
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: pdOSzEM3Oysc6egfe7GGXaz6AZhCOiKOllYtEjoKA3U=
Subject key identifier: 31:94:A4:9D:28:FF:F6:95:A1:26:F5:9A:9A:78:EC:34:41:78:0C:2A
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 019FA93DC20EC1A052F8EE8A63D29FB7631D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0B74
Signing time: Tue 28 Jul 2026 15:00:24 +0000
Manifest this update: Tue 28 Jul 2026 15:00:24 +0000
Manifest next update: Wed 29 Jul 2026 15:00:24 +0000
Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
2: C8cw5nbghQi4OUuGqLlmhBWbh3s.roa (hash: ukinZ9+XO0kbm22VodGuo/P5hn91OEClJ3feFpq9ZTY=)
3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: 2ACkNu55OTjtETpmWfFA/wPDL+LBuPkr8vHj6rHORcw=)
4: RSPqJer2GxHPRRgn7mg4dhkHOBw.roa (hash: 7i2L3D7sVlNeXVt8GqQE+rm6gyBVSmDTLbXKjTKH2nY=)
5: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:c2:0e:c1:a0:52:f8:ee:8a:63:d2:9f:b7:63:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jul 28 15:00:24 2026 GMT
Not After : Jul 29 15:00:24 2026 GMT
Subject: CN=3194a49d28fff695a126f59a9a78ec3441780c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:6a:0d:4b:c5:7f:58:6c:74:9b:e2:32:33:
b2:49:32:ee:99:cd:5c:a7:4c:8f:ff:d9:3f:f4:e3:
49:d3:3b:d3:33:a3:5b:8c:52:b5:f5:f5:af:3f:0e:
12:9a:b0:1e:84:8d:41:23:8a:73:7d:05:86:3b:af:
ff:d6:5a:8e:2f:76:bb:87:ff:9d:26:0d:f7:68:bc:
b8:36:c9:81:1f:d7:47:8e:50:ca:95:66:d3:b5:25:
33:d9:3c:7c:f9:a5:8d:25:51:c5:97:75:3f:d0:ee:
8e:8f:9c:b6:10:be:f2:e6:ab:6c:d3:1f:5d:7a:af:
10:7d:a8:d0:94:40:91:83:48:be:e2:79:d9:8e:91:
65:07:19:cd:1a:b4:9b:a6:42:70:91:59:88:f3:69:
96:f1:c6:cc:37:6f:72:a9:1b:1d:32:c6:22:3d:c8:
50:45:ea:20:93:0b:c5:f2:9f:57:1e:59:67:57:bb:
44:b8:76:e4:d5:ed:ce:41:89:60:8a:99:63:b3:64:
f5:5e:38:d7:eb:d8:32:9e:fb:df:c4:cf:2f:2d:23:
72:db:55:33:01:76:72:0e:f9:1f:e1:77:5b:d4:4b:
95:d2:65:5a:a4:e2:c5:2a:98:14:83:6d:fd:3d:af:
b9:cd:80:71:39:68:1b:d7:09:9b:2a:02:d5:6c:fb:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:94:A4:9D:28:FF:F6:95:A1:26:F5:9A:9A:78:EC:34:41:78:0C:2A
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:85:da:f0:aa:03:ab:66:19:43:77:ad:51:93:15:38:b7:a9:
a8:b5:d7:a7:49:25:65:d9:70:c0:1f:0d:af:ea:ec:44:b7:90:
c1:b9:90:61:c2:fc:ed:ad:27:5d:bd:2a:0e:ab:3f:52:79:63:
d4:34:6c:2a:74:15:60:73:eb:91:ba:23:0b:6d:7e:87:ec:49:
16:c5:1e:07:25:7d:99:8a:b2:ed:81:ea:8c:dd:f4:ae:86:3a:
e2:cc:d3:c2:21:17:c0:10:97:35:24:48:39:6e:50:fd:29:7f:
a4:9f:fa:d7:35:40:4a:a9:10:bf:1e:33:fd:55:a9:23:f2:a7:
8f:f4:01:1f:12:64:c3:df:a4:86:6a:f0:f8:55:87:1e:6b:35:
6c:8f:7b:b1:f2:df:5c:38:25:9d:80:c7:14:09:08:f3:07:92:
1a:d2:d7:04:29:7f:89:b3:c5:9a:e4:24:61:bf:09:5f:b4:7d:
db:a2:57:61:ff:74:d0:76:1b:d1:0b:d4:43:f7:88:44:81:04:
22:af:73:e0:b8:73:53:d7:32:8e:80:f3:00:3d:9d:dc:c8:54:
1c:a9:12:cf:2a:3b:47:9c:a0:56:73:20:ca:f1:d5:13:82:01:
41:0a:2e:17:13:24:d5:c4:b7:26:c2:64:15:57:66:49:cb:ff:
9b:2c:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:25 2026 by rpki-client