Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: UAkPRjpO4HEGHnbFd05i+EsU0O+EPJAlYD6qdorDJOc=
Subject key identifier: 81:A6:8A:45:C1:04:43:91:A0:42:57:8D:9F:6D:E2:87:30:5F:37:CC
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01A17C60619CD83CC4404DF358D9E067CC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 1930
Signing time: Tue 27 Oct 2026 08:00:53 +0000
Manifest this update: Tue 27 Oct 2026 08:00:53 +0000
Manifest next update: Wed 28 Oct 2026 08:00:53 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: a4NxLjlDkizMaIAWpiaTmxnfYtlpSwEQXDpjAErHRrk=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:61:9c:d8:3c:c4:40:4d:f3:58:d9:e0:67:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Oct 27 08:00:53 2026 GMT
Not After : Oct 28 08:00:53 2026 GMT
Subject: CN=81a68a45c1044391a042578d9f6de287305f37cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:8c:6f:da:15:2c:04:ed:97:ac:9c:34:01:
b2:70:8b:87:e5:73:dd:46:73:08:50:fb:36:fd:06:
5e:8d:43:b2:0e:70:5e:cd:8f:6c:e7:a4:ea:3d:9d:
bc:cf:c2:09:93:cb:ee:17:bc:78:a9:d0:44:2d:6a:
5e:e2:cf:34:2d:2a:27:2f:a6:f4:6b:33:bd:0a:17:
cb:3f:b7:6a:83:51:8b:39:5b:76:b9:68:c0:e5:f1:
1d:21:19:ec:5d:b3:cb:b4:f5:28:db:5e:ab:61:63:
ba:dd:54:f1:5d:6a:ae:4f:bd:07:82:6c:09:57:8c:
ca:46:73:7b:14:ba:d8:6d:31:2a:c1:cb:14:26:96:
4c:25:dc:6d:95:fa:35:1d:73:a6:a3:dd:55:42:91:
c2:29:93:75:36:63:c1:2a:95:ac:5d:16:f0:2e:92:
8a:d9:59:83:9d:f7:db:ec:a7:40:19:93:34:64:51:
93:62:47:7f:7d:31:85:cb:51:9e:c4:7c:c8:64:d4:
99:a8:04:90:f6:f9:7d:40:4b:78:5c:1c:77:a9:ef:
a5:78:a9:4c:91:0f:fb:34:29:de:56:ca:d4:11:0a:
49:49:80:01:0c:16:cf:13:41:c5:29:20:98:0b:7a:
79:38:30:63:21:0b:fd:ab:ac:9a:aa:a1:59:54:ea:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A6:8A:45:C1:04:43:91:A0:42:57:8D:9F:6D:E2:87:30:5F:37:CC
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0f:aa:b9:fd:25:75:80:2e:ed:f4:4f:c5:4c:91:8d:2c:64:
7d:51:d1:a2:fe:14:b7:3b:00:59:31:56:78:fa:1c:90:0d:db:
3e:93:fc:3b:71:4b:92:56:d2:74:6b:bf:f8:73:53:e6:10:be:
06:78:bb:72:1c:b2:ed:3c:8c:61:a5:5b:0d:de:03:d0:42:5a:
94:f7:d7:e1:80:32:aa:ff:c1:49:32:b0:81:2b:58:75:98:c4:
40:16:4d:da:98:01:36:f5:f0:26:30:42:6e:83:32:db:f9:4b:
40:48:47:4d:21:ee:86:3b:0f:73:82:3e:1a:68:3e:8e:58:8b:
45:0e:16:84:2a:78:9b:56:33:35:7e:e6:18:4d:ce:9a:80:0e:
b4:f6:0f:cd:bb:9f:ad:66:12:92:84:c6:83:a1:30:34:aa:01:
f0:65:eb:52:09:b1:6d:fe:90:ad:c2:ee:cc:72:d5:12:0a:f4:
31:eb:c3:17:22:77:ea:74:27:67:36:05:79:0e:fe:e6:f4:92:
56:47:70:fa:27:52:b7:23:b2:e7:9e:10:ec:79:d1:6e:a9:a9:
19:67:e4:f3:75:b1:19:0c:82:f3:8d:ed:49:a1:5f:89:0e:52:
ef:8f:11:54:45:bb:7f:0c:33:60:f7:39:b5:51:fd:da:36:fe:
ef:8a:f2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:44:05 2026 by rpki-client