Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: lz3cx/d2MfwZ47vbSiNCg2mEAKJmH6lrKKqfnQCsIiQ=
Subject key identifier: E1:09:8B:72:86:FE:45:58:69:25:FB:D0:3B:FC:FE:4C:6D:37:A8:B7
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 019D9818AFD081AAEFF471AA6D41F0B62AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0A61
Signing time: Thu 16 Apr 2026 21:00:47 +0000
Manifest this update: Thu 16 Apr 2026 21:00:47 +0000
Manifest next update: Fri 17 Apr 2026 21:00:47 +0000
Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
2: FfR87_mXj0CIVmHYTnyUObXrTyI.roa (hash: p3ixpnoniD5wmyp+DsfoQYYTf3OUtsn8VxkoKytvyOM=)
3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: mRNupEZfsGcHZFPKuJD8Nts3sSIQ8MpysynyMa78sqM=)
4: RSPqJer2GxHPRRgn7mg4dhkHOBw.roa (hash: 7i2L3D7sVlNeXVt8GqQE+rm6gyBVSmDTLbXKjTKH2nY=)
5: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:af:d0:81:aa:ef:f4:71:aa:6d:41:f0:b6:2a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Apr 16 21:00:47 2026 GMT
Not After : Apr 17 21:00:47 2026 GMT
Subject: CN=e1098b7286fe45586925fbd03bfcfe4c6d37a8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:e0:71:b8:7a:79:c8:f1:45:17:18:a0:80:
b7:15:59:f3:74:91:f2:f4:0f:0a:1c:c4:f9:81:19:
db:18:3b:75:03:dc:dd:8f:17:4c:78:f5:64:50:80:
54:13:76:a4:5f:e9:95:8f:99:b5:4a:76:8f:5b:76:
87:90:56:2d:a5:e7:2d:f4:d9:a6:94:b5:1d:9f:1f:
09:f4:4f:e4:c7:db:92:c1:36:35:e1:c2:c6:d9:26:
db:01:cd:93:0f:c5:be:f8:67:4c:47:51:d9:31:1a:
72:19:aa:c3:90:6e:13:21:ea:f0:df:97:66:69:a0:
52:3f:d6:0d:8e:01:72:ef:99:56:8a:4b:5c:4f:e1:
08:8c:23:fd:ad:1f:12:5d:6d:e8:fc:b4:11:39:5d:
d1:c4:ee:ae:58:0d:0b:3d:11:05:56:f7:bd:9f:32:
4d:ea:c5:04:c2:80:53:04:03:fa:16:29:79:0a:79:
44:56:e1:d0:7e:8e:ab:f7:8c:df:9b:46:03:04:e7:
f4:0e:9c:99:87:34:6f:4d:f3:5b:0e:62:c5:b8:f6:
ff:49:27:75:f3:d8:df:68:62:b2:aa:23:83:66:e3:
9c:c9:cb:5a:52:0a:4c:e2:e4:cb:0a:53:cf:3b:79:
6e:bf:4c:2b:3c:26:82:d9:bc:40:14:68:e2:3a:92:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:09:8B:72:86:FE:45:58:69:25:FB:D0:3B:FC:FE:4C:6D:37:A8:B7
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7e:59:5e:eb:a5:b7:d2:c9:2e:7c:f1:ec:b7:be:6e:4c:ad:
87:02:73:86:46:84:67:e0:49:b1:74:23:6c:8d:6a:96:91:06:
57:d6:e0:8d:d4:22:0e:94:32:23:61:4a:71:38:1d:0c:de:5e:
56:d7:2b:d9:ed:68:67:4c:86:f9:00:19:8e:43:aa:19:25:2e:
be:8d:da:80:8d:ec:8e:0a:1d:11:2d:6a:eb:db:0d:28:b8:5d:
63:15:63:9e:eb:6d:cd:aa:9b:5e:4b:b9:b8:bc:a0:44:cf:c6:
d8:eb:ad:54:72:8d:90:a2:22:1e:10:19:a5:9e:6f:14:1d:ff:
11:78:c3:1e:49:3c:37:de:72:7b:a8:ff:32:0c:b4:f0:d6:91:
ce:ab:99:18:f0:90:b8:82:b4:71:58:5b:2a:3c:d1:b6:d1:33:
48:c9:e9:33:78:81:00:3a:34:75:6d:0b:4b:8d:23:00:f5:1f:
a0:48:ac:b0:39:32:7b:24:6e:65:a1:17:46:d5:ab:ad:d9:0a:
86:22:bc:0b:b1:d6:bc:74:7e:a5:15:d8:bf:b9:71:07:d6:71:
a5:f3:31:96:bf:20:e6:6b:e5:7d:9f:a6:e5:d7:8f:89:cc:16:
08:a8:a5:4a:36:0e:95:c2:4b:b6:6a:e9:e0:b3:e9:6e:24:1c:
9e:f4:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:35 2026 by rpki-client