Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
File: KXoNnIYU9TK96fRl3U93poEX6VY.mft (raw, json)
Hash identifier: YG4y12po6bZ7Sdze4Ji2mWrB8aNzdq9DX5vS2hPP/hM=
Subject key identifier: 14:5A:5A:0B:4F:43:DB:26:07:A5:3E:15:1B:44:4B:48:9A:4C:0B:7D
Authority key identifier: 29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
Certificate issuer: /CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Certificate serial: 01A0E92DB0FD149486B9F2DDFF58E17776D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:20 +0000
Manifest this update: Mon 28 Sep 2026 18:01:20 +0000
Manifest next update: Tue 29 Sep 2026 18:01:20 +0000
Files and hashes: 1: KXoNnIYU9TK96fRl3U93poEX6VY.crl (hash: 5g5L9JrItJpIcgYm/KFhXp2JB/XxrW2eEG8hrNGDW9Q=)
2: fmT6qGd_82DfL36JETvp_cYAJEA.roa (hash: +LPv3kGR0ahEJ11+PYzJHGAwvNRYkD0wo7DqeBKeWd0=)
3: hLMrHZeDr1exS-w5Q__NBh2TEMw.roa (hash: vbYv6I3D0Tp+aqvC92NpbtFK8cSesM/xfDG+wj8JE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:b0:fd:14:94:86:b9:f2:dd:ff:58:e1:77:76:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Validity
Not Before: Sep 28 18:01:20 2026 GMT
Not After : Sep 29 18:01:20 2026 GMT
Subject: CN=145a5a0b4f43db2607a53e151b444b489a4c0b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5e:69:3d:25:55:f8:53:a6:59:44:db:94:8f:
48:b2:83:4b:43:47:02:84:68:e3:35:a5:23:43:a1:
f3:56:20:2b:18:46:b2:57:75:ba:c0:07:fa:87:fa:
c2:59:ef:d3:ec:fe:54:b2:38:a9:b5:ed:4c:73:93:
cd:e7:53:83:f4:da:ad:2f:eb:30:12:29:c5:ef:82:
6c:43:9f:dc:d8:eb:e7:ae:ce:b3:ef:b3:d9:99:76:
68:94:8a:c6:5f:fa:b7:c0:2a:4a:15:b2:5c:bd:d6:
3b:4a:f7:f3:00:a7:5e:70:5e:20:db:f4:5e:72:12:
3a:97:6c:96:04:9a:f3:7b:44:f6:62:a9:27:e8:25:
90:ee:ed:59:44:f1:7f:85:40:f6:f8:33:7a:67:35:
de:ad:75:01:73:74:10:84:63:ba:1e:4e:59:48:28:
80:b6:5f:51:fa:a5:41:46:43:f1:c7:d1:80:bc:95:
8e:61:b5:59:dd:37:97:1a:c3:1a:b9:2c:09:ce:99:
2f:f2:50:4e:31:d6:9c:6b:28:22:e9:e4:52:60:29:
ba:67:97:d4:88:91:0e:94:ed:66:46:c7:a4:1e:58:
10:d8:70:28:dd:d9:4c:45:48:fb:f5:0f:c9:01:a3:
ee:61:34:5b:76:17:a4:3d:bc:31:03:12:d4:e1:3f:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5A:5A:0B:4F:43:DB:26:07:A5:3E:15:1B:44:4B:48:9A:4C:0B:7D
X509v3 Authority Key Identifier:
keyid:29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fd:7d:09:2a:d4:2d:60:22:b6:06:1e:1c:1e:0a:2a:55:fd:
52:78:6e:be:e1:c6:d4:d8:65:6f:f7:0b:07:0e:95:b7:d1:f0:
9f:27:af:e6:68:fc:5e:99:25:43:4b:a4:a7:fc:7c:58:51:b7:
20:04:9f:40:8d:10:43:7d:5e:91:a6:fa:7f:ad:ee:3f:be:ac:
33:4f:9d:aa:86:32:1f:6c:52:6a:0a:28:0f:89:31:9f:3a:5c:
9b:62:57:bf:de:bd:7e:17:2b:f5:b0:1d:f0:4c:63:10:82:05:
af:1a:19:c2:14:d6:59:bf:0b:7d:4c:08:78:4e:8b:cc:6f:86:
e8:fa:e0:9f:fd:c5:f7:12:a1:1e:82:58:cf:ff:d6:cd:ce:d2:
8e:b3:77:5a:a1:5d:17:d8:62:63:0f:37:c8:11:87:41:73:2a:
9e:9c:cb:25:31:b9:70:b7:6b:d1:f2:21:09:d0:18:19:bf:e4:
65:0d:09:c1:23:b1:7a:f7:47:e2:fb:28:73:c8:27:8b:bb:23:
b2:d6:60:9c:ab:32:3d:38:74:ae:b1:69:1e:26:5c:36:0f:c0:
2c:58:40:e9:6b:2d:42:8a:60:63:4f:d2:35:b1:06:9b:3e:78:
b0:71:47:3f:aa:2f:66:c3:01:cc:90:b6:d9:1e:5e:44:ff:75:
e2:25:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:03:15 2026 by rpki-client