Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: MpTAaVYFT8fjdt914CXLi2yflI29m9NuUApZHILVUZI=
Subject key identifier: 92:98:79:0C:F1:C0:1C:46:E7:C9:60:94:F5:DD:6C:7E:92:60:BF:2F
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 01A0DB0482A51F94352C326F69AB0E27EDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 047C
Signing time: Sat 26 Sep 2026 00:01:40 +0000
Manifest this update: Sat 26 Sep 2026 00:01:40 +0000
Manifest next update: Sun 27 Sep 2026 00:01:40 +0000
Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: ywogN9EGJRXe64zzQdllUy1pqEroN0ISFKDQxHakEFE=)
2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=)
3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:82:a5:1f:94:35:2c:32:6f:69:ab:0e:27:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Sep 26 00:01:40 2026 GMT
Not After : Sep 27 00:01:40 2026 GMT
Subject: CN=9298790cf1c01c46e7c96094f5dd6c7e9260bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:03:23:19:08:02:21:0d:46:32:af:09:a4:
9a:a6:f4:fb:39:52:c0:c6:dd:5a:53:5b:82:e5:1f:
31:30:6d:25:83:de:7f:34:19:9b:df:01:31:95:c1:
c9:7c:a2:2e:a0:18:5f:de:34:f4:c7:e8:f2:72:4d:
07:f3:3b:f4:a8:c7:73:d0:ec:fb:a8:51:8a:0b:46:
4f:e4:12:ff:55:05:4b:b5:b0:ee:28:29:ac:fc:b8:
e7:26:47:78:4a:ff:38:b9:44:c0:89:d7:fb:2f:c8:
0b:57:08:17:da:bf:8c:5b:eb:9f:30:d9:2e:af:86:
49:40:c9:48:54:8e:2f:a0:68:e6:13:e1:2b:b2:05:
16:87:36:50:b6:9b:6e:23:5b:95:94:e7:0f:18:52:
97:64:6f:c8:9a:47:02:51:d5:e7:59:da:8e:9d:34:
7d:18:c4:21:e0:4e:c4:c4:70:78:8e:cb:be:f8:6f:
c9:d1:da:dc:60:8e:42:9c:1a:ed:3d:17:c9:50:71:
7e:0f:24:ee:7d:25:3f:5c:7a:12:76:33:ae:f0:3d:
48:81:ba:7a:6f:7c:47:29:5e:29:ea:f3:d7:e4:bc:
b6:05:4e:fa:90:e3:e7:3b:5e:f0:82:53:fd:a3:7b:
dc:25:34:99:25:d4:ef:ab:92:aa:d9:f1:54:fa:b3:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:98:79:0C:F1:C0:1C:46:E7:C9:60:94:F5:DD:6C:7E:92:60:BF:2F
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e5:b4:f5:31:dd:f0:cc:5e:a8:92:cb:84:24:c5:01:b5:4d:
8f:91:5c:04:4d:4b:23:1b:ac:68:d0:82:1e:3f:38:78:ba:9f:
e4:5f:e2:00:83:0f:5b:12:bc:6a:57:8b:9a:69:25:62:6f:6e:
13:4a:1c:4f:d5:24:ab:80:25:d1:6e:21:cf:57:6a:8b:b6:b7:
57:0d:e4:91:bb:96:26:5c:b2:42:17:16:33:1c:7b:b4:10:19:
3f:f4:41:b2:c5:e0:99:ba:7b:0c:20:57:f2:b0:e6:e5:ca:17:
11:28:ad:2b:ce:29:0f:45:14:20:3a:3f:75:9a:0a:ee:6c:c2:
4e:b2:bc:87:cc:1d:c9:3f:c0:c4:d9:57:40:9b:12:c6:88:7c:
fc:14:d8:0a:c8:3e:fe:7f:e4:71:ea:c4:d9:3b:51:1a:1a:35:
6a:06:2d:30:d6:1e:7c:65:7e:a6:a4:0d:83:d4:19:8b:0c:55:
fc:57:5e:e7:5e:61:d9:dc:c8:37:bd:3a:9b:44:67:5b:39:85:
06:09:93:99:db:ca:8d:9e:ce:bb:29:62:24:65:7d:80:0d:74:
1c:9f:2d:ec:a2:d4:80:9f:b9:b1:36:1b:9e:f7:ab:03:39:8c:
12:b2:cf:95:46:63:3f:19:eb:e2:0e:3b:27:b8:01:21:03:3e:
ce:fa:52:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbBIKlH5Q1LDJvaasOJ+3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz
ZDI0MDQwHhcNMjYwOTI2MDAwMTQwWhcNMjYwOTI3MDAwMTQwWjAzMTEwLwYDVQQD
Eyg5Mjk4NzkwY2YxYzAxYzQ2ZTdjOTYwOTRmNWRkNmM3ZTkyNjBiZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdMDIxkIAiENRjKvCaSapvT7OVLA
xt1aU1uC5R8xMG0lg95/NBmb3wExlcHJfKIuoBhf3jT0x+jyck0H8zv0qMdz0Oz7
qFGKC0ZP5BL/VQVLtbDuKCms/LjnJkd4Sv84uUTAidf7L8gLVwgX2r+MW+ufMNku
r4ZJQMlIVI4voGjmE+ErsgUWhzZQtptuI1uVlOcPGFKXZG/ImkcCUdXnWdqOnTR9
GMQh4E7ExHB4jsu++G/J0drcYI5CnBrtPRfJUHF+DyTufSU/XHoSdjOu8D1Igbp6
b3xHKV4p6vPX5Ly2BU76kOPnO17wglP9o3vcJTSZJdTvq5Kq2fFU+rNxmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKYeQzxwBxG58lglPXdbH6SYL8vMB8GA1UdIwQY
MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt
MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi
LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuW09THd
8MxeqJLLhCTFAbVNj5FcBE1LIxusaNCCHj84eLqf5F/iAIMPWxK8aleLmmklYm9u
E0ocT9Ukq4Al0W4hz1dqi7a3Vw3kkbuWJlyyQhcWMxx7tBAZP/RBssXgmbp7DCBX
8rDm5coXESitK84pD0UUIDo/dZoK7mzCTrK8h8wdyT/AxNlXQJsSxoh8/BTYCsg+
/n/kcerE2TtRGho1agYtMNYefGV+pqQNg9QZiwxV/Fde515h2dzIN706m0RnWzmF
BgmTmdvKjZ7OuyliJGV9gA10HJ8t7KLUgJ+5sTYbnverAzmMErLPlUZjPxnr4g47
J7gBIQM+zvpS6Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:21:38 2026 by rpki-client