Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: I06Pje3nqPpDoto2Javl12V/WfUs4HusLG12A5cFhnM=
Subject key identifier: 40:AB:8B:88:B8:23:2A:7C:1D:62:95:27:0A:CD:5D:55:B6:24:35:3B
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019CAA591AE42E7D3CE13C76D63B1DEE694B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 16B1
Signing time: Sun 01 Mar 2026 17:01:32 +0000
Manifest this update: Sun 01 Mar 2026 17:01:32 +0000
Manifest next update: Mon 02 Mar 2026 17:01:32 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: 5wkZoA1wN1+aeY5rq6fYxQreI7ls6NJ7ctQtld1iIbA=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1a:e4:2e:7d:3c:e1:3c:76:d6:3b:1d:ee:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Mar 1 17:01:32 2026 GMT
Not After : Mar 2 17:01:32 2026 GMT
Subject: CN=40ab8b88b8232a7c1d6295270acd5d55b624353b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:9d:32:73:a8:e3:ec:df:88:18:a1:0c:bd:
ce:9b:b1:d3:08:9d:f7:5c:5d:4b:9c:31:96:5e:c6:
89:58:f6:93:f4:58:66:84:dd:86:06:a2:e8:59:ab:
cd:16:79:b6:5b:50:bf:7a:d7:82:ee:67:c2:c9:43:
3a:91:bf:7e:6f:95:6f:17:62:5d:37:74:46:71:6f:
5a:e9:5a:75:0a:ae:f8:89:27:b2:b3:80:60:f9:0a:
f6:1d:6a:a8:13:8d:19:5c:69:4a:10:28:e5:d3:bb:
34:a0:7a:bf:fe:95:b9:40:62:84:a5:9b:e1:b4:f7:
41:14:15:36:c2:d5:67:92:e9:7f:32:c0:f2:8b:1f:
93:39:ad:a8:46:76:30:4d:44:89:6c:93:da:cd:eb:
1e:e9:59:66:71:6c:61:0d:f5:49:11:f0:54:47:8d:
ff:67:cc:bd:1d:88:8b:49:99:55:42:a2:41:2b:93:
e6:1b:31:7f:bd:01:0e:37:06:99:c1:6a:85:8a:7c:
c0:9f:82:1d:ae:2f:4b:51:b0:6f:dc:7e:f3:99:7e:
64:83:2f:29:e4:d6:e1:b1:f0:c4:98:46:07:6a:b1:
64:ce:50:96:4f:c9:ee:2a:3e:3c:78:2f:60:ca:ea:
12:b7:50:0f:72:38:c3:64:af:dd:c6:65:f6:98:81:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:8B:88:B8:23:2A:7C:1D:62:95:27:0A:CD:5D:55:B6:24:35:3B
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:40:58:d7:fa:dc:e4:28:05:97:75:b6:c8:80:38:66:e4:57:
ee:0a:f6:9d:e8:0c:95:b0:92:80:12:4c:a5:8f:b3:3d:e4:9f:
83:14:f7:c6:71:e2:56:25:60:85:cb:1e:de:0e:b2:dd:c0:2b:
7f:5f:94:0c:e4:ec:49:81:bd:e9:7b:ea:3b:3f:9c:d1:a3:5c:
ff:67:b4:49:9a:2d:68:37:37:47:05:bc:0c:07:79:61:2c:cc:
48:ef:d8:30:af:d3:07:9c:14:80:84:5c:66:7c:08:d2:2e:07:
18:2c:df:ac:96:81:31:4d:39:23:b2:62:c0:76:0d:e9:f2:41:
1b:46:9c:f7:cb:22:c5:91:f9:7f:e2:b8:6d:57:5d:eb:b6:47:
41:5c:e6:ac:bb:0b:8e:2b:0c:b2:ee:75:9f:db:3f:7c:39:e5:
fd:c8:32:41:4d:4f:1e:86:3e:2d:92:22:db:9b:c2:e8:40:d8:
f7:a9:be:60:aa:09:cb:28:74:9d:dc:96:76:b8:bf:aa:9f:e8:
de:82:db:bd:71:ef:76:60:ef:b2:aa:7f:f7:43:0e:79:19:a3:
0a:97:7c:6e:48:da:f6:c6:5f:1b:1b:40:42:9d:5d:2c:ad:06:
86:63:01:0d:1c:01:28:6e:0c:b2:b6:63:03:b8:a5:c6:5e:0d:
0e:06:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:35 2026 by rpki-client