Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: RRlzKhUQdueJEtDi/i4Czpy1BPkJ6rRGgq97yrawvXg=
Subject key identifier: 36:F5:FD:EE:2D:21:F0:CF:97:49:4A:2B:B6:BF:E9:53:6B:75:BD:F4
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01A1803DC86205BD90897E1168CA628AF6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 1932
Signing time: Wed 28 Oct 2026 02:01:34 +0000
Manifest this update: Wed 28 Oct 2026 02:01:34 +0000
Manifest next update: Thu 29 Oct 2026 02:01:34 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: qb0nzWj7do6hU94+yxvIkiBChOGd+NOHJV2Ojpk0nDs=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:c8:62:05:bd:90:89:7e:11:68:ca:62:8a:f6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Oct 28 02:01:34 2026 GMT
Not After : Oct 29 02:01:34 2026 GMT
Subject: CN=36f5fdee2d21f0cf97494a2bb6bfe9536b75bdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:0f:23:df:40:1b:99:d4:25:cd:fd:f4:5e:
d7:08:05:c2:f7:23:16:f0:81:31:10:23:5f:28:9a:
c3:5b:1b:dc:92:a1:d8:62:2c:ab:ec:47:7b:24:ea:
4d:d3:6e:79:0c:fd:b8:a5:71:07:7b:4d:a7:98:03:
31:81:ab:51:fa:03:a8:0c:f0:b0:aa:24:81:27:ec:
42:02:7f:1f:f0:d5:d7:02:8a:e4:e6:34:57:12:37:
6a:cf:c8:ae:0d:9f:25:e4:8f:13:36:25:49:17:23:
e0:11:15:a6:17:77:ae:f7:a3:79:b8:7f:ca:a1:44:
65:a4:8f:30:e7:3e:05:e0:78:64:ea:22:fd:08:dd:
9c:96:ff:d1:e6:08:fe:b4:93:9a:fc:88:99:13:91:
25:d6:b2:fa:87:2b:6a:be:90:9d:bc:f6:c7:c8:9f:
e2:0b:ec:7a:9a:cd:f8:3b:8f:b9:36:43:33:52:95:
1e:8d:4b:73:53:66:36:02:2c:b6:83:d0:bd:28:61:
87:11:3b:38:db:a4:cb:0c:95:42:38:07:cd:b7:62:
3f:6f:5e:fb:90:21:8b:a3:f2:9e:3a:0b:b6:71:c0:
bf:49:d5:72:3d:75:96:ed:c5:6b:d7:00:95:06:37:
59:de:11:38:11:af:10:02:d6:92:51:62:63:5e:48:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:FD:EE:2D:21:F0:CF:97:49:4A:2B:B6:BF:E9:53:6B:75:BD:F4
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:ad:d5:4f:48:d9:cb:75:e4:e5:4e:a8:a0:5d:98:5e:a1:
9d:97:6d:77:17:a8:66:be:f0:4e:26:09:24:45:8a:be:26:31:
7b:f7:54:10:b8:7d:28:ab:44:7f:66:16:70:5c:2f:09:0f:5f:
ce:b2:28:c9:01:5f:85:f9:7c:c0:69:55:fe:3e:32:48:a9:d1:
c0:42:05:57:bf:41:25:d0:ec:cd:8e:cc:14:b2:de:f6:1b:57:
e0:0c:c6:35:92:e3:cd:b7:1d:c0:d3:09:39:aa:e9:ec:42:9d:
c7:1f:2f:67:9f:01:c4:aa:76:a4:02:42:46:81:c4:c7:ea:c8:
46:f1:b2:5c:eb:a5:5d:c3:22:eb:2c:1e:fc:38:f5:c2:3a:6d:
b7:9a:12:c0:e9:da:a7:3b:97:23:d0:9d:fe:06:d9:50:3c:4f:
3d:29:01:4d:45:fd:61:40:dc:97:77:7b:b5:82:02:2b:b1:4b:
d0:72:56:75:2b:9b:23:6c:3a:a6:f4:5e:74:07:05:ef:a0:a9:
04:33:6f:9f:61:4d:b8:2f:65:6f:3d:c7:db:4a:2d:d1:3c:b4:
2d:b5:c2:51:20:11:69:bb:2d:b7:35:0c:1b:f9:19:96:ee:d4:
af:e5:07:b3:a0:08:86:71:e7:bd:a8:77:e8:40:d3:7c:0c:a6:
23:4d:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:21:03 2026 by rpki-client