Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: mSzPBBJZRZPIotpVe9Skr/cEfrLdjP33+3vqO0CD1gw=
Subject key identifier: 5C:98:EA:D5:A9:1A:D1:DE:65:B0:AF:D8:A9:2D:B9:81:3A:0D:D0:C2
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 019D382E7991EB556422E8958AC5A49E4810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 029A
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: 4cR8wwbX9E2v1WrkETxIwVxyDFWblMYPq2bki8lu0es=)
2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=)
3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:79:91:eb:55:64:22:e8:95:8a:c5:a4:9e:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=5c98ead5a91ad1de65b0afd8a92db9813a0dd0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:0e:8d:cc:44:ae:c9:9c:87:45:ce:15:24:
f1:f6:d4:7b:c6:09:e9:5f:e5:2d:1d:d7:b5:13:ff:
c5:ae:6a:c1:92:6d:36:d5:6a:1e:17:12:fa:11:9e:
e3:39:c6:c8:81:ed:90:65:3c:3f:15:8d:47:a7:20:
5f:23:26:32:d8:d0:65:7d:15:52:12:0b:8e:e1:fd:
fb:eb:5f:e5:e7:4d:8d:40:93:bb:b6:d3:cf:0d:a2:
45:76:f6:a3:42:b6:ae:18:c9:93:cb:77:aa:4d:b6:
97:04:4c:00:3e:93:b4:45:a1:19:85:74:a0:83:3a:
86:d9:21:3f:90:39:9a:a8:2b:79:6e:3d:85:12:72:
d9:1e:bc:c7:24:fc:47:9a:bf:86:d6:e7:58:a6:eb:
e3:a1:79:30:87:05:d0:f6:e6:26:a8:6c:be:e4:37:
4e:87:98:e2:50:a5:97:c6:ef:9d:f4:2e:aa:96:47:
13:db:14:b6:51:1d:60:2f:3a:62:62:73:97:a1:8c:
52:e0:4a:38:3b:14:a2:cd:b0:8a:b0:08:12:bb:34:
17:fd:20:b7:2a:87:f6:e4:df:d5:af:04:18:9b:11:
7c:64:86:53:4f:af:a8:1d:da:4f:62:1e:d2:12:e8:
6d:6e:a5:9b:d9:40:2b:c1:07:a4:aa:c6:aa:7d:09:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:98:EA:D5:A9:1A:D1:DE:65:B0:AF:D8:A9:2D:B9:81:3A:0D:D0:C2
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e3:d0:2f:a9:10:78:19:ff:e7:d5:75:72:a3:c6:c3:3d:49:
81:5d:28:91:1f:b2:76:a5:b9:0e:38:9a:39:d5:ea:b7:b7:1a:
f5:27:9b:55:7a:69:ab:16:23:3e:b1:2b:08:61:f1:ac:79:2a:
1a:1d:1c:20:12:4e:56:38:70:b1:b3:01:62:fa:72:59:88:52:
69:7f:49:fb:a7:03:bc:be:0a:12:d4:d1:f4:c8:69:ce:bb:d9:
ec:53:41:7e:d6:ce:96:55:5b:8e:a1:cc:0a:69:f9:fe:19:3c:
e3:eb:8e:4c:f6:96:b1:b7:f7:3d:f7:d2:7d:ea:0a:96:3a:d7:
e3:d0:23:0b:c8:4a:8c:99:bc:3b:1a:10:25:0a:87:ae:7e:3f:
22:fc:98:97:1d:29:2c:ac:19:59:11:c7:a2:ec:3f:64:db:17:
63:1c:14:d0:7d:b3:79:e4:64:ab:a7:f3:ba:bd:71:e2:63:bd:
a9:c7:45:0a:ff:34:30:71:b4:7a:b0:a5:45:ae:b8:3e:b8:59:
70:b9:c4:f4:c1:e3:44:b3:40:ad:ac:2d:ee:77:44:67:42:3f:
27:da:f5:d0:4b:5f:d8:a5:19:4c:f3:98:a6:6b:ef:d7:0a:34:
d4:c8:9f:3f:ce:01:4a:ea:33:25:4f:01:bf:cf:3c:6e:d7:e9:
f4:36:5b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LnmR61VkIuiVisWknkgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz
ZDI0MDQwHhcNMjYwMzI5MDYwMTAzWhcNMjYwMzMwMDYwMTAzWjAzMTEwLwYDVQQD
Eyg1Yzk4ZWFkNWE5MWFkMWRlNjViMGFmZDhhOTJkYjk4MTNhMGRkMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA140OjcxErsmch0XOFSTx9tR7xgnp
X+UtHde1E//FrmrBkm021WoeFxL6EZ7jOcbIge2QZTw/FY1HpyBfIyYy2NBlfRVS
EguO4f3761/l502NQJO7ttPPDaJFdvajQrauGMmTy3eqTbaXBEwAPpO0RaEZhXSg
gzqG2SE/kDmaqCt5bj2FEnLZHrzHJPxHmr+G1udYpuvjoXkwhwXQ9uYmqGy+5DdO
h5jiUKWXxu+d9C6qlkcT2xS2UR1gLzpiYnOXoYxS4Eo4OxSizbCKsAgSuzQX/SC3
Kof25N/VrwQYmxF8ZIZTT6+oHdpPYh7SEuhtbqWb2UArwQekqsaqfQkHqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyY6tWpGtHeZbCv2KktuYE6DdDCMB8GA1UdIwQY
MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt
MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi
LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfePQL6kQ
eBn/59V1cqPGwz1JgV0okR+ydqW5DjiaOdXqt7ca9SebVXppqxYjPrErCGHxrHkq
Gh0cIBJOVjhwsbMBYvpyWYhSaX9J+6cDvL4KEtTR9MhpzrvZ7FNBftbOllVbjqHM
Cmn5/hk84+uOTPaWsbf3PffSfeoKljrX49AjC8hKjJm8OxoQJQqHrn4/IvyYlx0p
LKwZWRHHouw/ZNsXYxwU0H2zeeRkq6fzur1x4mO9qcdFCv80MHG0erClRa64PrhZ
cLnE9MHjRLNArawt7ndEZ0I/J9r10Etf2KUZTPOYpmvv1wo01MifP84BSuozJU8B
v888btfp9DZbRg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:43 2026 by rpki-client