Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: oeA8uHeCzp7wxlzIx1a98/W+9Mo0MiYwfde4pTGoSa8=
Subject key identifier: F5:BA:94:A4:B2:99:AD:9C:9B:F1:5E:1D:50:E1:52:F9:BD:06:DD:F7
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019CBF966C05B961DFC08549DB51BCE39ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 16BC
Signing time: Thu 05 Mar 2026 20:00:32 +0000
Manifest this update: Thu 05 Mar 2026 20:00:32 +0000
Manifest next update: Fri 06 Mar 2026 20:00:32 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: Z60E0u2H0McG0mk4y2HIl/iQQQNs0V1d0xcWrzDQyi8=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:96:6c:05:b9:61:df:c0:85:49:db:51:bc:e3:9e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Mar 5 20:00:32 2026 GMT
Not After : Mar 6 20:00:32 2026 GMT
Subject: CN=f5ba94a4b299ad9c9bf15e1d50e152f9bd06ddf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:cf:1c:88:95:98:1b:b1:5b:58:93:78:ff:
f0:fd:ea:50:7e:36:c3:46:a1:96:6b:72:b8:04:0e:
b0:27:ef:55:57:a6:3e:6f:86:36:94:fd:fc:b3:c9:
3f:57:21:1c:b9:cd:e5:a9:a5:6b:54:f8:f3:d5:95:
af:9d:cb:cb:cd:58:8b:29:be:27:35:8a:88:a7:f7:
7b:18:c1:2e:2d:10:1e:9b:65:42:32:fb:b6:6e:ec:
34:f1:5b:10:8f:ec:e5:b3:06:69:1c:4c:78:60:4d:
4c:a4:1d:2d:4a:45:e5:e6:6f:52:53:94:c7:08:7c:
1b:0f:c2:d3:c6:30:8b:7c:15:25:11:0c:74:19:8a:
87:19:61:cb:bc:b6:95:05:06:92:aa:b7:ad:6d:0a:
4f:96:e4:f6:d6:4c:71:53:77:e4:7a:f6:4d:f3:a5:
08:16:5d:f9:61:c9:b8:a6:df:fa:61:53:f0:23:13:
15:21:fb:2d:92:13:01:38:f5:9d:a3:17:a4:b3:b4:
32:02:bd:74:43:38:7c:6d:85:75:19:c7:0b:2a:b0:
08:9b:90:eb:de:84:53:88:cc:6e:95:1b:a9:73:ee:
b1:fd:cc:96:73:c6:9d:48:fa:87:a4:87:8e:49:c3:
36:da:4e:e6:99:b9:5e:e4:48:e5:cc:b5:f2:7e:2f:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BA:94:A4:B2:99:AD:9C:9B:F1:5E:1D:50:E1:52:F9:BD:06:DD:F7
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:80:39:eb:9f:3d:a4:eb:10:68:42:ea:ab:07:57:16:65:cb:
ed:cc:97:98:f4:79:64:6c:63:66:70:48:7b:09:a8:48:84:1f:
67:bb:2a:81:e6:a1:45:eb:99:a4:6d:13:66:d7:de:24:c2:ef:
bc:96:fc:ac:4d:bd:25:8d:24:6a:63:20:ed:57:97:5c:4b:ab:
82:b6:1b:eb:89:78:3b:04:a2:2e:f2:9a:4b:7f:4b:9d:02:1d:
8a:a2:27:48:2b:4e:2e:a3:84:ec:4b:07:d3:33:14:dd:7b:ab:
7c:a3:1c:47:38:d1:7c:00:93:38:1c:69:7d:a2:7b:d0:b8:41:
a8:5b:6b:a7:f7:bb:e8:f4:1b:c0:75:b3:41:a9:f9:8f:26:d7:
92:ad:85:1f:70:bb:1a:5b:87:8c:74:1a:ea:f8:3d:e2:ed:36:
aa:a2:95:04:3b:fc:8a:2c:00:d4:ba:c0:98:6f:49:ba:03:c3:
ae:64:cf:8f:c7:84:fd:70:fb:40:96:24:13:17:16:62:b2:7c:
e6:7e:68:3d:96:ab:89:c4:59:83:49:83:27:6b:4b:04:27:b1:
bc:29:e4:9e:d7:0c:48:83:df:ca:19:72:e1:1f:96:63:02:a6:
71:63:2d:d2:89:b2:3b:72:cc:75:2c:23:d1:bb:79:5f:24:09:
2b:a7:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:20:21 2026 by rpki-client