Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: rfm9BtoACiMfkV5gCIQZQeUxlgF94HHiQc1p73aL15E=
Subject key identifier: DB:23:F6:89:B9:7B:84:3C:13:E3:A9:59:E0:11:0F:ED:BB:2F:93:5A
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01A0DC177EBF286920B217D066280DA317EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 18DD
Signing time: Sat 26 Sep 2026 05:02:02 +0000
Manifest this update: Sat 26 Sep 2026 05:02:02 +0000
Manifest next update: Sun 27 Sep 2026 05:02:02 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: dGyWnw1oMFC8lUIahCjwIIRtfAmuMUXc9a3c8jGuhhk=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:7e:bf:28:69:20:b2:17:d0:66:28:0d:a3:17:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Sep 26 05:02:02 2026 GMT
Not After : Sep 27 05:02:02 2026 GMT
Subject: CN=db23f689b97b843c13e3a959e0110fedbb2f935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:e9:3f:a2:48:7d:82:c3:71:5c:5e:4e:57:
cc:84:c5:31:06:67:b7:34:83:9d:3e:f2:53:6c:eb:
6f:41:1f:e0:14:1c:53:9d:fa:9d:d9:60:87:d8:d5:
47:93:71:67:59:45:5e:17:c2:70:1f:4b:a8:b2:2d:
68:74:34:1d:99:34:8a:3e:46:4a:8d:c2:f9:e7:e5:
39:f7:91:7e:18:ae:da:ed:5a:ea:7d:3f:15:1b:a2:
d5:da:96:1f:a3:87:6a:16:13:64:a5:c7:f8:c0:32:
56:7a:05:fd:69:b5:15:7f:97:ce:79:d3:cb:d3:5a:
0c:2b:4c:e5:18:18:c3:8f:3a:0d:81:64:f4:98:97:
25:99:77:ac:14:4f:3a:cd:cc:1e:0f:f5:bc:31:53:
3d:7e:37:45:8b:04:48:70:40:c6:3d:95:2a:b7:95:
4a:f9:45:a8:00:3b:01:3e:47:40:af:11:4d:f4:6a:
b0:83:df:df:c0:6f:32:7f:49:98:32:87:1a:e0:62:
fa:6f:76:73:df:3d:76:88:a5:24:bc:83:51:51:8c:
c7:4d:8b:89:2d:68:4a:d1:8c:52:0a:12:f4:89:a1:
07:52:57:d0:83:25:52:3d:35:ac:57:1e:44:30:c0:
1d:b7:ae:2f:16:df:44:61:dc:49:56:b3:8e:fc:6c:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:23:F6:89:B9:7B:84:3C:13:E3:A9:59:E0:11:0F:ED:BB:2F:93:5A
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6b:63:0f:2c:be:9e:ca:e8:72:58:9b:2c:de:d9:d6:27:ca:
22:6d:97:60:21:38:b3:c5:2a:e9:ec:55:ca:a0:40:ba:00:c9:
69:bf:57:1e:d0:bf:5a:c2:59:05:a6:16:05:ae:4e:44:d3:7b:
4a:20:0a:09:80:4a:4d:b1:83:94:4d:05:21:dd:0b:27:63:cb:
3a:ca:90:f6:04:dc:c1:c9:70:b7:49:b4:c8:83:bc:3a:c5:7f:
e5:8d:2b:eb:26:2d:f4:33:b8:5f:d8:32:c1:5a:a0:aa:ca:b1:
05:a4:0e:10:1b:44:e8:30:48:ea:bc:30:47:0d:31:df:4d:9f:
13:65:69:96:9f:82:7d:fb:b7:64:67:d1:6b:23:1d:e5:19:5a:
d7:68:2c:b4:f2:69:c3:0e:ae:cd:0b:83:78:2b:42:88:3d:9b:
c2:ca:62:ed:9c:03:40:51:7e:17:a9:2d:88:bc:a1:3d:9d:19:
2d:63:40:d2:e7:0c:84:e9:20:5d:5a:5f:32:b0:a1:ac:e2:0e:
e8:9a:bd:d9:aa:5b:7d:83:6c:56:a3:6c:57:e3:82:76:56:90:
58:1f:c8:30:5e:23:45:01:2e:32:0a:06:b3:bc:b3:09:13:74:
74:3e:6c:fc:e9:dc:78:43:4f:4a:88:c6:a8:00:9d:ac:30:43:
ed:9e:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:02:09 2026 by rpki-client