Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: al8w/5ib7sgXp8UWk3DMm0Cyjw5ndnUg+ixlrZzKL9Q=
Subject key identifier: FB:76:98:50:CA:EE:E9:D7:D5:BA:DE:58:6F:F9:3A:85:05:4B:CF:B0
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 01A08FB2F0879B657313AFD3C55DD27061F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 0455
Signing time: Fri 11 Sep 2026 09:01:03 +0000
Manifest this update: Fri 11 Sep 2026 09:01:03 +0000
Manifest next update: Sat 12 Sep 2026 09:01:03 +0000
Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: weUwuRavyFrGLipn1py08vj/8qBfEm+zskR4VMQPWMk=)
2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=)
3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:b2:f0:87:9b:65:73:13:af:d3:c5:5d:d2:70:61:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Sep 11 09:01:03 2026 GMT
Not After : Sep 12 09:01:03 2026 GMT
Subject: CN=fb769850caeee9d7d5bade586ff93a85054bcfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9b:4b:ed:bd:db:21:8c:5d:2b:f2:44:9b:fc:
34:a7:28:45:75:39:8a:cf:6b:cc:77:ba:47:49:58:
40:c4:15:26:c7:9f:28:bf:7b:73:e3:97:09:da:39:
17:be:c2:0d:0f:39:3a:b2:a5:fd:3e:80:30:79:85:
0c:52:b4:0a:82:27:85:d8:f4:43:35:c2:1e:57:e5:
c7:85:a5:30:d5:81:7b:06:bc:1b:71:f6:f0:a4:b7:
84:49:b3:d8:52:39:d8:53:ef:e3:14:ee:5e:a3:c5:
fc:5c:45:a3:95:9a:35:45:bd:19:d9:e1:e6:2b:4e:
c3:24:46:2e:39:fe:21:e6:7f:8d:ce:40:8a:54:99:
05:cf:1a:10:db:b4:d7:f9:26:02:8e:6c:d5:ab:01:
cb:20:d2:73:a7:3a:b7:96:19:d4:98:79:fa:22:1a:
7a:f7:1e:19:06:f1:24:30:ed:b6:89:c6:e0:fc:60:
4f:53:a5:72:1d:2a:e6:23:bc:76:09:ca:c8:57:6e:
11:e0:ad:78:fc:93:8a:e5:d8:bc:cd:98:a7:4b:54:
01:0a:8b:b9:4b:0f:8b:69:fe:30:6d:73:e7:85:a8:
71:28:c0:5a:52:18:95:b7:0e:f2:be:29:32:33:5e:
87:61:15:bf:fa:0b:4b:2d:6e:b8:73:c0:87:6a:00:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:98:50:CA:EE:E9:D7:D5:BA:DE:58:6F:F9:3A:85:05:4B:CF:B0
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:52:56:a0:64:76:79:a8:65:d6:18:00:e3:38:88:d0:e5:e1:
58:bd:e8:47:89:93:f5:6c:8e:f9:a4:3b:a1:a2:98:f9:d8:1f:
f7:2a:4d:13:3a:e5:da:39:a8:1d:f7:b5:76:35:96:4a:df:47:
9c:5a:83:21:5a:7b:8e:37:22:ae:64:b7:7a:85:4a:0b:5a:0c:
9e:d0:ac:9d:0a:4e:c8:76:66:64:ff:99:95:31:cc:40:3c:d6:
4d:d7:96:d7:fa:b8:da:f8:b4:de:3b:63:4d:18:47:24:23:65:
43:30:ac:0e:d9:96:a4:5b:97:dc:53:38:50:8b:70:83:11:a2:
08:0b:c2:85:2e:d1:e5:bc:30:3a:4e:e7:4a:38:68:41:85:a2:
71:24:e2:19:3a:cc:ea:5f:9d:1e:26:05:90:4a:8b:83:b8:27:
7a:c4:ff:f7:3d:06:02:46:79:be:6d:2b:0e:b5:ea:5d:4d:36:
17:fc:e7:e3:49:b1:0d:cb:44:31:28:26:c6:42:44:67:15:80:
05:1b:53:03:55:f2:f2:28:d7:f5:d0:a5:16:a9:37:88:73:dd:
79:fb:b9:36:2d:91:9f:1f:89:84:4a:0e:dd:7a:f7:23:94:ac:
01:a9:d1:5e:86:76:1a:84:ed:18:38:c2:08:2e:6d:1e:cd:67:
f5:dc:63:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPsvCHm2VzE6/TxV3ScGH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz
ZDI0MDQwHhcNMjYwOTExMDkwMTAzWhcNMjYwOTEyMDkwMTAzWjAzMTEwLwYDVQQD
EyhmYjc2OTg1MGNhZWVlOWQ3ZDViYWRlNTg2ZmY5M2E4NTA1NGJjZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZtL7b3bIYxdK/JEm/w0pyhFdTmK
z2vMd7pHSVhAxBUmx58ov3tz45cJ2jkXvsINDzk6sqX9PoAweYUMUrQKgieF2PRD
NcIeV+XHhaUw1YF7BrwbcfbwpLeESbPYUjnYU+/jFO5eo8X8XEWjlZo1Rb0Z2eHm
K07DJEYuOf4h5n+NzkCKVJkFzxoQ27TX+SYCjmzVqwHLINJzpzq3lhnUmHn6Ihp6
9x4ZBvEkMO22icbg/GBPU6VyHSrmI7x2CcrIV24R4K14/JOK5di8zZinS1QBCou5
Sw+Laf4wbXPnhahxKMBaUhiVtw7yvikyM16HYRW/+gtLLW64c8CHagC+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt2mFDK7unX1breWG/5OoUFS8+wMB8GA1UdIwQY
MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt
MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi
LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFJWoGR2
eahl1hgA4ziI0OXhWL3oR4mT9WyO+aQ7oaKY+dgf9ypNEzrl2jmoHfe1djWWSt9H
nFqDIVp7jjcirmS3eoVKC1oMntCsnQpOyHZmZP+ZlTHMQDzWTdeW1/q42vi03jtj
TRhHJCNlQzCsDtmWpFuX3FM4UItwgxGiCAvChS7R5bwwOk7nSjhoQYWicSTiGTrM
6l+dHiYFkEqLg7gnesT/9z0GAkZ5vm0rDrXqXU02F/zn40mxDctEMSgmxkJEZxWA
BRtTA1Xy8ijX9dClFqk3iHPdefu5Ni2Rnx+JhEoO3Xr3I5SsAanRXoZ2GoTtGDjC
CC5tHs1n9dxj0Q==
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:47:36 2026 by rpki-client