Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: WPkZ676/2yxPFS7VRuqOEBRF0JWspKxt4Qvk5znGfB0=
Subject key identifier: CA:43:0E:8D:EA:E0:2B:47:7C:9F:12:98:ED:DE:F5:B0:9D:B0:D1:21
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 019DD019FCDC8A3BF4C6EE5A6B3C5BB9AF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0A7E
Signing time: Mon 27 Apr 2026 18:00:56 +0000
Manifest this update: Mon 27 Apr 2026 18:00:56 +0000
Manifest next update: Tue 28 Apr 2026 18:00:56 +0000
Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
2: FfR87_mXj0CIVmHYTnyUObXrTyI.roa (hash: p3ixpnoniD5wmyp+DsfoQYYTf3OUtsn8VxkoKytvyOM=)
3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: RzlE4LQNif2sZK33bsXkk/L6M93iX0UN7sfmLIGeit8=)
4: RSPqJer2GxHPRRgn7mg4dhkHOBw.roa (hash: 7i2L3D7sVlNeXVt8GqQE+rm6gyBVSmDTLbXKjTKH2nY=)
5: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:fc:dc:8a:3b:f4:c6:ee:5a:6b:3c:5b:b9:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Apr 27 18:00:56 2026 GMT
Not After : Apr 28 18:00:56 2026 GMT
Subject: CN=ca430e8deae02b477c9f1298eddef5b09db0d121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:25:d1:53:4b:65:8c:3e:41:55:66:a5:ea:
c6:7a:15:44:95:8a:c8:3e:7c:59:8b:38:57:4e:39:
53:e2:67:dc:16:7c:ab:8e:e9:fc:84:32:e5:1e:06:
a7:1d:8c:b1:5c:4d:6f:0b:69:1f:30:61:ea:3e:b8:
8a:55:5c:87:10:1a:88:c8:da:26:f2:4a:5f:ed:24:
a5:75:c5:95:22:74:71:50:8e:9c:c9:5b:e3:75:db:
23:2d:47:89:65:a6:db:5d:e1:8f:cf:22:6f:14:55:
aa:7e:f4:1b:b5:3d:e8:1a:16:96:09:8f:9d:d6:bb:
71:af:91:e7:23:f3:29:d6:a6:70:01:31:dd:78:e6:
04:3a:39:42:55:ae:8b:66:c0:cd:4c:99:c5:66:18:
63:86:60:c7:9c:78:3a:3e:5a:31:63:1d:39:69:26:
6b:8f:bb:b3:66:d0:e8:7d:5b:f0:f2:7a:f4:06:4e:
db:76:db:04:e8:c7:ed:ed:bd:2d:67:9e:54:37:51:
0b:27:93:58:5b:72:71:18:56:02:5a:9d:40:e1:47:
82:1d:25:53:1e:21:0c:a8:e6:85:27:48:4f:a2:6c:
20:6c:fd:8c:30:f7:f0:c0:f8:eb:e6:aa:66:b4:0b:
e8:52:63:e0:de:ee:b9:81:b5:bc:51:5c:32:82:53:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:0E:8D:EA:E0:2B:47:7C:9F:12:98:ED:DE:F5:B0:9D:B0:D1:21
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f4:78:23:30:ad:2d:ee:fc:65:1e:b2:aa:fa:95:d2:a2:aa:
ae:76:e9:4b:6e:2b:83:ea:c2:8b:85:7e:ac:7e:55:32:03:08:
14:e1:3f:c1:c6:f1:cb:e6:28:30:bc:d7:a8:89:df:23:51:b3:
fd:64:8f:c3:6e:ef:29:21:aa:5d:90:1f:1b:48:16:4f:6d:99:
06:9c:2f:ee:19:6b:af:6b:50:ab:7c:f3:f9:ad:f5:55:b9:9d:
56:7c:d8:0d:dc:3a:e8:61:dd:5f:bc:35:8b:a5:0e:19:91:aa:
cc:13:e8:e9:39:18:d2:82:4c:cd:94:8f:9a:37:a9:8c:fe:19:
2e:8e:71:94:65:1f:95:d3:76:50:2b:29:1d:f7:ea:c3:22:9c:
fc:54:39:12:da:a0:79:3a:10:5b:46:e0:fb:b0:a6:b0:95:d8:
23:18:72:e7:e0:06:50:60:46:0c:1b:1d:01:92:80:2a:da:33:
2e:0d:c6:8b:b9:47:c4:83:45:c2:03:a2:8e:39:00:d5:36:8b:
66:fd:fb:17:85:a3:d5:e0:28:8d:bc:91:3b:bf:1b:29:ec:cf:
b7:38:f2:ce:d2:17:ce:0f:38:82:32:ac:a5:ee:92:ec:2c:2b:
34:f3:7b:ef:fb:91:c8:8d:c6:7c:7d:41:c0:4e:73:5c:bb:20:
98:e6:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:56 2026 by rpki-client