Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: fcSAXXg1WTjaV0CgW2HmJ5gpyKkHpGdjjlN1KeIY8MA=
Subject key identifier: 85:3F:35:13:83:CC:DF:C6:04:9E:AA:7F:E9:9C:D5:8F:D3:30:6A:13
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019FAAF5C1041F34139D918380A825E18EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 183F
Signing time: Tue 28 Jul 2026 23:01:00 +0000
Manifest this update: Tue 28 Jul 2026 23:01:00 +0000
Manifest next update: Wed 29 Jul 2026 23:01:00 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: pEu7Nfl7yfsBMG1CBP87czFq33e+n58qCKqiOrJ/V68=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:c1:04:1f:34:13:9d:91:83:80:a8:25:e1:8e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jul 28 23:01:00 2026 GMT
Not After : Jul 29 23:01:00 2026 GMT
Subject: CN=853f351383ccdfc6049eaa7fe99cd58fd3306a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:7b:44:09:de:3a:71:9e:db:fe:23:83:18:
bf:cb:1c:f5:67:32:c8:3c:3c:75:29:f6:33:74:4b:
25:a4:30:9f:eb:18:ca:2b:b3:bb:82:73:70:cb:76:
65:df:d5:5e:78:e2:6b:f2:e2:63:35:9c:b4:6f:52:
cd:73:e6:99:37:0b:ca:a2:c6:7b:6f:f5:81:ec:fd:
2a:18:fa:1b:76:56:ef:12:e5:40:fc:5a:58:d0:02:
17:23:21:1f:29:08:a0:4e:59:5e:2c:58:f3:f7:58:
52:47:5b:25:fb:e0:0b:af:68:d6:1c:90:10:20:9b:
cc:f2:27:45:e6:e8:c8:45:ce:74:57:06:22:d5:44:
a2:db:34:8f:d8:86:c4:54:8e:d3:d3:21:1e:ad:0c:
c3:2f:4a:1b:80:42:3c:c5:e8:69:3c:7a:6e:e0:c5:
d6:6a:38:84:ec:2e:2a:d6:44:b0:de:56:a9:ec:05:
c5:06:a0:10:97:af:3f:9d:bd:fb:c3:03:7b:46:d5:
cf:fa:41:03:c4:46:e9:27:07:d2:34:55:24:47:11:
bd:18:af:74:a8:9b:bf:4f:7c:62:2a:37:a5:ac:96:
39:f0:c2:12:fe:17:f7:33:92:2b:42:85:5f:f6:31:
97:b8:16:f9:bc:76:b3:28:1a:27:49:bf:97:50:0c:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:35:13:83:CC:DF:C6:04:9E:AA:7F:E9:9C:D5:8F:D3:30:6A:13
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:56:1c:cd:68:9a:e2:4f:8f:a3:aa:70:43:83:23:03:75:33:
50:97:8b:1d:d9:ef:f0:10:83:db:2a:96:88:ae:2d:25:f6:b0:
cd:ec:be:82:a3:88:d6:76:85:9b:27:90:ee:9c:16:aa:0c:a4:
cc:f2:d8:1a:89:6e:1d:1f:4b:a9:d7:da:2d:5c:6e:31:f0:a4:
1f:18:1a:59:9f:ae:79:24:52:9c:83:4c:be:14:72:0f:a8:ce:
72:22:95:a5:a0:e6:e8:d8:68:14:a8:a2:86:82:28:39:d8:3b:
43:35:c1:64:04:d2:32:eb:c7:f1:bd:2a:49:05:c7:f6:20:59:
15:38:f4:f5:19:a5:57:8e:6b:b4:da:d2:ac:ba:95:72:de:d7:
b5:bf:32:f6:7b:2d:c0:01:f9:11:4b:68:73:9a:b7:56:82:d0:
e9:e1:c6:67:a7:a3:12:69:18:5b:76:b1:17:71:b0:d0:76:45:
f4:a1:3e:44:87:e9:f4:12:cf:8d:e2:8b:22:e7:84:71:7c:56:
06:b1:ec:8d:f5:c5:e3:8b:e2:44:be:8a:9b:eb:25:96:8a:03:
e0:39:2b:d2:e6:ec:ee:30:2e:f0:83:91:34:23:b9:0f:87:c6:
94:a1:ca:85:8d:d2:a5:a5:64:36:46:e9:04:58:4e:b9:7a:1b:
c1:df:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:08 2026 by rpki-client