Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: 1jD0PgmUmMNyIl53BWGFCuUUMbUWp7tzHL2OchShKuo=
Subject key identifier: 06:5D:A0:BD:0F:EE:AF:B9:2A:DC:C9:75:A5:12:AC:E3:24:97:F8:D4
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 019FABD112C1887737A4C28BA22DF6CABB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 03DF
Signing time: Wed 29 Jul 2026 03:00:33 +0000
Manifest this update: Wed 29 Jul 2026 03:00:33 +0000
Manifest next update: Thu 30 Jul 2026 03:00:33 +0000
Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: otoFJkbQTaL2Ugoc6s3NJFW+L6e/zswXlhThxaer+6g=)
2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=)
3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:12:c1:88:77:37:a4:c2:8b:a2:2d:f6:ca:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Jul 29 03:00:33 2026 GMT
Not After : Jul 30 03:00:33 2026 GMT
Subject: CN=065da0bd0feeafb92adcc975a512ace32497f8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:a3:24:b5:ee:8e:bb:47:4b:2e:fe:d4:54:
b3:38:0d:f3:05:e9:d1:17:e7:10:65:6a:6e:67:3b:
8a:51:d2:30:3e:ed:e8:ea:c8:d7:59:7e:0d:f3:e0:
e8:10:23:2a:5c:16:d3:cb:ad:bb:68:52:ed:51:e6:
5f:98:0c:48:52:6d:69:ab:04:a9:72:41:ea:df:4d:
b0:86:fb:e5:be:d1:f2:29:ed:51:61:a9:4b:66:cf:
48:5a:77:eb:44:97:ec:ec:e8:cf:dd:37:1a:01:c4:
01:96:7c:70:5f:9b:da:e3:d5:fb:f9:1e:b1:58:31:
dc:44:52:53:e7:46:86:34:7c:66:d7:3d:bd:8d:69:
19:9b:9b:83:24:9a:51:f1:5c:b7:4d:f6:6c:43:9f:
0d:ba:8b:d2:08:c3:71:a9:70:6e:c3:45:dd:f6:69:
01:38:31:70:11:33:3c:64:30:cf:f7:a2:70:8b:8a:
64:06:a2:e9:41:3f:02:09:2d:11:9d:b9:93:39:99:
b9:86:b6:81:1f:ae:73:aa:b9:1e:27:95:80:7e:f5:
ee:8a:4c:b8:76:3c:d4:74:b1:a4:bd:19:6f:ab:9e:
16:7d:e6:f2:fa:fc:e7:9e:90:83:2c:06:c4:58:5c:
5a:51:41:ee:6b:5b:4b:d8:71:32:1e:ba:12:ae:93:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5D:A0:BD:0F:EE:AF:B9:2A:DC:C9:75:A5:12:AC:E3:24:97:F8:D4
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:31:4f:3d:e9:92:79:6a:5d:ba:7b:76:04:ff:4e:a2:20:36:
ea:4c:54:07:fe:da:7a:ad:9f:63:a7:ec:45:49:0a:a6:aa:e7:
c9:68:55:d0:ca:a0:fa:33:b0:d5:9d:c3:2a:e3:2a:e9:41:26:
9a:cf:48:34:c2:48:ce:81:c9:db:11:59:6e:76:31:f8:2f:5b:
0b:c9:59:a3:2b:8d:33:fc:d1:c7:61:ea:26:aa:cd:b7:f8:1a:
19:38:81:a1:6e:a6:98:ca:6b:65:7a:0b:a9:61:8e:03:bb:c2:
91:03:0e:01:0f:63:91:49:46:67:9e:c1:e6:fb:3d:04:4b:0f:
9d:01:11:d7:6f:fa:61:8d:11:53:f3:63:e5:01:41:c8:be:64:
a5:5e:20:38:b0:11:aa:d2:1d:79:55:4d:8d:e7:94:cc:c7:1e:
99:10:25:21:36:58:19:97:b5:d1:26:79:0c:6b:f8:6b:f6:30:
cd:6f:3c:1d:a4:a1:a6:15:5c:24:c6:e7:12:04:f6:dc:58:df:
6f:55:b1:a5:56:00:92:a3:35:e4:3e:c8:90:ef:79:02:13:c1:
a8:0e:7e:df:a5:d0:ea:7e:76:2c:e7:c3:c5:1e:22:99:7a:95:
11:f5:62:13:85:66:19:71:39:dd:07:36:4d:37:8d:e4:2e:7d:
8a:fe:bc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:26 2026 by rpki-client