Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: tqx8gkT8F4jSPNTCagBkk1HxZSQa5KWGfcQZxUPaikU=
Subject key identifier: A2:9D:C4:78:A8:4D:39:AF:5A:CD:0D:EB:60:16:56:7E:CD:25:A8:A1
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 01A1DA5D003A86546BECD2DADAF91BD87BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0C97
Signing time: Sat 14 Nov 2026 14:01:30 +0000
Manifest this update: Sat 14 Nov 2026 14:01:30 +0000
Manifest next update: Sun 15 Nov 2026 14:01:30 +0000
Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
2: C8cw5nbghQi4OUuGqLlmhBWbh3s.roa (hash: ukinZ9+XO0kbm22VodGuo/P5hn91OEClJ3feFpq9ZTY=)
3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: 3VZK8+oGCd+LvOmwUfOofCbUAqKJ+YIQwXDvnAZlJ0o=)
4: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
5: WRpOfTJPCccC42CV7YRGE6ZB4S8.roa (hash: aa584vPwRk359UwenwBllw9kXmJPCVxnfFb7Rujx0kg=)
6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5d:00:3a:86:54:6b:ec:d2:da:da:f9:1b:d8:7b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Nov 14 14:01:30 2026 GMT
Not After : Nov 15 14:01:30 2026 GMT
Subject: CN=a29dc478a84d39af5acd0deb6016567ecd25a8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:27:24:6c:58:f4:72:1b:79:26:f8:fe:e2:
bb:b4:93:69:87:55:f8:2f:c3:c3:80:35:7a:c4:ba:
09:95:dd:8d:29:1b:08:0b:0f:7b:af:97:e4:ea:7b:
23:fd:e5:31:a1:b7:df:98:c2:03:6b:59:79:18:3b:
1f:b5:63:c0:08:bd:01:6b:20:cc:0a:ba:51:bf:b3:
16:b0:bb:19:9e:a8:8d:6b:cd:d4:f6:e7:f9:03:ad:
1c:cc:ea:94:37:a0:a0:5e:42:ee:be:07:f8:38:8d:
0b:d7:f6:6f:db:71:7d:5b:9c:c9:f9:ee:71:b7:a0:
b4:47:88:47:7e:dc:90:11:f9:da:3f:0c:56:f0:eb:
d3:6b:89:dd:1d:24:13:a8:ca:8c:87:ef:03:15:5b:
50:d1:77:81:9b:d4:8e:b5:48:fa:ed:9e:84:fe:9a:
ef:ad:2f:0b:7d:36:c3:e4:56:5f:49:5b:b8:8e:a3:
ba:7c:bb:fb:c8:d7:06:59:fc:2e:2d:4d:ba:82:8a:
7f:3e:93:4a:ee:55:27:10:12:36:b2:dc:29:48:cf:
f6:ad:20:d4:93:9a:ec:f5:6a:de:8a:58:8c:d6:99:
de:9e:36:8b:f3:10:04:b4:6f:15:22:d5:e2:6e:f6:
28:d8:75:a0:ab:9e:7d:cb:1b:df:b1:85:6f:5e:87:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:C4:78:A8:4D:39:AF:5A:CD:0D:EB:60:16:56:7E:CD:25:A8:A1
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e1:cc:6c:a3:68:87:12:30:25:36:b4:21:1d:51:85:58:7f:
e3:66:9b:d0:b0:6a:84:b3:40:62:4b:b7:c5:8f:01:97:9c:3c:
de:0a:ee:28:92:7b:81:c1:93:54:7f:20:ab:60:5a:93:d1:5c:
9b:ef:a5:55:0d:b3:ed:de:0d:25:a1:a8:99:6d:3f:fc:b0:56:
55:c3:48:12:16:e9:0f:d7:ec:1c:d5:8b:0f:7c:72:67:84:12:
5d:08:b0:c5:30:ff:74:0e:4a:1b:0f:ef:53:3a:de:c1:8e:f0:
1d:d3:f2:7b:99:b7:44:a5:4d:7d:24:00:b3:c4:85:5a:86:36:
ed:e9:8a:57:f9:94:13:6e:6d:29:ad:9d:65:54:ef:cf:1e:00:
37:49:65:49:f1:42:d2:e7:2d:a5:46:39:05:fc:1a:86:36:f7:
2a:c7:d6:b0:a9:1b:7f:2e:f7:2c:91:a5:d9:16:15:ce:fc:53:
6b:d9:92:88:e5:c7:27:f9:5a:59:ec:5d:de:dd:65:6d:67:d1:
10:d9:b2:35:6d:c7:bf:f7:f8:be:94:ab:d9:0c:6b:13:2d:d3:
04:44:c9:6f:ec:1c:2b:f1:b3:9c:06:63:ba:f4:27:4d:62:65:
c1:1d:6c:ca:cf:83:47:ab:ad:06:43:7c:cd:f2:d4:61:87:f5:
a9:5b:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:36:08 2026 by rpki-client