Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: pEaAcU4vi2MjwD/q9q6ZXkLxU7+lnf1b4sVYA4WQWaI=
Subject key identifier: 1F:08:7F:5C:EC:65:02:50:E0:CE:66:FF:A1:EC:C7:A8:67:38:3D:9E
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01A0DA28549479E585AC9C4F63E9FF5FBA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 18DC
Signing time: Fri 25 Sep 2026 20:01:11 +0000
Manifest this update: Fri 25 Sep 2026 20:01:11 +0000
Manifest next update: Sat 26 Sep 2026 20:01:11 +0000
Files and hashes: 1: 2kkM-Y1oeDm04wY-B4Ml04duWlg.roa (hash: MnJVJ4NyKNUCeBGsbiD72vxTrQHy4p8bo+xWfr40jXY=)
2: 8iiZMHriRE_NQY6BUN56TO301wk.roa (hash: 8IgM/46WS34GJx+A7aRcZL/22xuZUdfmC4JGezJbIGo=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: VTfQ0pbwVeLGuCWX964/vwWbrugsyPuQps/k+vc8AYE=)
4: NPRTFimJGsBmacQOAQQPr9jae44.roa (hash: wYMwFG2bixNFHagAivVzR2PmUxqhFfwt/BNGFSbdkYM=)
5: OaCi7coDoqW_riGEhMlZBNecV8E.roa (hash: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8=)
6: c-719yS8qxXgAQfc5k5AVeBx00Y.roa (hash: YUllSSiOqr0+m8URR4HPwAVQ/Ac036ttga4eWG7Bio8=)
7: qeQwzeNuT9jDdOYxI4TWIN4Zo9k.roa (hash: PM8l8vqtrNKxFXFYvlOWXQYhkfaDDt1UoO4UWCG6wSU=)
8: u2ApTDuWn4HOYvbWn1xa_cni-dQ.roa (hash: Y3toE9g8ryMSPFUg9EX1w3rj5SHRcm5JoXPtk8CcbE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:54:94:79:e5:85:ac:9c:4f:63:e9:ff:5f:ba:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Sep 25 20:01:11 2026 GMT
Not After : Sep 26 20:01:11 2026 GMT
Subject: CN=1f087f5cec650250e0ce66ffa1ecc7a867383d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:ea:8e:65:4c:ef:10:fc:2c:f5:36:5b:8d:
1f:4e:03:76:00:d6:2a:53:42:03:ea:61:a1:12:3c:
5f:c3:e0:bf:02:6a:e2:ad:92:f2:72:3b:87:6b:d9:
52:ac:42:27:30:ed:f5:ae:48:39:90:3b:4a:ee:7e:
3d:44:5b:bb:8d:ad:01:dc:34:7f:b6:d4:a2:e2:b2:
1c:df:f0:55:67:40:05:68:27:71:d1:93:f2:47:09:
c5:6f:b7:66:02:81:40:46:7d:3e:d1:1d:fc:cf:0c:
58:a6:33:4c:ab:ba:f3:9c:d9:4b:f4:72:05:98:4e:
ed:1e:b2:db:1a:90:ef:f6:01:01:a3:c2:5b:a6:c1:
d1:ce:28:4f:22:5b:2d:18:e9:fc:36:a4:07:b1:73:
50:95:d6:c3:15:9e:c6:46:df:2d:61:41:05:4f:4c:
d6:cb:05:0d:d6:79:8b:ec:f1:77:37:c8:04:a2:37:
1c:77:04:0a:09:33:2b:51:b3:4d:ba:65:98:3a:ff:
ee:e3:0e:99:eb:43:2e:5a:24:7b:3b:e1:ff:b6:11:
86:a3:d4:de:16:de:e6:9d:81:91:78:ea:2c:1f:4e:
63:2d:b0:77:81:6a:40:33:5d:7a:d2:b7:1c:11:ac:
a9:06:04:d3:5d:9b:e8:d0:18:a5:59:7d:25:f2:44:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:08:7F:5C:EC:65:02:50:E0:CE:66:FF:A1:EC:C7:A8:67:38:3D:9E
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9d:17:38:ca:1a:9c:2a:8a:97:a3:dd:b1:35:5c:db:0e:e6:
d6:2e:13:57:b9:5e:93:b5:0d:6e:64:79:3b:98:0e:3b:af:94:
86:b9:f2:4b:2d:81:13:9f:01:46:97:34:e6:a3:fc:26:3c:1c:
57:81:4f:39:c4:c4:dc:44:82:a1:7b:91:ae:15:ed:23:d6:81:
ad:b6:8a:94:cf:8b:03:e2:13:47:c4:78:bd:48:1e:62:37:85:
53:73:df:10:ca:32:75:3a:1c:df:8f:58:cc:d5:f6:af:db:2e:
2a:5b:6e:60:59:3b:0c:9c:87:e2:81:f2:77:81:21:a4:c9:4f:
23:7e:a7:a7:75:15:a1:80:e3:5c:3f:26:6b:0c:65:31:3b:e4:
2a:b7:62:8f:56:61:6a:5d:97:ff:96:ca:15:40:77:b8:5d:7c:
16:eb:96:4a:98:d8:a7:28:17:c6:9d:fe:07:d5:65:c1:56:a6:
bf:a7:4a:f8:de:f8:52:b8:78:43:9d:12:0a:33:5d:f1:26:b5:
5d:e2:09:8c:dd:d7:aa:54:72:20:53:9b:0f:60:75:ea:43:7d:
1d:fe:ca:79:25:6d:61:7a:c7:e8:45:f4:0c:1e:a5:72:a1:de:
f7:85:e4:7c:7d:a3:48:9c:b1:55:87:2c:b8:d0:3d:fd:93:11:
a7:e8:b6:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKFSUeeWFrJxPY+n/X7prMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk
NGJjYTQwHhcNMjYwOTI1MjAwMTExWhcNMjYwOTI2MjAwMTExWjAzMTEwLwYDVQQD
EygxZjA4N2Y1Y2VjNjUwMjUwZTBjZTY2ZmZhMWVjYzdhODY3MzgzZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyPqjmVM7xD8LPU2W40fTgN2ANYq
U0ID6mGhEjxfw+C/AmrirZLycjuHa9lSrEInMO31rkg5kDtK7n49RFu7ja0B3DR/
ttSi4rIc3/BVZ0AFaCdx0ZPyRwnFb7dmAoFARn0+0R38zwxYpjNMq7rznNlL9HIF
mE7tHrLbGpDv9gEBo8JbpsHRzihPIlstGOn8NqQHsXNQldbDFZ7GRt8tYUEFT0zW
ywUN1nmL7PF3N8gEojccdwQKCTMrUbNNumWYOv/u4w6Z60MuWiR7O+H/thGGo9Te
Ft7mnYGReOosH05jLbB3gWpAM1160rccEaypBgTTXZvo0BilWX0l8kTZAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8If1zsZQJQ4M5m/6Hsx6hnOD2eMB8GA1UdIwQY
MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt
MGEwZjNlNzhhNDkzLzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz
LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ0XOMoa
nCqKl6PdsTVc2w7m1i4TV7lek7UNbmR5O5gOO6+UhrnySy2BE58BRpc05qP8Jjwc
V4FPOcTE3ESCoXuRrhXtI9aBrbaKlM+LA+ITR8R4vUgeYjeFU3PfEMoydToc349Y
zNX2r9suKltuYFk7DJyH4oHyd4EhpMlPI36np3UVoYDjXD8mawxlMTvkKrdij1Zh
al2X/5bKFUB3uF18FuuWSpjYpygXxp3+B9VlwVamv6dK+N74Urh4Q50SCjNd8Sa1
XeIJjN3XqlRyIFObD2B16kN9Hf7KeSVtYXrH6EX0DB6lcqHe94XkfH2jSJyxVYcs
uNA9/ZMRp+i25Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:32:38 2026 by rpki-client