Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: 6PtOMGx4wJPZq9GDlCgE6AthriDBgCHfhhHnDnftROY=
Subject key identifier: C7:CD:B4:AF:3A:CB:B2:4A:FA:19:DB:D2:ED:2A:F4:C1:4C:F8:90:E9
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019DA75479A379D5D17329F9FBCBBC0907CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 1734
Signing time: Sun 19 Apr 2026 20:00:24 +0000
Manifest this update: Sun 19 Apr 2026 20:00:24 +0000
Manifest next update: Mon 20 Apr 2026 20:00:24 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: I4zH/a0M/8lsY0MhDwrULtpXw6+FwQkf0Qvk5jL33YU=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:54:79:a3:79:d5:d1:73:29:f9:fb:cb:bc:09:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Apr 19 20:00:24 2026 GMT
Not After : Apr 20 20:00:24 2026 GMT
Subject: CN=c7cdb4af3acbb24afa19dbd2ed2af4c14cf890e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:31:6d:f3:39:35:d9:dd:f5:87:cb:88:96:
fe:d2:36:3a:3b:d1:e5:54:66:42:4b:1c:76:82:48:
de:27:b9:fe:88:32:cd:ee:e9:38:0e:40:a4:73:39:
fa:03:7e:1f:fe:59:17:2a:26:f9:60:d8:b4:bc:c7:
3b:9b:b4:2c:cf:d8:00:a3:28:cc:48:2e:a9:72:56:
03:55:22:d2:24:6e:63:b0:07:53:44:13:91:b7:c0:
5f:6a:1e:12:37:80:4b:50:ee:20:c5:af:d9:03:a0:
fc:d7:e3:f2:c1:ef:bd:16:4b:46:52:51:5a:77:49:
05:9b:76:02:ff:5b:2c:ce:c7:67:55:db:3d:d3:5c:
72:e7:79:33:69:49:b7:01:f9:e7:07:94:16:d7:e9:
82:cc:cd:74:ae:db:3f:e0:5b:e0:33:07:6c:3f:42:
b3:9f:73:e0:e3:5b:f7:93:e7:f9:44:0f:9f:7b:33:
cb:a4:12:23:93:56:3d:a5:35:91:e9:8a:20:bc:2c:
43:ee:23:d5:8b:e1:08:42:aa:dd:01:7e:33:90:ba:
b8:25:2e:72:af:ef:60:a4:56:6c:99:2e:30:4f:42:
c3:7e:13:46:f8:f9:42:eb:3d:d1:9e:96:6b:16:0d:
3d:56:02:1e:e6:6b:b0:98:56:e6:c3:c8:18:a0:da:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CD:B4:AF:3A:CB:B2:4A:FA:19:DB:D2:ED:2A:F4:C1:4C:F8:90:E9
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:a8:6e:2f:e0:12:86:9f:64:a6:f8:83:9f:f8:25:22:0d:
7b:25:01:7f:27:0f:df:0a:21:fd:44:3c:93:25:92:8d:dd:e1:
2f:c9:29:ba:57:22:c2:da:91:f7:72:48:fb:74:32:ac:bc:c2:
b0:fb:51:d6:65:81:f3:e9:46:bc:fc:2d:07:93:e6:bf:64:2c:
6e:17:c4:6e:55:54:cc:7a:7d:97:e2:df:13:30:19:af:1c:b3:
4e:5e:fa:82:e5:76:9c:44:37:ef:87:53:8b:9c:38:ac:a5:6e:
97:93:75:2e:4e:06:a4:64:be:d0:e0:03:f1:0a:38:7f:ff:4f:
ca:54:c0:12:3a:d5:a6:20:13:0a:9c:b5:da:f2:69:24:cd:54:
16:12:c1:ce:36:27:e0:a5:b2:6c:18:27:0b:b1:80:04:79:e2:
c4:32:3e:bf:2b:32:b6:3c:24:1e:b1:ef:6f:bc:39:b5:f7:c4:
14:ab:20:38:77:ba:1d:94:dd:15:49:0c:ac:4c:25:e6:4a:86:
5a:59:01:6f:91:56:23:07:d6:d8:43:62:6a:ef:f2:62:8f:50:
23:e6:58:73:db:e7:54:5b:6b:26:17:55:40:5e:aa:25:64:d6:
66:a3:7a:91:94:b0:c9:89:7f:e4:c4:58:eb:24:d0:77:52:7e:
fb:3e:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:49 2026 by rpki-client