Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: ktRoUJQQAEKn/ktBWrOk7AszJWtb6D86E0j7cLWtsDQ=
Subject key identifier: 09:37:6C:95:7C:11:9A:56:AC:2F:20:A1:7F:44:3D:AE:59:8D:7F:7B
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019E91017F880BAD6D450CE46C1AE77EE89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 17AD
Signing time: Thu 04 Jun 2026 05:00:54 +0000
Manifest this update: Thu 04 Jun 2026 05:00:54 +0000
Manifest next update: Fri 05 Jun 2026 05:00:54 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: oR3+KqlXMgwOGlQztUpjWfp/09xtvEq2dEXTRKycU3k=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:01:7f:88:0b:ad:6d:45:0c:e4:6c:1a:e7:7e:e8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jun 4 05:00:54 2026 GMT
Not After : Jun 5 05:00:54 2026 GMT
Subject: CN=09376c957c119a56ac2f20a17f443dae598d7f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:7d:dc:99:65:eb:ee:fa:3e:77:52:0a:3f:
ff:32:ba:35:27:9c:7b:9c:22:f4:8a:7a:49:2e:af:
c7:8b:94:f1:0f:6a:f1:c6:83:b2:e5:a5:fa:2e:c1:
31:5b:5a:c3:02:20:92:3a:d0:c4:ee:13:8f:31:12:
c4:05:c6:79:d6:a0:9c:36:f8:95:b0:07:cb:b9:b9:
32:5a:2a:91:fa:26:e4:71:b9:fa:c4:f8:ee:22:dd:
b8:1a:05:09:59:fd:25:1a:4f:08:eb:21:f7:63:30:
10:3d:2a:51:3e:c5:c0:ec:11:d9:07:90:29:5c:54:
f8:46:c9:7c:d6:23:a8:eb:91:00:8a:e4:17:01:f7:
73:b0:96:b4:b4:bf:79:35:bf:3b:4d:80:31:0b:0a:
85:48:1a:9b:d9:0a:8a:31:df:e8:34:2d:76:ff:b4:
98:7d:ea:81:19:51:73:bc:3f:f7:1c:f0:c7:70:20:
cc:4b:fb:4b:60:5f:20:04:95:82:be:7d:a1:3e:80:
c2:a2:cb:d6:b8:6e:65:86:51:67:79:67:ea:8a:98:
2a:ed:45:7d:80:3f:8b:eb:f9:f0:92:c9:6f:44:0a:
8f:56:73:ac:be:d0:e0:ad:ab:ee:06:9b:42:d2:bc:
b2:d3:07:97:15:c6:eb:18:ce:8b:84:72:61:27:81:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:6C:95:7C:11:9A:56:AC:2F:20:A1:7F:44:3D:AE:59:8D:7F:7B
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:23:6f:db:d1:5c:45:fe:91:bc:c0:da:c2:f8:81:be:1b:
51:2f:7e:4a:e7:23:fe:c4:f1:e0:72:54:71:a2:06:b1:1d:ee:
dc:a4:27:d5:a6:b2:d8:00:3e:7b:4c:0d:75:d2:f3:ab:69:40:
00:8b:21:be:74:80:05:ff:d9:7f:94:4d:f6:37:47:26:d9:da:
97:09:10:3f:ae:12:da:98:52:df:18:91:2c:32:93:e7:b1:6a:
d6:13:ba:30:22:37:c7:f4:b0:fa:e6:e6:47:3c:53:ab:f2:75:
b4:c5:53:aa:49:33:cf:87:e5:06:34:d9:89:39:a1:3e:bd:09:
e4:b8:4e:29:19:54:13:74:62:9b:1b:41:6b:a6:61:b3:0f:e5:
11:bb:89:80:da:59:db:77:cc:12:a0:a0:ff:a8:45:4d:f5:2c:
0e:c1:4e:21:f4:2f:67:83:1b:88:dd:2a:46:52:6c:96:2a:71:
4c:24:02:f0:e9:d3:be:6e:8b:8e:34:fc:cd:3b:06:32:63:fb:
d5:e0:18:76:c1:43:27:f0:37:3c:e2:b0:db:6d:6b:f8:0d:06:
f1:65:e5:5c:d8:51:d7:7d:2d:fe:1a:55:9b:43:3c:21:3a:de:
ae:a8:21:63:a2:a7:db:15:ae:7e:70:b3:ca:f0:73:fe:7e:bb:
55:8c:2a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:00:49 2026 by rpki-client