Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
File: KXoNnIYU9TK96fRl3U93poEX6VY.mft (raw, json)
Hash identifier: l7fghUoSCMG/qSrGV9xubie6cgiEvZdLFgZ1Aqw9ZPM=
Subject key identifier: 26:07:73:42:EA:C1:58:45:0F:2F:C0:08:C9:C8:FA:02:A5:0C:C8:BC
Authority key identifier: 29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
Certificate issuer: /CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Certificate serial: 01A02055601905CB1F8132002B0F0E577F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:00 +0000
Manifest this update: Thu 20 Aug 2026 18:01:00 +0000
Manifest next update: Fri 21 Aug 2026 18:01:00 +0000
Files and hashes: 1: KXoNnIYU9TK96fRl3U93poEX6VY.crl (hash: q1LAcBekwTINuQ/GZuWpLIQzYxGBbxXY83T30c9hwo4=)
2: fmT6qGd_82DfL36JETvp_cYAJEA.roa (hash: +LPv3kGR0ahEJ11+PYzJHGAwvNRYkD0wo7DqeBKeWd0=)
3: hLMrHZeDr1exS-w5Q__NBh2TEMw.roa (hash: vbYv6I3D0Tp+aqvC92NpbtFK8cSesM/xfDG+wj8JE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:60:19:05:cb:1f:81:32:00:2b:0f:0e:57:7f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Validity
Not Before: Aug 20 18:01:00 2026 GMT
Not After : Aug 21 18:01:00 2026 GMT
Subject: CN=26077342eac158450f2fc008c9c8fa02a50cc8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:84:d7:fa:aa:4b:db:20:c2:b0:9b:65:af:
1c:b3:a0:18:b1:dd:56:fa:2a:9a:28:b8:65:7f:ee:
0f:df:ac:34:07:17:e5:49:d5:8b:5c:7f:ef:71:88:
75:df:e2:1a:41:ed:75:b5:b6:20:12:54:b4:c0:d2:
43:75:2d:33:0d:f3:b8:85:61:5a:6b:e6:f4:b6:c1:
d7:ee:2a:48:03:7e:da:ac:f0:fe:e0:71:ed:44:c2:
7e:33:bc:d9:83:5f:c5:0a:33:4e:32:a2:35:83:b4:
ef:60:08:74:0e:fa:91:83:78:4f:89:bd:08:8d:e2:
64:2a:bf:ef:9c:b5:d4:db:27:17:c8:32:26:02:6a:
55:88:cb:97:76:56:e8:0c:ac:33:69:99:f2:e9:2e:
7a:2f:c3:01:2a:ac:9e:c3:b2:db:e3:02:f0:d1:7b:
28:8e:dc:fa:58:95:58:db:b2:cb:dc:63:5f:81:55:
10:8c:9a:fc:cf:5f:1f:c8:b1:b6:38:6d:df:a8:a0:
0e:f0:0d:c3:e4:ff:0d:bc:58:65:ed:80:b3:c5:9f:
de:12:0a:0d:49:8f:af:84:4b:c0:52:4f:84:34:7a:
98:64:94:f2:09:e5:5a:07:ee:a8:dd:66:01:43:94:
40:e9:a0:aa:72:19:be:03:f0:d0:a0:b1:0d:e3:f9:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:07:73:42:EA:C1:58:45:0F:2F:C0:08:C9:C8:FA:02:A5:0C:C8:BC
X509v3 Authority Key Identifier:
keyid:29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:73:00:32:e7:4c:36:9a:86:64:4f:76:d2:ff:78:86:93:41:
4b:a1:cf:c6:5c:f8:33:39:eb:08:7c:8e:39:cf:30:51:1b:01:
82:ee:4c:1c:99:42:a3:07:cb:2e:a5:8c:08:2c:bb:c1:60:fb:
6e:8e:f6:18:7e:2f:27:8a:5f:81:10:0d:a8:77:26:25:ce:a3:
cf:6c:bd:d4:82:22:21:9c:52:c6:a5:ce:fa:51:7b:49:3b:fa:
97:7e:36:ef:3f:37:43:09:37:7a:43:8e:32:5d:11:cc:48:8a:
4b:3b:35:b2:b6:7d:e0:60:88:99:88:1f:52:fc:37:72:3d:2b:
e4:29:ba:a6:ce:fb:68:7a:71:d7:2c:36:d4:71:b8:40:91:79:
db:aa:0a:e7:f6:18:8c:c5:89:1f:49:bd:a9:33:3f:2d:50:68:
92:95:eb:13:38:7d:25:99:41:e2:43:65:dd:c4:13:8b:2b:08:
e8:60:22:e1:ca:89:13:31:0a:4d:48:98:03:1b:fa:9b:96:ad:
65:46:27:a0:5b:82:2d:55:9d:c4:f7:e3:bb:48:8d:26:08:dc:
a1:b3:37:71:c0:53:5e:5d:43:33:09:f4:e2:19:62:3e:56:2b:
f3:52:75:c6:83:82:98:29:b9:49:49:b9:7e:76:9a:24:65:2e:
2f:ae:43:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:41 2026 by rpki-client