Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: 9iOht794Rf8QhsAyFQYUjILiOv8/m3omRx/GQfpjPTk=
Subject key identifier: 56:59:57:55:6E:51:F3:94:57:D2:98:CB:EE:55:71:59:E3:14:6B:2E
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 01A0F2685045C0C5D4050FE6F555EDD1145A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0D33
Signing time: Wed 30 Sep 2026 13:01:57 +0000
Manifest this update: Wed 30 Sep 2026 13:01:57 +0000
Manifest next update: Thu 01 Oct 2026 13:01:57 +0000
Files and hashes: 1: OvuFRaLZBweBmLxOWrEZAm-sbiY.roa (hash: tSiVvkoHjhNkKCRQBHrWvEoarLLIEtpHVmr673up4S4=)
2: TZyd9M7POjrFC5osBmVH2sTt8PA.roa (hash: gBvyor7yL3zPJ1KHwvIudHG9wt9BLFSD3z8aiaroqt8=)
3: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: r+eGAvRbszfKYJi4EsiMppuNfKmScXd6S1wGcey+pOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:68:50:45:c0:c5:d4:05:0f:e6:f5:55:ed:d1:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Sep 30 13:01:57 2026 GMT
Not After : Oct 1 13:01:57 2026 GMT
Subject: CN=565957556e51f39457d298cbee557159e3146b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:d4:9b:2e:8c:6f:3f:76:3e:9e:43:d2:4e:
19:5e:1d:f2:fa:3b:95:c5:b4:3c:68:a1:a0:ef:45:
e5:ce:5c:2b:d6:30:1e:98:a2:01:92:08:8a:eb:61:
86:34:bd:7d:f2:22:d8:6b:d8:64:a4:9c:f0:f5:99:
52:c1:53:6d:34:f3:00:8e:63:2c:cc:0a:15:72:ae:
67:61:4f:23:d3:72:3c:69:55:52:87:3d:67:5e:02:
4b:75:4e:8e:01:7a:35:34:1d:77:b3:2f:89:7c:9c:
eb:6d:42:56:5d:b9:9a:a9:99:1a:20:74:b8:e6:c4:
23:dc:a6:f4:f0:ab:be:5e:19:df:c8:52:18:76:a3:
d9:d9:87:34:1a:11:e4:4c:60:fc:11:87:87:a0:fe:
08:39:4b:a5:58:d0:3b:5f:aa:79:58:a7:86:58:1f:
c8:7b:1d:80:98:70:50:8b:26:32:68:d5:13:18:9f:
c9:f4:54:f6:8c:45:4b:d9:bd:cb:42:54:71:3f:1e:
08:d0:c4:1d:19:06:24:a7:a0:a3:e5:da:db:de:66:
1a:7f:6a:20:cb:f3:a8:24:47:78:00:a8:6f:7c:c6:
1c:e1:ee:e1:cd:46:8a:1d:2d:a4:3d:78:76:d0:06:
c8:31:8a:92:38:17:db:cd:53:03:1b:a1:2b:c2:31:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:57:55:6E:51:F3:94:57:D2:98:CB:EE:55:71:59:E3:14:6B:2E
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f9:79:0b:7f:ac:2e:5f:e9:03:f0:18:a2:cd:e9:6a:1c:24:
9a:ff:66:9f:4b:65:ac:d5:88:93:c3:1c:cc:29:e8:fe:da:ff:
9e:78:86:65:2c:bd:d6:56:48:4e:6f:0f:84:fe:53:2e:66:d9:
cf:cc:2d:16:bc:22:30:d6:2f:34:54:80:0d:fc:de:82:9a:75:
c9:52:ea:dc:72:96:df:37:80:e4:32:64:81:a4:eb:c3:23:66:
1b:74:32:a9:d4:ff:e3:d5:19:9d:6c:38:71:23:f9:58:52:2c:
ba:ce:20:4d:53:1a:31:4e:c9:8d:4c:de:8c:d4:6f:c2:ed:1e:
9c:1a:0e:a6:fa:3a:f2:42:cc:5e:29:7c:fb:95:3a:3a:02:74:
da:bf:9a:a5:5f:f8:53:28:fa:45:33:cb:97:55:b4:ab:d0:7b:
e5:8c:48:e8:f9:5b:32:f8:02:03:b5:79:4a:29:a5:4e:fb:9f:
a4:e7:dc:c8:31:48:33:82:ff:fd:5c:d0:8d:29:95:b8:9f:2c:
5a:4c:bd:63:1a:aa:67:1e:c0:7d:fc:93:a6:34:a6:19:b3:92:
2e:0d:30:d3:ff:7e:bf:77:b7:10:6d:0b:b3:b8:e3:08:af:45:
f1:e6:d0:0d:18:77:fa:7e:b4:7b:ab:d6:fd:0a:92:8b:ff:00:
4b:61:ee:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDyaFBFwMXUBQ/m9VXt0RRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzViZThlZjBkY2U5ZDFlNjcwNzFhYjdjYjA3Y2Y1MGQ1
M2Y2MTcwHhcNMjYwOTMwMTMwMTU3WhcNMjYxMDAxMTMwMTU3WjAzMTEwLwYDVQQD
Eyg1NjU5NTc1NTZlNTFmMzk0NTdkMjk4Y2JlZTU1NzE1OWUzMTQ2YjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3PUmy6Mbz92Pp5D0k4ZXh3y+juV
xbQ8aKGg70Xlzlwr1jAemKIBkgiK62GGNL198iLYa9hkpJzw9ZlSwVNtNPMAjmMs
zAoVcq5nYU8j03I8aVVShz1nXgJLdU6OAXo1NB13sy+JfJzrbUJWXbmaqZkaIHS4
5sQj3Kb08Ku+XhnfyFIYdqPZ2Yc0GhHkTGD8EYeHoP4IOUulWNA7X6p5WKeGWB/I
ex2AmHBQiyYyaNUTGJ/J9FT2jEVL2b3LQlRxPx4I0MQdGQYkp6Cj5drb3mYaf2og
y/OoJEd4AKhvfMYc4e7hzUaKHS2kPXh20AbIMYqSOBfbzVMDG6ErwjETywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZZV1VuUfOUV9KYy+5VcVnjFGsuMB8GA1UdIwQY
MBaAFJE1vo7w3OnR5nBxq3ywfPUNU/YXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMjFlMDItNTRiNy00OWRlLWIxNWYt
NzI5Mjk4MjEyZjU0LzEva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kMjFlMDItNTRiNy00OWRlLWIxNWYtNzI5Mjk4MjEyZjU0
LzEva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfl5C3+s
Ll/pA/AYos3pahwkmv9mn0tlrNWIk8MczCno/tr/nniGZSy91lZITm8PhP5TLmbZ
z8wtFrwiMNYvNFSADfzegpp1yVLq3HKW3zeA5DJkgaTrwyNmG3QyqdT/49UZnWw4
cSP5WFIsus4gTVMaMU7JjUzejNRvwu0enBoOpvo68kLMXil8+5U6OgJ02r+apV/4
Uyj6RTPLl1W0q9B75YxI6PlbMvgCA7V5SimlTvufpOfcyDFIM4L//VzQjSmVuJ8s
Wky9YxqqZx7AffyTpjSmGbOSLg0w0/9+v3e3EG0Ls7jjCK9F8ebQDRh3+n60e6vW
/QqSi/8AS2HuTA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:52:13 2026 by rpki-client