Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: /d35PBXBUiwl5iepAXIbDADx5CYxWh6iqW1tjm/2v9g=
Subject key identifier: 66:D4:49:CA:D5:C7:B6:8E:CA:B3:C9:46:94:25:F5:92:15:CF:BF:A4
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019F91DAAB1FD3F8E77449563E5907012846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 1832
Signing time: Fri 24 Jul 2026 02:00:54 +0000
Manifest this update: Fri 24 Jul 2026 02:00:54 +0000
Manifest next update: Sat 25 Jul 2026 02:00:54 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: zk/wCtbwHviUZy9W7lmM2QYpJpCieCvIAZox7fxwab8=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ab:1f:d3:f8:e7:74:49:56:3e:59:07:01:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jul 24 02:00:54 2026 GMT
Not After : Jul 25 02:00:54 2026 GMT
Subject: CN=66d449cad5c7b68ecab3c9469425f59215cfbfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:19:8a:df:23:92:9b:2d:54:73:14:6e:87:
e6:00:49:ca:5c:e8:85:7d:e6:c9:bd:94:94:94:9a:
e5:12:60:5d:ea:a0:c1:f9:cf:38:c0:3d:a2:37:58:
25:0c:aa:6e:06:1d:2e:30:25:2c:fa:5f:50:e8:f8:
59:8b:41:22:e3:e9:67:b7:ac:a6:e4:45:da:39:32:
3a:e4:c4:10:19:64:e4:29:95:ce:42:a1:21:da:f8:
73:a4:b2:c0:84:db:71:36:e3:58:b1:9b:d3:af:41:
d7:7c:9f:f4:f1:9b:34:d1:e8:d4:d8:c5:05:6c:63:
60:7e:b4:f2:bc:2c:98:40:3e:1e:94:73:0e:24:4e:
77:5d:8b:c5:f6:0e:22:48:be:ff:cc:ac:ef:10:c6:
c0:72:f3:0e:ab:2d:c9:d8:56:6f:dc:b6:ad:f7:1c:
ec:db:50:72:e0:24:d0:3d:01:2a:26:a3:8b:82:a3:
c7:e0:95:aa:a1:be:c1:1e:7f:38:a7:54:02:2d:5b:
4e:9d:89:ac:5d:73:4a:8f:71:9e:a8:ca:8c:2f:ee:
02:a3:aa:81:eb:bb:3c:3f:91:0f:c8:68:c9:ac:7a:
a1:7f:b7:b4:8e:9f:c7:25:50:ea:eb:23:20:09:71:
83:73:50:5e:45:25:2b:2b:9d:d5:85:9c:2e:36:b4:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:49:CA:D5:C7:B6:8E:CA:B3:C9:46:94:25:F5:92:15:CF:BF:A4
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:73:5e:88:0c:85:a9:da:64:fd:ce:57:73:6c:4f:ac:d3:80:
6f:49:b1:2a:3b:f6:fe:c6:4a:8c:22:d6:e6:80:bf:87:25:34:
f1:70:96:fa:e1:93:3c:aa:de:20:c7:68:86:f4:f2:77:8b:57:
3a:5c:27:bd:1e:3a:37:02:a8:49:d6:69:cc:f6:76:c7:02:15:
2e:40:58:77:5c:bd:f4:ca:33:f5:f3:b2:5d:4e:5b:00:7a:ec:
53:53:0b:c4:97:e6:42:c7:5f:fc:8e:76:93:41:ad:7d:42:b4:
c5:f6:34:05:3a:ab:33:4b:1f:0f:c2:41:78:1d:0b:c2:0e:29:
77:31:df:23:32:b0:7f:a2:14:d6:9a:8b:bf:db:7e:a9:26:ba:
58:21:1c:0a:35:fa:f4:b1:b9:86:45:1b:36:32:89:f7:25:e7:
b9:73:06:6a:b9:fc:32:62:6e:2d:43:cf:79:8e:47:40:a2:23:
74:7e:df:59:6f:d2:ba:d5:0d:11:cb:4c:0f:ec:07:0f:1d:56:
06:d6:93:a8:b3:bc:1f:d1:fa:dc:2e:5a:96:5f:0d:f6:9e:ce:
81:40:d5:64:fc:22:fe:93:14:3f:e5:fe:78:a6:b6:bf:fb:7a:
be:16:83:fc:25:9d:f6:22:12:5a:8a:a0:f4:80:b2:3a:6e:16:
38:37:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:27 2026 by rpki-client