Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
File: KXoNnIYU9TK96fRl3U93poEX6VY.mft (raw, json)
Hash identifier: jwxdhhvV3d5xFt5F+JPnHQhsp/BgToK+1j7bWpepRpM=
Subject key identifier: 7D:FE:BA:56:C1:A3:83:3E:A8:CE:83:F7:CD:C9:97:38:BB:6E:A0:3E
Authority key identifier: 29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
Certificate issuer: /CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Certificate serial: 019F36AA889D7CBDFC3B704CAAE208B239AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:02:53 +0000
Manifest this update: Mon 06 Jul 2026 09:02:53 +0000
Manifest next update: Tue 07 Jul 2026 09:02:53 +0000
Files and hashes: 1: KXoNnIYU9TK96fRl3U93poEX6VY.crl (hash: 9Q4GaC4y+AhdRtO/eJJEGbaoNMdTUAoTjIaYOL4DaKo=)
2: fmT6qGd_82DfL36JETvp_cYAJEA.roa (hash: +LPv3kGR0ahEJ11+PYzJHGAwvNRYkD0wo7DqeBKeWd0=)
3: hLMrHZeDr1exS-w5Q__NBh2TEMw.roa (hash: vbYv6I3D0Tp+aqvC92NpbtFK8cSesM/xfDG+wj8JE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:88:9d:7c:bd:fc:3b:70:4c:aa:e2:08:b2:39:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Validity
Not Before: Jul 6 09:02:53 2026 GMT
Not After : Jul 7 09:02:53 2026 GMT
Subject: CN=7dfeba56c1a3833ea8ce83f7cdc99738bb6ea03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:12:ab:12:5f:f3:ff:a2:ee:c8:f8:40:f1:
d3:36:95:1a:39:da:78:a9:20:ac:cf:7a:14:27:78:
7c:8f:2d:63:cc:bc:f1:f1:9f:e7:dc:91:9c:86:23:
17:82:1c:d6:f4:39:26:b1:b3:5d:e3:c2:82:71:8c:
42:2c:15:5c:a7:e6:65:a3:63:66:09:23:94:3e:38:
6c:42:bf:f3:bc:4b:04:00:85:34:af:70:d1:f0:b0:
71:dc:ee:04:97:a3:94:af:57:1a:31:20:46:6a:66:
6d:2d:62:e6:a6:1a:5c:7a:8b:45:a5:00:25:68:aa:
3b:7a:df:0c:c6:72:2f:a4:c8:e5:49:4b:6a:fd:e7:
96:02:2d:f2:ad:b9:74:22:05:39:ff:21:1f:11:ea:
21:fa:d9:53:c9:81:3f:5f:48:d3:b1:cd:e9:1d:f4:
0a:ce:1f:ab:07:40:0d:62:fb:3f:2e:5d:42:14:27:
07:90:81:60:4e:ec:88:89:ba:fd:b7:a6:66:62:04:
51:f2:d7:0f:87:5f:b8:06:02:33:e7:96:09:e4:29:
3e:53:c5:fc:bc:14:fe:8b:c1:7c:b3:4f:84:fb:72:
39:9c:c9:6a:da:ea:65:09:68:fc:29:d9:90:9b:80:
02:ae:b5:ba:b8:78:1b:a0:0b:35:7c:d5:ff:94:7f:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FE:BA:56:C1:A3:83:3E:A8:CE:83:F7:CD:C9:97:38:BB:6E:A0:3E
X509v3 Authority Key Identifier:
keyid:29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8c:c1:64:a7:4e:1f:01:b0:3a:28:ea:21:63:51:e9:93:04:
ea:4c:f0:e8:46:30:c3:bd:a1:14:4e:18:7e:89:97:d1:3c:0c:
d6:16:70:77:9e:d7:35:8d:0b:86:3c:2a:57:05:21:22:1f:83:
63:6b:5b:3c:fb:09:98:0a:66:b7:ea:38:9f:c6:3d:d1:40:e7:
97:e9:3c:f0:02:68:74:a5:34:f5:0c:f8:b5:d3:0d:d5:87:82:
ef:f6:82:79:52:30:53:ad:d7:15:cc:ca:19:22:6c:88:68:34:
89:a1:1d:44:5c:3a:44:45:a6:54:58:ac:69:5d:f2:6e:c3:93:
f1:67:38:60:74:32:86:85:20:65:fd:3e:f7:15:fd:f5:eb:33:
e2:9b:55:9b:43:44:2c:48:c3:c1:93:4d:a7:20:d1:34:1e:cb:
43:c8:4f:03:1e:ed:15:a4:57:3d:62:c1:d3:e2:36:5d:98:8c:
59:b5:e3:cd:e3:bc:73:de:37:fc:31:79:97:d8:a1:36:80:34:
5e:a3:8e:32:67:9b:e3:19:e2:84:be:13:62:7c:cb:bc:12:07:
f2:45:03:fd:dd:d8:68:8d:83:14:9d:f0:c8:fa:a5:1a:53:c6:
a6:2c:b6:0f:b7:67:6e:fc:dd:d1:35:42:ef:14:a6:c3:b0:2d:
cf:62:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:04:12 2026 by rpki-client