Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: GycR0qaU3k5U6ve3GRbMP0gJYhZh4UDGIovOOtnlHR8=
Subject key identifier: E3:BF:35:07:9F:46:E6:61:E1:07:09:7D:DD:0D:4A:1D:0B:8C:F2:1E
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 019EBC5999E72278D9C6C316693A7F543CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 0363
Signing time: Fri 12 Jun 2026 15:00:49 +0000
Manifest this update: Fri 12 Jun 2026 15:00:49 +0000
Manifest next update: Sat 13 Jun 2026 15:00:49 +0000
Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: mUsknWD2HiadYWR9VR0PJnHRr55mqI4/ahpS62YSoeE=)
2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=)
3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:59:99:e7:22:78:d9:c6:c3:16:69:3a:7f:54:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Jun 12 15:00:49 2026 GMT
Not After : Jun 13 15:00:49 2026 GMT
Subject: CN=e3bf35079f46e661e107097ddd0d4a1d0b8cf21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:73:13:a8:32:b0:08:8b:ac:dc:d9:90:7f:
91:5d:95:2c:45:4c:d2:26:bd:23:7f:50:bc:57:47:
7e:1b:ba:b2:56:70:ca:d0:43:33:e3:54:f2:74:23:
61:47:c4:9d:97:91:af:49:e4:26:76:6a:6c:30:53:
e5:06:c9:f3:71:fd:b1:0a:8e:be:a4:75:92:5c:e4:
96:7b:13:e6:93:fb:9c:b0:1b:43:e1:2b:8c:c5:7e:
ae:cf:49:ee:4d:26:04:a6:e5:4c:30:9a:78:d6:57:
07:c6:29:00:6f:d1:96:48:97:4d:66:d7:b5:31:bd:
b3:46:13:7e:5b:93:08:3e:93:3f:e9:9d:de:21:7e:
50:88:40:67:12:fc:fb:3a:cd:9e:3c:9f:25:5d:37:
53:55:2d:4f:9d:34:03:e2:30:49:f3:df:28:2f:cf:
24:ae:be:23:49:74:e1:4f:4f:56:29:e0:8d:bf:be:
ad:f3:85:31:99:9a:95:37:be:28:4a:46:95:b5:b6:
c2:28:61:6d:7a:92:90:7e:2d:d5:54:4c:13:48:27:
01:22:13:69:05:55:ee:14:1c:b0:7a:50:99:56:3b:
24:47:fb:84:3a:3a:8d:7e:22:bc:c2:4c:15:d7:1e:
00:07:36:c6:68:57:38:6b:90:e7:98:84:3e:a7:eb:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BF:35:07:9F:46:E6:61:E1:07:09:7D:DD:0D:4A:1D:0B:8C:F2:1E
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e6:d8:56:dd:84:c2:18:b4:61:64:ee:b3:2a:d4:80:e3:63:
db:1e:f7:b6:22:2a:6a:8c:07:b5:96:fd:2a:1d:62:df:93:10:
a9:7a:67:0d:71:52:96:1b:de:a7:49:6d:35:af:ba:1e:e4:f6:
64:e1:1c:32:57:12:2c:51:86:42:e3:44:0c:6a:13:45:cc:99:
8c:95:15:c5:2f:9d:c6:da:10:17:70:bc:51:f8:2b:d8:d6:a2:
57:e8:0d:fc:d7:87:55:03:ac:41:d7:1e:c2:3b:f4:5c:25:d0:
bb:8c:1c:cd:3f:21:b0:21:6e:54:76:27:c5:dc:91:47:89:5e:
1c:25:86:a2:4f:e5:d4:55:90:a7:c3:29:7c:f9:ac:e0:26:2d:
31:cd:aa:1b:96:a6:ec:d1:91:9d:57:9e:d2:a6:98:dc:7f:0a:
d9:c6:96:45:32:05:fd:c6:b1:d4:2d:d7:df:5c:48:d2:14:52:
c5:6b:8e:8a:70:08:f4:c5:68:ec:7f:f7:2c:94:3e:79:bf:66:
bb:a8:c1:92:d1:dc:21:03:b7:f4:33:a7:5d:be:4a:0b:b7:30:
55:2e:09:c9:5a:d8:14:6e:9a:6f:0e:00:21:15:46:74:37:50:
61:9e:07:fa:9f:a0:49:6d:35:8b:da:66:2d:49:6a:3e:de:85:
78:d3:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:16:28 2026 by rpki-client