:e3:3d:82:d5:ac:8b:31:ef:b4:68:
07:fa:46:c0:9d:02:73:8b:2f:ce:d7:ec:f3:68:32:
94:08:11:e5:81:33:f1:d2:0e:39:70:40:87:17:a4:
a6:47:b4:ae:46:fd:2c:02:1d:16:38:41:e6:ac:43:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:B5:FF:E1:65:EC:F8:92:FA:64:B9:0F:72:46:D5:C5:15:BE:32
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c0:33:eb:8f:68:80:4c:5f:02:f0:3c:67:20:35:d8:5d:be:
79:b7:1a:ab:ab:c6:2c:90:bf:e5:a0:f9:15:c7:af:96:7d:e0:
58:45:3b:72:fb:91:76:62:1c:b2:9a:eb:01:ec:10:67:c4:b8:
33:10:50:2e:d4:8b:f9:6b:0e:8a:da:24:b3:a1:7c:f4:e4:1a:
b6:28:ef:03:50:f1:5c:53:18:15:2a:1b:00:d9:31:6a:06:19:
3b:f9:86:e5:42:db:1e:e3:4c:be:9f:ee:8c:12:8c:76:b6:37:
c3:cf:8e:0a:5d:43:8d:d4:a9:b2:7a:b8:27:66:2c:bb:ce:cf:
be:ca:b7:ad:81:bb:4f:76:aa:d5:c1:97:41:e8:a3:a0:b2:77:
1b:c5:85:49:f4:56:92:b7:43:6e:ff:a1:a9:f5:65:aa:67:a8:
2c:6c:76:0e:58:00:f5:03:9e:12:58:6b:60:b4:0e:89:02:72:
19:48:fc:3b:d8:ef:69:a4:97:1c:85:45:20:75:00:c1:3b:e7:
8a:0a:65:9b:7a:85:ef:21:c6:06:c4:85:ba:ec:0d:28:9a:71:
67:9c:2c:26:9c:bf:0e:8d:2b:9f:6d:81:20:5c:d4:70:45:5a:
d1:98:d3:3c:c4:17:a6:93:d7:69:af:eb:66:ab:f3:03:3b:b1:
08:79:44:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:54:36 2026 by rpki-client