Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: ORWcKxaRw8huj9RpRMT7/JlNFJIUdv4DAllQKet8so4=
Subject key identifier: 4C:ED:1D:ED:0A:E7:AC:9C:CB:D1:B5:94:1A:53:25:07:BF:9C:8E:DC
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01A08CE904F70C6DF84F2283DE53EA737D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 18B4
Signing time: Thu 10 Sep 2026 20:01:16 +0000
Manifest this update: Thu 10 Sep 2026 20:01:16 +0000
Manifest next update: Fri 11 Sep 2026 20:01:16 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: zMSKt2t2B3OU+nz8W/gh1rZMG3oz8P0ivLKTkBwzW3c=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:04:f7:0c:6d:f8:4f:22:83:de:53:ea:73:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Sep 10 20:01:16 2026 GMT
Not After : Sep 11 20:01:16 2026 GMT
Subject: CN=4ced1ded0ae7ac9ccbd1b5941a532507bf9c8edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:e6:bb:ce:c7:3c:ce:59:dc:eb:98:6f:5c:
52:c3:d3:5a:e2:83:c8:ee:60:21:ed:31:d2:d4:d1:
d2:54:f6:9e:92:fa:aa:91:2c:bc:f8:db:eb:fe:e9:
82:21:cb:d6:7a:95:ae:b8:f9:03:8c:27:03:fc:24:
1e:cf:c2:ac:01:3a:de:c0:94:e8:b8:e0:8f:21:f2:
8c:63:24:87:8d:21:d0:c8:ef:6c:8f:ad:f0:fd:7d:
6d:64:c0:c4:9f:93:df:b3:a6:ab:4f:5c:3a:49:d5:
be:85:c4:a5:df:96:ee:81:f2:05:fd:97:f9:88:11:
fe:fc:51:e1:eb:8e:8b:23:da:0a:a7:d9:96:51:2e:
ba:10:b4:c6:cf:1e:b7:25:73:0e:2b:7c:d5:12:a6:
b3:45:5f:aa:3f:e8:d2:15:d4:07:75:32:38:a7:14:
ed:11:ad:ed:3b:ac:ef:d7:28:7a:4b:16:9b:97:a3:
f0:04:d9:48:50:5c:72:b2:70:c3:d8:e9:f9:d0:94:
91:09:18:e4:b6:d6:f9:1a:44:3b:17:4c:51:ab:67:
8f:8f:0d:b0:b4:f4:c6:5f:4d:a3:eb:46:ad:37:55:
fd:96:7d:ee:57:b9:05:5f:8f:0a:c1:45:81:2d:1b:
27:3b:d1:50:04:6d:db:d1:b6:d0:d4:9b:0e:5e:bc:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:1D:ED:0A:E7:AC:9C:CB:D1:B5:94:1A:53:25:07:BF:9C:8E:DC
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:36:75:f0:1a:2c:13:46:b7:43:8b:23:8e:e8:0a:ed:3a:ee:
af:7c:7d:3e:91:70:64:6b:7f:0c:8c:8e:ed:59:7f:90:6d:ff:
61:4b:83:f0:ab:ab:b1:90:cb:30:14:b2:f0:92:af:2f:c3:0e:
c8:01:82:4b:52:36:14:4c:30:a8:b1:a9:d4:b8:25:92:ce:33:
80:dd:62:ff:33:28:3d:87:00:85:9a:21:06:a7:76:22:7b:60:
06:78:1e:97:45:7d:88:fd:7c:df:08:02:98:1c:5f:88:72:92:
49:86:61:e8:90:f9:a8:cb:dc:65:04:ff:5e:54:20:23:c7:c7:
85:c8:4a:a6:23:d0:42:8a:2f:8b:cc:b6:2c:bc:22:12:a9:a6:
c7:0f:ca:77:19:74:cd:bf:94:a3:38:4f:71:7e:bc:3a:38:82:
c9:81:02:90:e7:a9:22:1f:2d:82:52:2e:ae:54:09:63:70:d1:
90:6c:a2:ce:0d:16:ee:9d:c6:75:34:78:e2:70:e9:21:66:a5:
fe:08:15:d3:e9:dc:ba:5b:7a:2f:87:6e:9e:62:8d:33:20:52:
e5:a0:90:6c:94:17:9c:07:98:63:83:5d:46:16:6d:aa:58:24:
9b:b2:c9:43:3c:34:9d:1e:f8:f2:97:c1:dc:00:5e:de:76:96:
65:bb:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:19 2026 by rpki-client