Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
File: KXoNnIYU9TK96fRl3U93poEX6VY.mft (raw, json)
Hash identifier: t+WVt8jS7SOL+7dynPXhqQJVipeiUbD39ZcrmbDvjDk=
Subject key identifier: C3:98:2C:BB:0B:2E:95:07:51:1A:2F:DA:0B:EE:06:1A:AD:55:75:68
Authority key identifier: 29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
Certificate issuer: /CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Certificate serial: 019FAA87373FCA67C7D22DACC33414490FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:16 +0000
Manifest this update: Tue 28 Jul 2026 21:00:16 +0000
Manifest next update: Wed 29 Jul 2026 21:00:16 +0000
Files and hashes: 1: KXoNnIYU9TK96fRl3U93poEX6VY.crl (hash: MPw5Bz6ToNdAVeqUH0FY+iQyPr0SsQZ+ikarF94iBOM=)
2: fmT6qGd_82DfL36JETvp_cYAJEA.roa (hash: +LPv3kGR0ahEJ11+PYzJHGAwvNRYkD0wo7DqeBKeWd0=)
3: hLMrHZeDr1exS-w5Q__NBh2TEMw.roa (hash: vbYv6I3D0Tp+aqvC92NpbtFK8cSesM/xfDG+wj8JE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:37:3f:ca:67:c7:d2:2d:ac:c3:34:14:49:0f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Validity
Not Before: Jul 28 21:00:16 2026 GMT
Not After : Jul 29 21:00:16 2026 GMT
Subject: CN=c3982cbb0b2e9507511a2fda0bee061aad557568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:07:c3:6c:a2:f4:f5:3e:ce:15:71:8f:6a:
a0:f3:34:3d:dd:ed:5f:6b:d5:0a:03:43:10:ba:c4:
bf:23:52:3d:ac:ff:b8:39:99:48:09:2b:d6:03:5a:
73:fa:29:a6:f2:1d:5e:eb:53:ec:27:43:6b:09:7e:
33:91:10:50:1c:01:07:6e:3c:8c:05:13:0e:fa:f7:
dd:06:31:ad:e3:9e:b8:95:04:4d:8f:5d:fd:07:d0:
5f:22:8e:ff:95:44:59:d3:db:54:04:84:54:e7:83:
2c:0a:fc:b6:f7:4e:75:bb:ce:36:97:95:b5:b2:51:
7c:1a:1f:e2:91:ee:74:60:97:27:8d:5f:3b:d1:59:
b2:8e:bd:d4:e1:b9:d4:e7:f7:16:7c:57:e2:4c:b6:
9b:d4:74:79:96:af:66:52:ab:d3:53:84:94:17:2f:
b7:bc:22:af:80:a7:a0:53:0a:1f:9c:77:f8:b8:c3:
2b:1f:ba:0f:ed:11:60:62:43:75:b0:71:3b:f4:96:
35:99:e3:09:fb:5d:ff:d4:3a:9d:05:94:ef:f8:56:
29:3a:8d:d1:96:93:ad:e0:58:32:4a:43:90:06:30:
49:ba:82:35:fb:1d:55:9c:df:56:ae:71:91:52:04:
55:e3:d6:ab:0d:63:85:6a:49:ca:25:d8:43:1f:46:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:98:2C:BB:0B:2E:95:07:51:1A:2F:DA:0B:EE:06:1A:AD:55:75:68
X509v3 Authority Key Identifier:
keyid:29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:79:a1:75:eb:43:fb:59:18:ff:a6:c8:cb:74:9d:9f:0b:79:
28:93:2a:61:2b:14:2d:8c:aa:95:20:e5:bd:a2:29:c6:20:1c:
fe:c9:2f:5b:08:e3:c8:4f:f2:ac:17:a1:32:75:6a:4b:12:af:
58:da:e1:37:fd:af:19:b5:28:86:71:0d:8e:41:ec:c9:74:85:
80:ae:a9:ca:0f:90:90:21:65:a1:be:e1:3e:41:b2:d4:91:e9:
29:86:61:b7:f5:82:90:d7:3b:c3:02:a3:8b:32:ca:74:83:24:
aa:93:bf:e9:76:b6:65:49:61:80:a4:bb:59:40:ac:a2:49:1e:
18:61:74:a7:1c:6d:3f:9f:c8:5a:ef:20:03:f2:f6:8a:21:a1:
32:85:c0:7b:a1:d4:87:24:e6:8f:4d:10:24:be:80:53:6d:7c:
79:75:c1:c7:78:28:aa:2a:01:1c:60:bd:81:95:63:88:d0:97:
e9:f4:f6:82:dc:50:03:ae:c3:55:82:5c:f5:9c:a8:a1:06:76:
df:ce:ce:bd:9b:0b:4a:95:e1:f8:32:a8:d3:33:9d:0e:96:63:
56:60:53:a6:f1:30:ef:92:53:b0:46:e8:46:19:32:e8:46:83:
fc:ce:cb:0b:f4:07:e3:76:60:2e:5c:5d:e9:59:4d:e4:a9:a1:
f1:47:11:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qhzc/ymfH0i2swzQUSQ/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2EwZDljODYxNGY1MzJiZGU5ZjQ2NWRkNGY3N2E2ODEx
N2U5NTYwHhcNMjYwNzI4MjEwMDE2WhcNMjYwNzI5MjEwMDE2WjAzMTEwLwYDVQQD
EyhjMzk4MmNiYjBiMmU5NTA3NTExYTJmZGEwYmVlMDYxYWFkNTU3NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAproHw2yi9PU+zhVxj2qg8zQ93e1f
a9UKA0MQusS/I1I9rP+4OZlICSvWA1pz+imm8h1e61PsJ0NrCX4zkRBQHAEHbjyM
BRMO+vfdBjGt4564lQRNj139B9BfIo7/lURZ09tUBIRU54MsCvy29051u842l5W1
slF8Gh/ike50YJcnjV870Vmyjr3U4bnU5/cWfFfiTLab1HR5lq9mUqvTU4SUFy+3
vCKvgKegUwofnHf4uMMrH7oP7RFgYkN1sHE79JY1meMJ+13/1DqdBZTv+FYpOo3R
lpOt4FgySkOQBjBJuoI1+x1VnN9WrnGRUgRV49arDWOFaknKJdhDH0YO1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOYLLsLLpUHURov2gvuBhqtVXVoMB8GA1UdIwQY
MBaAFCl6DZyGFPUyven0Zd1Pd6aBF+lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hvTm5JWVU5VEs5NmZSbDNVOTNwb0VYNlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iYTI3ZmItMjU1MC00OWFkLWIwZWYt
NWI4M2QwZTk2MDEyLzEvS1hvTm5JWVU5VEs5NmZSbDNVOTNwb0VYNlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iYTI3ZmItMjU1MC00OWFkLWIwZWYtNWI4M2QwZTk2MDEy
LzEvS1hvTm5JWVU5VEs5NmZSbDNVOTNwb0VYNlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenmhdetD
+1kY/6bIy3Sdnwt5KJMqYSsULYyqlSDlvaIpxiAc/skvWwjjyE/yrBehMnVqSxKv
WNrhN/2vGbUohnENjkHsyXSFgK6pyg+QkCFlob7hPkGy1JHpKYZht/WCkNc7wwKj
izLKdIMkqpO/6Xa2ZUlhgKS7WUCsokkeGGF0pxxtP5/IWu8gA/L2iiGhMoXAe6HU
hyTmj00QJL6AU218eXXBx3goqioBHGC9gZVjiNCX6fT2gtxQA67DVYJc9ZyooQZ2
387OvZsLSpXh+DKo0zOdDpZjVmBTpvEw75JTsEboRhky6EaD/M7LC/QH43ZgLlxd
6VlN5Kmh8UcRag==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:48:42 2026 by rpki-client