Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: oUDnTYjOd58a09jIG4BE2Lmx98tJjBXd2UxHir77HZ4=
Subject key identifier: A2:29:E5:20:6F:7B:DD:C2:E7:8C:E9:EB:2A:5E:32:2D:20:F7:D6:BC
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019D99D04052A127F0FD2DED1EA6DE77F62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 172D
Signing time: Fri 17 Apr 2026 05:00:55 +0000
Manifest this update: Fri 17 Apr 2026 05:00:55 +0000
Manifest next update: Sat 18 Apr 2026 05:00:55 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: Oz6bU/+9pyuPPUOk1k7HOnQ/66aIL8MTCMOjj8BhpDk=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:40:52:a1:27:f0:fd:2d:ed:1e:a6:de:77:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Apr 17 05:00:55 2026 GMT
Not After : Apr 18 05:00:55 2026 GMT
Subject: CN=a229e5206f7bddc2e78ce9eb2a5e322d20f7d6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:c3:04:c6:f2:87:10:9c:48:4f:e9:55:93:
a6:d4:af:28:d9:14:eb:04:7c:34:eb:69:17:6c:3a:
22:b8:40:23:43:95:94:e4:66:6a:e2:76:da:05:40:
3f:80:df:9c:61:47:bb:66:31:f3:6e:93:a4:11:bc:
98:db:16:1b:b5:ee:df:93:d2:e1:de:49:7f:ba:f7:
fa:cc:d5:bc:a8:bc:0e:40:0a:a9:fc:52:f8:ef:82:
b4:e7:86:3c:15:14:73:b2:f5:15:2b:3e:e7:ff:bd:
3a:8e:36:38:8f:3a:68:e6:db:77:cf:ee:67:39:0e:
01:e2:ff:14:3a:40:56:6a:0f:57:24:d0:0e:e3:3f:
26:d3:7a:1f:43:0f:01:63:1f:8e:b3:5d:a0:3a:b2:
6a:90:54:13:a7:dc:e0:4d:77:02:b7:95:eb:62:02:
96:3e:80:4c:6c:60:88:3a:f8:96:a2:7e:7a:e3:18:
4f:3c:77:0e:85:b5:e6:91:10:87:02:9c:1c:de:91:
8e:3e:5d:3d:48:32:a8:e4:ad:68:e5:6f:8d:7a:da:
70:16:03:4e:8e:ec:9d:1e:ba:a1:22:62:06:8b:30:
01:d9:4e:19:a8:2a:a7:3b:4e:73:53:4b:20:72:9b:
51:05:7e:ac:ae:d3:a5:93:c5:90:0d:92:41:cf:7e:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:E5:20:6F:7B:DD:C2:E7:8C:E9:EB:2A:5E:32:2D:20:F7:D6:BC
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ba:5e:a4:7d:bd:dd:bf:dc:ee:b9:7c:f8:31:00:58:fe:05:
c7:6d:34:54:55:26:7f:db:e1:db:18:4f:0a:bb:99:59:1a:7f:
8d:ab:73:52:26:c0:7b:87:a8:08:94:46:2d:91:1a:59:fa:09:
88:d2:1d:eb:12:52:d2:78:75:38:f3:f3:fe:49:66:cc:e9:ac:
6c:9c:95:93:8e:ec:99:99:bd:eb:c6:64:d8:66:e3:e7:e2:c8:
18:61:47:1f:4a:ce:fc:46:dd:9b:3b:6b:36:2d:a3:34:cd:17:
85:33:60:2c:9a:2c:ea:18:0f:eb:4b:b0:dd:0f:73:31:0f:eb:
ce:ef:e9:b3:9e:c4:a1:1e:68:0d:a1:e6:5b:a1:06:cc:e1:65:
85:ff:20:92:6a:27:bf:bc:83:3a:7b:29:b0:67:dc:8c:b8:9d:
1f:c8:4c:d7:b7:8e:23:a4:32:f3:26:7d:96:21:20:a7:48:2c:
a9:6a:54:57:f8:b0:67:de:a2:92:ab:26:ca:55:95:d1:16:9b:
30:97:67:a6:51:c3:59:fa:35:fa:3a:d9:07:a3:49:da:5b:ea:
a0:7c:0d:0b:8a:73:8b:1e:8b:22:a2:46:40:4b:ad:a4:f7:7f:
a4:d2:75:7a:41:ce:4e:eb:0b:39:9e:4c:1c:15:56:5e:92:51:
07:3d:c8:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0EBSoSfw/S3tHqbed/YqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk
NGJjYTQwHhcNMjYwNDE3MDUwMDU1WhcNMjYwNDE4MDUwMDU1WjAzMTEwLwYDVQQD
EyhhMjI5ZTUyMDZmN2JkZGMyZTc4Y2U5ZWIyYTVlMzIyZDIwZjdkNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhTDBMbyhxCcSE/pVZOm1K8o2RTr
BHw062kXbDoiuEAjQ5WU5GZq4nbaBUA/gN+cYUe7ZjHzbpOkEbyY2xYbte7fk9Lh
3kl/uvf6zNW8qLwOQAqp/FL474K054Y8FRRzsvUVKz7n/706jjY4jzpo5tt3z+5n
OQ4B4v8UOkBWag9XJNAO4z8m03ofQw8BYx+Os12gOrJqkFQTp9zgTXcCt5XrYgKW
PoBMbGCIOviWon564xhPPHcOhbXmkRCHApwc3pGOPl09SDKo5K1o5W+NetpwFgNO
juydHrqhImIGizAB2U4ZqCqnO05zU0sgcptRBX6srtOlk8WQDZJBz37+5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIp5SBve93C54zp6ypeMi0g99a8MB8GA1UdIwQY
MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt
MGEwZjNlNzhhNDkzLzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz
LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbpepH29
3b/c7rl8+DEAWP4Fx200VFUmf9vh2xhPCruZWRp/jatzUibAe4eoCJRGLZEaWfoJ
iNId6xJS0nh1OPPz/klmzOmsbJyVk47smZm968Zk2Gbj5+LIGGFHH0rO/Ebdmztr
Ni2jNM0XhTNgLJos6hgP60uw3Q9zMQ/rzu/ps57EoR5oDaHmW6EGzOFlhf8gkmon
v7yDOnspsGfcjLidH8hM17eOI6Qy8yZ9liEgp0gsqWpUV/iwZ96ikqsmylWV0Rab
MJdnplHDWfo1+jrZB6NJ2lvqoHwNC4pzix6LIqJGQEutpPd/pNJ1ekHOTusLOZ5M
HBVWXpJRBz3IfA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:22 2026 by rpki-client