Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: 68puKunHvWbkiSXiaXFxIT2WsRL7oWUX4qq+yEpvx3I=
Subject key identifier: 98:ED:37:C7:A6:77:0A:88:F0:27:50:3B:06:06:09:D0:D8:FF:35:82
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01A0D45DF69EBA5B7DF81E7F6CCB188AAA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 18D9
Signing time: Thu 24 Sep 2026 17:02:02 +0000
Manifest this update: Thu 24 Sep 2026 17:02:02 +0000
Manifest next update: Fri 25 Sep 2026 17:02:02 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: kAnuGP9le/cc2O9hDtYxfy5+KVgLnt7EwGb+ocZCkeM=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:f6:9e:ba:5b:7d:f8:1e:7f:6c:cb:18:8a:aa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Sep 24 17:02:02 2026 GMT
Not After : Sep 25 17:02:02 2026 GMT
Subject: CN=98ed37c7a6770a88f027503b060609d0d8ff3582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:25:3f:07:12:61:a1:3c:4e:fe:5b:83:e3:12:
53:72:e2:e6:ad:45:6b:1b:9e:1b:29:55:df:49:6f:
e1:47:9b:4b:5d:88:c4:2a:37:03:d7:92:4f:d7:24:
c2:ef:bf:d5:9e:c8:6b:0e:80:10:3e:05:df:84:74:
86:73:cb:50:a1:49:73:3c:3d:e3:51:48:87:72:2f:
75:3b:f8:42:1d:ea:2f:ac:d5:13:6f:d6:bd:f9:05:
63:b4:5e:bd:bb:36:47:32:eb:54:e4:05:04:df:6b:
82:8b:8c:0e:bf:3f:e3:ad:c3:ce:a4:9c:ad:67:88:
3c:82:e7:68:c3:de:03:60:48:ca:4b:ee:9c:5f:de:
93:14:b0:2a:b2:e8:8d:e0:91:c1:1f:c0:ce:1b:ec:
e0:0d:43:39:18:a0:b1:1c:d7:72:f0:8a:41:25:cf:
af:ea:48:ec:47:64:f6:f9:2b:c6:ea:98:88:15:aa:
91:a1:07:3c:18:60:fb:94:6c:84:d4:01:3f:ba:4c:
8e:1b:25:6b:52:f2:7d:f3:e7:d8:35:0d:e9:e2:c0:
cd:46:41:a4:60:9a:6b:3c:8e:b0:8e:3b:10:df:39:
83:e4:d9:b4:5c:bb:dc:42:85:8e:4a:b7:89:0f:b2:
4a:18:52:76:b1:6c:5b:fa:cb:ca:2e:67:af:c0:aa:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:37:C7:A6:77:0A:88:F0:27:50:3B:06:06:09:D0:D8:FF:35:82
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:27:31:73:98:30:c1:48:32:11:fa:e5:77:72:b8:36:06:c9:
0a:14:d2:fc:4a:df:d0:f6:1e:27:57:17:d7:af:74:99:4c:fd:
b1:ac:f7:0c:b7:a2:93:61:1f:1d:5e:8c:f1:ee:b2:6f:28:ab:
9c:fe:07:57:8d:11:d8:9b:d3:cb:ac:17:2f:f3:e2:eb:fc:97:
e8:08:0d:3d:cf:c7:e4:ed:8b:b3:e5:8a:0f:b1:8f:c6:7a:af:
05:2e:3b:51:27:ba:46:54:de:c3:ee:e6:98:bd:27:ab:11:ec:
0e:27:4f:5d:56:15:54:d0:f2:e6:fe:7e:8b:eb:ce:a8:36:c1:
53:c1:ed:e5:01:cb:de:92:d5:b0:2c:c1:46:c0:c0:40:33:84:
84:ba:d1:eb:79:d1:5e:14:57:29:1a:23:e4:ee:20:e0:f7:09:
b3:7e:d6:e8:9d:c8:39:ae:e0:14:8c:e0:b7:eb:7f:c1:7c:d4:
08:7f:c1:8a:fc:d5:b8:42:a6:fa:e7:0f:c1:c9:9d:f1:e9:68:
0d:66:56:b4:d8:e2:49:60:ae:3c:a3:24:9d:01:b1:f0:fe:4b:
b5:a9:1f:1e:04:bd:39:8f:e0:ac:e5:1d:1d:c5:1d:87:52:e4:
e7:57:0d:eb:d3:a9:a3:64:11:d8:45:9b:58:f7:20:61:a1:c4:
a4:04:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:29:08 2026 by rpki-client