Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier: oGyTNuBlokd4TdV1xdeZ6+nbSQzCGv+fELLzVBrEWGo=
Subject key identifier: 09:22:44:62:D9:37:D6:D3:F3:6D:28:E3:62:96:74:0B:5A:4B:A6:01
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 01A0E13D590046B32EB54CDA43BADBB430D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number: 0C16
Signing time: Sun 27 Sep 2026 05:01:29 +0000
Manifest this update: Sun 27 Sep 2026 05:01:29 +0000
Manifest next update: Mon 28 Sep 2026 05:01:29 +0000
Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
2: C8cw5nbghQi4OUuGqLlmhBWbh3s.roa (hash: ukinZ9+XO0kbm22VodGuo/P5hn91OEClJ3feFpq9ZTY=)
3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: a9ShRwQEnzPXTctsoyWrAxgGfgcr22avw7UrKg2DNyk=)
4: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
5: WRpOfTJPCccC42CV7YRGE6ZB4S8.roa (hash: aa584vPwRk359UwenwBllw9kXmJPCVxnfFb7Rujx0kg=)
6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:59:00:46:b3:2e:b5:4c:da:43:ba:db:b4:30:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Sep 27 05:01:29 2026 GMT
Not After : Sep 28 05:01:29 2026 GMT
Subject: CN=09224462d937d6d3f36d28e36296740b5a4ba601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:b7:0c:4b:74:3c:dd:82:0a:ac:6e:7b:46:
22:68:08:46:58:02:54:fe:4d:54:2d:7c:1d:16:5d:
ff:3b:ed:2c:31:a9:ce:2a:94:f9:cf:fd:4b:02:4e:
20:65:cc:59:75:83:b6:67:f9:37:36:0b:c7:bc:07:
7e:32:03:8b:d1:46:8a:73:fd:df:12:b6:56:0b:63:
64:5b:9f:7a:14:03:75:f2:df:52:c2:7a:f7:cf:da:
15:7f:2e:74:3f:5c:4d:84:0b:7f:c1:29:c0:57:2a:
32:28:8d:3a:e8:bd:be:6c:1b:b9:a6:77:32:cf:13:
ad:98:dd:a5:4c:c2:5d:95:4c:e9:f8:cf:2e:8b:81:
e3:09:b5:a5:af:52:75:7e:a5:cb:5d:b7:8e:04:13:
bf:cb:8e:46:7e:87:95:66:23:1a:3c:7d:cd:71:9b:
04:f7:74:8c:ef:da:5c:d5:59:c0:ed:ba:2b:32:e5:
58:f8:91:82:b3:9c:21:2b:8d:2f:94:4c:ea:14:de:
16:59:99:6c:0b:04:ba:ac:bb:de:18:04:c5:50:0b:
e6:32:2b:dd:74:42:1e:35:dd:36:cc:47:df:f3:88:
c7:f6:92:26:05:fd:ef:03:73:4f:25:13:fa:e0:13:
ea:91:23:ed:3b:05:53:8a:c7:7e:9e:c7:31:4e:09:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:44:62:D9:37:D6:D3:F3:6D:28:E3:62:96:74:0B:5A:4B:A6:01
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c3:d9:4f:28:6f:b6:9d:c1:4e:ca:d6:35:f1:b8:62:13:c0:
09:62:ad:14:75:17:2b:e9:6e:98:86:67:5d:80:6e:c0:c8:c2:
3d:ed:b7:3b:90:2e:ed:ef:7c:dd:c5:d7:b1:c5:1d:db:38:9d:
cb:a2:79:ba:e0:f3:4f:a1:58:29:86:50:b2:23:95:c7:5b:93:
70:a6:d8:0f:de:7d:82:6a:d6:60:ea:26:bd:d9:0e:0e:e9:1f:
88:89:fb:e6:6b:d0:b1:8c:39:11:1c:3b:ba:5d:9e:e6:85:5e:
14:3b:e0:cd:32:12:da:97:c1:f8:ea:8b:1c:c6:4b:ce:1c:67:
c1:56:74:b4:1d:d3:3a:16:46:c8:8d:0a:39:a3:52:01:40:86:
21:59:db:86:f1:90:15:94:b5:81:41:9e:59:f2:be:a5:d8:80:
9f:15:3d:cc:fa:14:d1:12:70:a3:c3:09:2d:fe:12:65:2d:c5:
13:85:0a:c7:b1:d0:f1:33:07:4d:c1:ae:08:ad:f8:ec:de:db:
6c:3d:d3:2a:2d:c8:33:18:f0:1a:6f:e8:de:46:11:93:fc:1b:
0d:6f:97:42:b2:0b:4e:95:bd:05:44:6b:a6:a1:a4:a1:ab:b0:
a2:1b:a5:4c:00:b3:3b:97:ec:2e:1d:b1:2e:12:aa:1d:3e:e0:
ae:ab:f4:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPVkARrMutUzaQ7rbtDDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2
OGFjNTUwHhcNMjYwOTI3MDUwMTI5WhcNMjYwOTI4MDUwMTI5WjAzMTEwLwYDVQQD
EygwOTIyNDQ2MmQ5MzdkNmQzZjM2ZDI4ZTM2Mjk2NzQwYjVhNGJhNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aC3DEt0PN2CCqxue0YiaAhGWAJU
/k1ULXwdFl3/O+0sManOKpT5z/1LAk4gZcxZdYO2Z/k3NgvHvAd+MgOL0UaKc/3f
ErZWC2NkW596FAN18t9Swnr3z9oVfy50P1xNhAt/wSnAVyoyKI066L2+bBu5pncy
zxOtmN2lTMJdlUzp+M8ui4HjCbWlr1J1fqXLXbeOBBO/y45GfoeVZiMaPH3NcZsE
93SM79pc1VnA7borMuVY+JGCs5whK40vlEzqFN4WWZlsCwS6rLveGATFUAvmMivd
dEIeNd02zEff84jH9pImBf3vA3NPJRP64BPqkSPtOwVTisd+nscxTgme3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkiRGLZN9bT820o42KWdAtaS6YBMB8GA1UdIwQY
MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt
NDBlYWViYzFjNDdlLzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl
LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8PZTyhv
tp3BTsrWNfG4YhPACWKtFHUXK+lumIZnXYBuwMjCPe23O5Au7e983cXXscUd2zid
y6J5uuDzT6FYKYZQsiOVx1uTcKbYD959gmrWYOomvdkODukfiIn75mvQsYw5ERw7
ul2e5oVeFDvgzTIS2pfB+OqLHMZLzhxnwVZ0tB3TOhZGyI0KOaNSAUCGIVnbhvGQ
FZS1gUGeWfK+pdiAnxU9zPoU0RJwo8MJLf4SZS3FE4UKx7HQ8TMHTcGuCK347N7b
bD3TKi3IMxjwGm/o3kYRk/wbDW+XQrILTpW9BURrpqGkoauwohulTACzO5fsLh2x
LhKqHT7grqv0Tw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:35 2026 by rpki-client