Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier: FFwlbENo4IXeolzcWrv2rmMnO4/mEWx+SkGDXUClX6Q=
Subject key identifier: 95:2E:5A:98:F0:44:9A:F6:51:5F:6D:14:A3:10:8C:9B:AD:D5:EA:96
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 019E1FECB6A190F74BAD80DD8C6C103C3431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number: 0312
Signing time: Wed 13 May 2026 06:01:07 +0000
Manifest this update: Wed 13 May 2026 06:01:07 +0000
Manifest next update: Thu 14 May 2026 06:01:07 +0000
Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: zSsEc6VrkD19b0Ni6PzmNiE1/8+dqGn4zXoEV7Oku4M=)
2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=)
3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:b6:a1:90:f7:4b:ad:80:dd:8c:6c:10:3c:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: May 13 06:01:07 2026 GMT
Not After : May 14 06:01:07 2026 GMT
Subject: CN=952e5a98f0449af6515f6d14a3108c9badd5ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:ae:18:31:5f:0d:f9:48:cf:f0:65:21:f3:
73:b0:5e:0b:ab:e8:f3:ab:e8:67:70:e9:b6:89:f8:
a3:0f:d4:65:56:35:ef:f4:64:5d:2a:c7:2c:17:7d:
98:d1:13:27:54:08:55:2e:38:06:76:94:ec:b7:9c:
e1:47:fd:bd:96:a9:77:8e:bd:1e:b4:3b:ef:b7:28:
b7:f4:fd:e1:56:a5:66:3d:20:c6:15:1f:af:13:3e:
fb:f7:76:b4:2e:ed:d3:8f:c4:19:8c:0c:e3:9c:99:
b7:c0:71:52:b0:a1:3d:be:35:a5:87:14:aa:6c:a2:
73:04:cc:68:3d:e5:58:ca:61:b0:2c:3d:a7:67:86:
fa:ad:57:98:0b:3f:63:f8:31:af:58:ad:ed:77:7f:
ec:cd:24:05:fd:1f:f8:34:e0:07:6e:97:a6:2e:c2:
fd:74:18:20:30:13:1e:7b:85:7b:6d:e1:84:d0:bd:
95:13:b2:86:30:bb:c7:6f:99:cd:c8:3c:9c:4a:5b:
7a:6e:ef:d6:0c:ad:55:b9:d5:a4:7b:fa:2f:41:6e:
76:5d:8c:6b:e6:c7:e9:a4:c3:b7:e4:53:7d:55:72:
f8:d8:58:3f:28:41:41:c7:67:7f:9d:ea:d1:db:d1:
04:08:d1:ff:cb:df:f0:4e:99:d9:a2:6a:71:cd:29:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:5A:98:F0:44:9A:F6:51:5F:6D:14:A3:10:8C:9B:AD:D5:EA:96
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:48:a5:0e:15:75:8f:a0:b6:44:ea:1b:ef:a7:8e:89:08:40:
d3:88:b4:0b:c2:84:b4:6b:1d:04:7f:70:4c:9a:b6:3d:fb:db:
88:0e:33:dd:b3:7d:c4:f5:c4:37:b7:01:87:3a:0e:e2:fb:85:
69:fc:c7:2b:a1:14:4a:79:37:72:6d:60:15:0e:79:6b:21:93:
16:30:55:90:e1:b7:bd:c5:90:a7:ef:0a:a7:23:99:9f:03:2e:
78:cd:38:48:e9:56:1a:ed:3d:5b:9f:55:92:ea:2f:fe:93:e0:
9e:83:2e:a6:fd:11:c0:09:c8:f3:af:71:53:1b:7d:44:2c:e6:
f3:ec:46:ba:e1:6c:43:b7:43:1f:17:2f:fb:e6:2f:ec:b3:64:
ad:c8:d3:e9:d6:28:f9:50:84:fc:03:ae:23:7b:83:7e:c1:44:
54:7d:6f:6b:32:f5:32:10:12:0d:0d:26:30:68:0e:ae:dd:8b:
2a:f1:02:83:fa:5e:25:34:98:e3:9b:18:91:aa:2a:45:74:c1:
bc:49:3e:48:88:e0:c5:cc:49:34:5f:08:10:3f:d7:74:8a:4f:
b6:c3:28:00:eb:10:44:f0:77:a1:70:d7:46:c0:7c:22:46:86:
99:17:cb:ce:9e:b7:17:e6:cd:a9:38:70:54:75:ff:17:94:63:
53:9f:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:50 2026 by rpki-client