Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: qdPvb0lYXcsQ/2qcWtYfbxVCE4x8fn0PUIjEC2kvgXI=
Subject key identifier: 3A:14:22:36:AE:92:B9:D7:C5:F4:22:8F:5B:7D:6E:80:80:4E:DB:CA
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 019D2816C3B37B781D682106AED2AB06B6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0A27
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
2: FfR87_mXj0CIVmHYTnyUObXrTyI.roa (hash: p3ixpnoniD5wmyp+DsfoQYYTf3OUtsn8VxkoKytvyOM=)
3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: KjlutAG1yBluwNHWXJk8weYE4FnGwWoYxIsGRbPy6RQ=)
4: RSPqJer2GxHPRRgn7mg4dhkHOBw.roa (hash: 7i2L3D7sVlNeXVt8GqQE+rm6gyBVSmDTLbXKjTKH2nY=)
5: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c3:b3:7b:78:1d:68:21:06:ae:d2:ab:06:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=3a142236ae92b9d7c5f4228f5b7d6e80804edbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:0f:76:01:ff:aa:03:4e:ad:b6:1e:19:06:
cb:ea:c7:45:32:a9:33:04:d2:a6:22:fc:5b:41:6b:
23:ff:99:2d:1c:0b:20:a1:18:e0:66:b9:d3:ef:eb:
e5:3b:df:ec:f9:3d:04:39:6e:3d:12:2a:d9:1e:eb:
9f:b5:a2:e5:ec:83:bb:59:c8:e5:87:4f:75:ea:38:
57:29:3c:c0:24:57:7c:35:34:80:f5:7d:ba:d6:02:
ac:0b:0e:4f:01:a4:9a:d8:0b:98:de:0a:fb:76:4d:
12:35:78:4f:bb:9f:3a:d8:1a:36:ec:08:0b:5e:83:
2e:78:c8:ca:62:57:a5:64:2c:d3:7e:1b:2c:ca:3c:
8e:a9:b7:ca:4d:42:bc:25:4a:9a:3a:85:85:63:80:
0d:71:75:66:32:53:64:1c:23:bb:00:e1:64:7c:4c:
77:38:e5:43:60:9d:f3:0b:5b:85:10:f2:dd:1e:05:
b3:de:6f:cf:e2:03:0e:ad:9c:bd:c7:36:e7:27:2d:
e5:6b:1b:1b:a6:40:db:57:11:b3:e7:87:5e:d5:a9:
ff:2a:6a:e5:9a:37:23:20:cd:c8:1f:2d:a3:af:43:
4c:71:37:60:04:5a:95:f4:04:63:59:7e:58:65:04:
28:56:71:7c:f8:bf:16:d1:f7:8a:61:b6:f3:5c:a9:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:22:36:AE:92:B9:D7:C5:F4:22:8F:5B:7D:6E:80:80:4E:DB:CA
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:12:7b:06:69:3a:85:e8:2d:af:31:fa:49:0b:d0:8d:43:0d:
ed:a8:ea:1d:5f:f9:6e:71:9c:2c:29:52:ae:ba:c0:6a:28:fa:
98:89:66:3e:b3:a1:99:84:96:a9:0c:9e:8f:7e:3c:61:37:52:
8a:c4:3a:de:c8:8f:d0:47:70:fc:b6:30:4e:d4:b3:57:88:b1:
91:7b:d6:24:ee:c2:c9:22:38:70:2f:d3:ba:43:f6:5a:d3:30:
3b:a6:44:59:f8:37:8d:31:2b:4e:d2:f0:f8:10:99:2a:b7:4c:
f4:16:ba:2d:ea:5a:7d:66:5d:55:10:5b:46:70:7e:c5:a3:ff:
b1:29:3c:a1:f7:11:fa:06:17:a5:10:98:73:33:9e:da:50:0e:
f3:b7:88:47:36:2d:8e:88:dc:7e:ca:3e:69:ab:82:0a:fc:e6:
7c:fe:1a:73:64:f9:54:57:42:5d:dc:d7:71:18:15:41:e1:41:
79:de:28:63:c9:eb:98:a9:09:7b:47:9e:94:4a:04:c2:3d:67:
07:7d:ae:da:7f:3c:1f:76:7b:b5:88:ef:88:99:00:42:8d:14:
5b:39:87:cc:f6:78:b1:c5:2d:49:d1:de:0c:f7:01:c9:40:63:
bc:ac:f7:c5:4a:c8:9e:78:f5:17:5f:d0:ca:37:53:5f:11:07:
b8:45:65:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFsOze3gdaCEGrtKrBrb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2
OGFjNTUwHhcNMjYwMzI2MDMwMTEzWhcNMjYwMzI3MDMwMTEzWjAzMTEwLwYDVQQD
EygzYTE0MjIzNmFlOTJiOWQ3YzVmNDIyOGY1YjdkNmU4MDgwNGVkYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiQPdgH/qgNOrbYeGQbL6sdFMqkz
BNKmIvxbQWsj/5ktHAsgoRjgZrnT7+vlO9/s+T0EOW49EirZHuuftaLl7IO7Wcjl
h0916jhXKTzAJFd8NTSA9X261gKsCw5PAaSa2AuY3gr7dk0SNXhPu5862Bo27AgL
XoMueMjKYlelZCzTfhssyjyOqbfKTUK8JUqaOoWFY4ANcXVmMlNkHCO7AOFkfEx3
OOVDYJ3zC1uFEPLdHgWz3m/P4gMOrZy9xzbnJy3laxsbpkDbVxGz54de1an/Kmrl
mjcjIM3IHy2jr0NMcTdgBFqV9ARjWX5YZQQoVnF8+L8W0feKYbbzXKk4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoUIjaukrnXxfQij1t9boCATtvKMB8GA1UdIwQY
MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt
NDBlYWViYzFjNDdlLzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl
LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3RJ7Bmk6
hegtrzH6SQvQjUMN7ajqHV/5bnGcLClSrrrAaij6mIlmPrOhmYSWqQyej348YTdS
isQ63siP0Edw/LYwTtSzV4ixkXvWJO7CySI4cC/TukP2WtMwO6ZEWfg3jTErTtLw
+BCZKrdM9Ba6LepafWZdVRBbRnB+xaP/sSk8ofcR+gYXpRCYczOe2lAO87eIRzYt
jojcfso+aauCCvzmfP4ac2T5VFdCXdzXcRgVQeFBed4oY8nrmKkJe0eelEoEwj1n
B32u2n88H3Z7tYjviJkAQo0UWzmHzPZ4scUtSdHeDPcByUBjvKz3xUrInnj1F1/Q
yjdTXxEHuEVlxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:26 2026 by rpki-client