Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: czRaV/qrIIturJdT2JL5WlGFN75IM66ANzMk1HNhZi4=
Subject key identifier: 1A:D1:48:05:D4:B4:D3:59:1A:6E:59:E2:B2:0B:B1:FA:FF:9A:4F:A0
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 01A08A551FE0DECE276DD58D82D4651DB7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0BE9
Signing time: Thu 10 Sep 2026 08:00:29 +0000
Manifest this update: Thu 10 Sep 2026 08:00:29 +0000
Manifest next update: Fri 11 Sep 2026 08:00:29 +0000
Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
2: C8cw5nbghQi4OUuGqLlmhBWbh3s.roa (hash: ukinZ9+XO0kbm22VodGuo/P5hn91OEClJ3feFpq9ZTY=)
3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: dMJSz8EgsaUVtsmm6Eo70M1UXI9UP3wBbXZ54cEcHhk=)
4: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
5: WRpOfTJPCccC42CV7YRGE6ZB4S8.roa (hash: aa584vPwRk359UwenwBllw9kXmJPCVxnfFb7Rujx0kg=)
6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:1f:e0:de:ce:27:6d:d5:8d:82:d4:65:1d:b7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Sep 10 08:00:29 2026 GMT
Not After : Sep 11 08:00:29 2026 GMT
Subject: CN=1ad14805d4b4d3591a6e59e2b20bb1faff9a4fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:d2:f3:09:57:3b:8d:7b:6c:da:fb:5d:5e:
be:99:cd:3a:63:5c:38:e8:bd:d7:57:e8:ae:b6:39:
0a:6e:35:49:76:5b:a4:cc:af:2b:89:5d:b8:9e:48:
72:ec:d9:cc:ca:05:9a:a6:0f:4c:f5:87:61:48:e6:
0e:c9:8e:1c:45:fa:c8:32:3a:4a:10:e5:12:6e:56:
c6:f6:a3:59:4a:f5:c6:2c:c3:6a:96:73:00:ae:ae:
77:7a:44:89:3f:01:6f:96:c6:9a:31:9f:42:60:63:
90:cf:00:57:5d:56:41:88:90:85:10:e3:fb:46:22:
82:b5:a7:34:5d:9f:cc:ef:3f:cc:97:d8:4c:ec:57:
dc:7f:5d:16:bc:23:11:91:b2:ec:46:5c:e9:b7:2c:
4d:c3:5d:b2:df:72:b8:ae:55:82:19:26:73:a5:93:
25:d3:cf:99:0c:f4:97:a4:6a:03:12:b9:48:12:0a:
97:7b:77:b9:b1:ed:2a:df:b5:85:3a:69:bf:7c:b2:
f2:18:e3:17:24:6a:5e:76:d0:62:3d:25:6a:40:b5:
ec:4f:1f:25:e0:67:6c:e0:5e:20:f1:7c:65:ff:b8:
ec:b1:cc:a8:d2:d8:88:1b:94:32:04:61:c0:c4:d9:
f4:97:38:9a:6e:bf:76:59:51:9d:53:22:e7:50:b0:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D1:48:05:D4:B4:D3:59:1A:6E:59:E2:B2:0B:B1:FA:FF:9A:4F:A0
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fe:e8:91:ec:69:d0:dc:c0:d6:5a:44:27:fc:bc:80:2f:e0:
8d:98:f3:06:2c:c3:59:78:77:76:77:4b:25:ef:46:d7:f2:1b:
4e:a5:c8:2b:1e:62:b1:80:f5:67:a3:58:6a:83:ea:e9:2e:f9:
72:be:8c:c0:9f:60:0f:66:29:8f:89:14:b0:1c:b1:8d:e1:f1:
ef:17:35:b5:ef:47:e9:16:c1:67:21:d3:fc:83:86:a7:fc:de:
cc:27:fe:79:d2:83:2f:b0:35:b4:de:a0:f1:29:7f:76:b0:b9:
a6:cb:d2:45:14:c5:82:71:90:02:9d:b1:22:3c:af:de:fa:7e:
77:80:d9:f0:4a:b8:7a:ad:19:9c:74:3b:d4:00:32:21:0d:e7:
d7:72:be:44:85:73:d9:1f:03:67:ae:88:f0:56:bd:9f:1e:8f:
bd:90:b0:ce:79:e7:73:4b:44:50:4f:e7:5c:65:77:c6:ae:41:
80:6a:ed:6f:d6:7d:a0:ec:5f:cb:3e:7c:f0:62:1f:ce:c5:83:
e9:9d:b5:2a:35:bf:87:ad:e7:0f:c9:ad:15:11:20:0a:19:61:
82:a7:79:28:9d:69:fc:83:78:85:4c:25:34:a6:6d:56:eb:33:
9d:e7:07:b2:3f:ee:5f:3e:50:e8:3f:24:df:af:5a:81:d0:e9:
ac:3c:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:28:32 2026 by rpki-client