Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
File: KXoNnIYU9TK96fRl3U93poEX6VY.mft (raw, json)
Hash identifier: pOG+nNhj1+D32aWKLme/iWfwe1PyZZOb4GUhLG/2kEk=
Subject key identifier: 76:0F:08:91:77:FB:04:86:88:27:E6:F4:73:D0:F7:E5:6F:54:D2:A2
Authority key identifier: 29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
Certificate issuer: /CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Certificate serial: 01A0D012EE9E1544B167B30EE3A95D09C6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:36 +0000
Manifest this update: Wed 23 Sep 2026 21:01:36 +0000
Manifest next update: Thu 24 Sep 2026 21:01:36 +0000
Files and hashes: 1: KXoNnIYU9TK96fRl3U93poEX6VY.crl (hash: gJJxW4PBKy7Xh6qtaixIqIOFvzj4C75eY+xEka4e+Ek=)
2: fmT6qGd_82DfL36JETvp_cYAJEA.roa (hash: +LPv3kGR0ahEJ11+PYzJHGAwvNRYkD0wo7DqeBKeWd0=)
3: hLMrHZeDr1exS-w5Q__NBh2TEMw.roa (hash: vbYv6I3D0Tp+aqvC92NpbtFK8cSesM/xfDG+wj8JE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:ee:9e:15:44:b1:67:b3:0e:e3:a9:5d:09:c6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Validity
Not Before: Sep 23 21:01:36 2026 GMT
Not After : Sep 24 21:01:36 2026 GMT
Subject: CN=760f089177fb04868827e6f473d0f7e56f54d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:13:05:8c:f8:32:67:e0:e5:a3:2a:2f:08:b1:
cb:7a:fb:90:aa:cb:68:88:54:6e:7c:ea:5e:df:ab:
26:56:c4:5a:62:0e:2c:46:3e:fc:92:a5:84:cd:95:
d3:4e:b9:e2:4e:ce:f4:70:a9:3e:f5:b1:87:49:17:
f5:68:a1:b1:92:c7:3b:6e:6b:a5:f0:e3:82:a3:d7:
2f:36:6c:39:a7:0e:be:67:78:48:90:1a:8b:6d:a1:
cb:7a:a8:97:e4:09:cc:0c:a9:e4:17:38:92:73:11:
2b:21:99:af:d0:b9:55:4a:21:68:ef:bc:66:d7:36:
fd:36:f4:25:97:8b:62:59:fa:5b:4f:d1:ba:2c:7d:
51:99:77:21:0b:e7:fc:00:a0:c8:d6:5b:95:78:bb:
3a:1b:0b:7d:ae:ea:f6:5d:1c:3f:d7:b5:07:05:02:
09:09:93:f6:7e:68:ae:8f:7b:aa:b0:81:4a:60:b3:
5a:16:88:d3:4d:dc:bd:8d:64:1d:33:d3:2a:48:17:
60:d2:bf:6e:46:b8:91:df:ff:58:f7:27:86:fe:89:
33:fa:d6:03:67:17:06:6a:db:9e:d6:16:99:9e:01:
be:21:eb:6f:d4:b9:03:7a:41:b6:f7:73:14:5f:42:
e8:85:bd:82:c3:f1:10:9a:7e:9b:62:58:68:3d:f8:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0F:08:91:77:FB:04:86:88:27:E6:F4:73:D0:F7:E5:6F:54:D2:A2
X509v3 Authority Key Identifier:
keyid:29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0c:10:4d:b7:d1:59:bd:69:e1:f9:cc:41:11:ae:67:fa:ec:
32:42:02:da:b0:09:5b:25:9a:93:1d:d5:c1:2f:bb:ce:22:20:
57:97:90:3d:a6:bd:8f:21:9c:87:f0:82:90:0a:10:8c:c4:11:
82:db:f7:dd:46:93:2f:f1:96:60:1b:bb:33:71:db:f9:eb:dd:
2c:58:dd:7b:94:e1:40:74:98:a1:3c:59:66:09:90:9f:e0:f4:
79:26:c5:88:d0:7f:5c:d0:f6:ca:b1:29:e7:5b:4d:ac:4e:29:
fa:36:2e:23:4a:c0:9c:46:d1:e9:aa:4f:c2:f1:11:06:e2:74:
d0:7d:0e:14:8e:5a:83:ef:52:ff:bf:f2:f5:9d:d2:0b:21:77:
f5:29:08:10:dd:96:6f:80:d5:d3:b0:57:07:b0:0a:d4:40:a2:
de:b9:05:21:99:8f:a6:59:ad:9b:ee:39:84:14:d0:7a:64:8c:
e9:f8:34:d7:f7:a9:fc:7f:37:ce:f0:e2:90:db:7c:b0:dc:e7:
b4:43:3d:9d:f8:26:37:e9:e6:b7:97:2d:3a:6b:0d:e8:c9:1f:
07:24:d5:62:83:b7:ab:fb:45:33:e1:4b:51:a1:a2:34:af:60:
dd:2d:7d:04:65:dc:3f:e6:e5:bc:c2:08:2c:3c:75:69:ec:72:
2d:80:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:58:50 2026 by rpki-client