Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: Cej9FIhMV7L/KVEtK/F0w2rRqpxOzChJmnMZkt80a/Q=
Subject key identifier: AC:79:15:BE:97:01:36:26:A5:27:D0:BA:CD:D3:8A:55:CF:5A:1C:55
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 01A177DE9DCF12CCD510A987CF593930340A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0C64
Signing time: Mon 26 Oct 2026 11:00:40 +0000
Manifest this update: Mon 26 Oct 2026 11:00:40 +0000
Manifest next update: Tue 27 Oct 2026 11:00:40 +0000
Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
2: C8cw5nbghQi4OUuGqLlmhBWbh3s.roa (hash: ukinZ9+XO0kbm22VodGuo/P5hn91OEClJ3feFpq9ZTY=)
3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: 4Rs/8MwC2gDqFxk72KV3gZHjnadnsiESdqwnrbH6bIY=)
4: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
5: WRpOfTJPCccC42CV7YRGE6ZB4S8.roa (hash: aa584vPwRk359UwenwBllw9kXmJPCVxnfFb7Rujx0kg=)
6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:9d:cf:12:cc:d5:10:a9:87:cf:59:39:30:34:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Oct 26 11:00:40 2026 GMT
Not After : Oct 27 11:00:40 2026 GMT
Subject: CN=ac7915be97013626a527d0bacdd38a55cf5a1c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:9c:49:db:f6:94:db:d9:55:89:76:e2:8b:
5b:db:c4:73:46:6a:42:c9:19:dd:ef:12:93:b6:34:
7d:38:09:2f:1f:50:3c:63:38:91:d8:21:87:f1:e1:
25:81:c4:16:4c:f8:33:c1:c0:e4:bd:31:00:4d:d6:
0f:58:77:9f:ca:5a:bd:74:17:49:57:9b:3a:4b:a0:
8b:56:e7:2d:3c:ff:79:41:8d:c4:83:90:b8:6e:c3:
1d:4e:7e:bd:1b:94:b9:c2:8c:f1:31:f2:38:59:12:
bf:72:a4:be:7e:a2:fe:9e:ae:b2:2c:af:25:e6:47:
c8:36:d5:54:c8:bf:d0:e0:0a:08:d9:68:9f:e7:18:
65:7a:46:fc:c7:ad:1a:e7:59:77:25:53:42:1a:c2:
db:b5:5f:79:58:1f:d8:a0:cc:7b:3e:88:10:b3:18:
2e:70:df:ec:00:c6:78:8a:1b:8d:7c:3c:77:0f:66:
10:f9:f3:8e:5a:d0:71:7e:55:5d:00:62:0b:fe:68:
b4:ad:96:1b:09:c0:97:bc:81:8e:35:13:57:da:80:
a3:90:9a:6e:d2:ea:b9:00:3b:08:dc:94:6c:a7:51:
ad:ba:53:80:e8:67:a7:7b:60:9b:c4:9f:8e:18:b9:
82:a0:0d:11:c2:ce:22:f6:98:38:f1:fb:08:81:8d:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:79:15:BE:97:01:36:26:A5:27:D0:BA:CD:D3:8A:55:CF:5A:1C:55
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:13:63:a8:b5:0c:50:21:76:8f:eb:64:19:4c:68:ff:c6:19:
a9:cb:25:11:3e:76:93:0e:f6:be:ab:c0:9f:31:0e:83:50:d4:
65:f3:53:99:94:8f:55:24:cd:a4:9b:ed:1f:d8:98:fd:83:7a:
b8:b2:9c:01:16:a3:b5:88:c9:42:c6:79:6f:f9:7c:c0:da:72:
77:4e:42:fe:c5:fb:09:73:1f:7e:de:d7:bb:b0:71:0c:13:3b:
69:2e:65:fb:25:5c:74:33:29:68:f5:53:61:5e:a1:36:c0:09:
67:76:39:55:6d:8b:6b:08:4a:ea:56:17:4f:c6:c5:b1:f5:05:
a7:da:c2:40:23:71:09:1d:fb:ad:d7:84:9d:cd:4a:12:fe:9c:
4f:29:26:10:b7:f4:0c:c6:65:1c:20:4d:63:21:20:20:d0:de:
a7:4e:df:3b:b0:04:f0:9d:19:1b:53:9e:e1:21:93:de:de:2b:
ca:cd:6a:e6:bc:16:82:cd:b3:2c:61:ad:0d:bd:e3:86:9c:86:
c1:54:44:a1:6b:2e:2b:2a:78:cf:74:ea:b9:27:13:25:5e:79:
9e:ea:94:83:7d:2f:39:81:37:04:43:08:0b:2e:0d:aa:cc:3a:
c2:fe:a1:61:47:76:14:a4:08:aa:e0:1e:bf:42:6f:ec:ca:5d:
0d:0d:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:03:53 2026 by rpki-client