Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: NsWldksTmaS87TxrRjoSA9ULh733tvw/PjuftGquziY=
Subject key identifier: D1:2A:33:EB:80:AB:3B:DC:68:AA:B7:8A:7A:19:53:31:EE:A5:17:F8
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 019CB0FF4999B720F0B75295BF2A514292A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 0254
Signing time: Tue 03 Mar 2026 00:00:46 +0000
Manifest this update: Tue 03 Mar 2026 00:00:46 +0000
Manifest next update: Wed 04 Mar 2026 00:00:46 +0000
Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: JN09WY4325WrlEst80gp3s8dorbbrAqSbr2rwh4NtEY=)
2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=)
3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:49:99:b7:20:f0:b7:52:95:bf:2a:51:42:92:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Mar 3 00:00:46 2026 GMT
Not After : Mar 4 00:00:46 2026 GMT
Subject: CN=d12a33eb80ab3bdc68aab78a7a195331eea517f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:89:bc:bb:5b:97:e5:43:19:4c:b6:7c:ef:
e9:03:97:65:34:ed:34:a9:e2:d5:65:a5:fd:4c:20:
b0:d5:ad:8f:fd:6e:dc:60:43:a5:73:13:b8:52:e4:
39:1e:e8:4c:ee:ed:99:83:5d:76:33:67:c8:4b:bb:
0b:cf:81:47:58:bf:20:66:64:6b:ce:13:65:49:55:
32:df:0e:77:52:6f:48:40:31:da:4b:38:00:ae:b0:
5b:94:f0:23:03:2a:8d:ad:48:4f:37:e5:32:d8:95:
81:b4:a1:af:36:83:cb:a0:6b:7a:00:ba:5f:e3:ce:
6e:3d:73:b8:80:17:37:4e:ba:c3:5e:3a:90:e6:82:
58:43:07:4c:81:9f:c9:36:e9:5e:03:41:0c:72:04:
a4:96:d7:c3:9b:e8:76:1b:cc:2e:95:4f:4a:e5:33:
68:a7:25:28:11:f8:b4:fc:69:63:17:a7:59:eb:e1:
c4:8b:3a:f6:91:31:f3:79:24:fa:82:d9:ea:ef:6c:
56:c5:73:91:af:f8:99:88:7e:16:00:55:35:d8:97:
43:28:d4:3b:df:54:f4:e1:d9:c6:22:08:36:b0:40:
3c:6d:55:7b:36:ff:f9:41:be:66:c9:41:15:70:a8:
f7:02:3a:bb:f1:a3:af:6f:2e:f5:b4:9b:9b:ec:c9:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2A:33:EB:80:AB:3B:DC:68:AA:B7:8A:7A:19:53:31:EE:A5:17:F8
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6a:b3:3a:ce:db:61:8b:96:65:e4:43:25:be:a7:5a:ac:3c:
3d:0a:d6:cf:a7:b2:9e:d7:9d:68:74:8d:69:fb:e0:82:be:2f:
27:14:ff:0f:e5:04:b3:6d:92:b8:99:ad:de:9c:7a:9b:32:30:
4b:ee:5b:26:34:21:da:b5:47:21:1f:03:2c:28:48:e3:55:8e:
b7:bd:4d:e0:6e:d4:4f:a0:6c:63:33:b8:d1:a3:cb:69:be:4a:
0e:a3:73:35:91:58:22:ed:fa:36:71:3f:35:d4:75:93:61:22:
19:0f:f8:af:ff:92:7f:8c:37:c2:e8:12:a1:dd:f5:cc:90:9f:
01:5c:49:b6:4f:db:22:50:e9:3f:2d:89:37:51:a1:a6:04:4f:
f1:80:fd:e4:30:fc:3f:26:fd:2b:87:d3:48:55:68:69:79:0d:
95:fc:63:58:7b:71:cd:38:d5:f0:05:02:b3:68:78:ec:b0:e4:
84:0a:37:f4:9d:c7:c0:df:49:b6:1d:de:fc:4d:ee:7a:7a:39:
08:65:b4:e6:24:de:bc:3f:60:77:f6:bf:1c:b0:e0:e3:3d:82:
9f:35:2d:13:1f:a4:a5:66:eb:80:09:05:fd:44:55:10:80:82:
d0:ed:ce:2c:da:d6:2b:01:6e:ba:57:c9:0f:3b:af:07:2b:46:
d8:c2:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:21 2026 by rpki-client