Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: 9pFDQtVuZdpPkWzCIAQOXWErziOUMfVWS6ekrZbfeLs=
Subject key identifier: 80:9F:B0:F5:6A:2B:7C:30:66:7D:13:19:09:55:69:E3:A6:55:FE:92
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 019E1DC79CC2DE771A8BD4A67D6419DC8D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 110D
Signing time: Tue 12 May 2026 20:01:21 +0000
Manifest this update: Tue 12 May 2026 20:01:21 +0000
Manifest next update: Wed 13 May 2026 20:01:21 +0000
Files and hashes: 1: G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa (hash: fWJBQMog1YWkp2bEy9v1fjvr2kKDsca319UpenUU6lI=)
2: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: jwFIL2CuL172V7WgqxGz9LxXIUQqHYyHo0BXwG7SN2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:9c:c2:de:77:1a:8b:d4:a6:7d:64:19:dc:8d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: May 12 20:01:21 2026 GMT
Not After : May 13 20:01:21 2026 GMT
Subject: CN=809fb0f56a2b7c30667d1319095569e3a655fe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:c9:07:21:67:30:96:f3:14:bc:f2:b1:74:
f9:b8:e0:e4:1f:40:a3:3c:c9:88:22:7f:5f:60:f2:
5a:c0:84:66:12:37:24:41:25:4b:50:58:2b:5b:39:
35:87:63:c0:e9:0b:a6:aa:c3:bd:36:22:b4:95:27:
0f:e4:32:22:e4:73:1f:69:f4:e1:2b:a5:54:27:bd:
0f:66:6a:f7:8f:76:81:4e:ee:a8:5e:76:a2:c2:c4:
26:94:c5:eb:7c:c1:bd:05:05:db:1e:2d:be:96:0f:
b9:3b:b6:a8:66:83:98:5f:ad:0c:31:53:02:c5:a2:
d6:22:3a:f0:04:e5:0e:0b:42:71:86:61:0f:92:ef:
91:98:87:e6:db:88:8e:42:92:e9:0c:82:2a:5d:9d:
13:3c:f9:55:d6:ec:ba:ca:af:70:da:f5:fe:ef:9a:
3d:a3:c8:84:ba:0f:72:e0:5f:39:12:2f:ba:28:a9:
d9:f0:ad:ec:9f:8b:88:c7:2b:d2:d9:20:55:35:81:
46:3a:05:da:d1:d0:10:31:0f:3e:f0:92:5c:03:df:
fe:36:f5:03:9c:c3:17:9b:c8:d0:28:62:2f:9c:85:
7f:18:17:41:0c:5d:fc:93:7c:da:98:9d:27:b5:47:
9c:cf:6e:1f:d1:69:ab:09:01:7d:ca:5f:61:c2:e3:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9F:B0:F5:6A:2B:7C:30:66:7D:13:19:09:55:69:E3:A6:55:FE:92
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:00:a2:f9:3f:c4:95:dc:14:d6:08:ed:d7:c4:b4:ec:c1:
09:3b:81:fe:5e:6f:ea:93:f2:6b:1d:bb:0a:32:a6:6c:72:df:
8e:17:cf:cc:8c:ca:5b:9f:12:7e:ce:32:16:1d:ea:d2:49:52:
26:83:6b:0a:c0:96:6f:5d:80:b7:e5:45:a0:4f:9f:4e:e9:57:
b1:51:ac:09:85:01:47:36:24:a8:90:e0:53:ed:3c:f9:8b:07:
3d:b3:0e:98:fd:67:99:16:6d:12:f6:14:57:30:2c:68:61:b8:
bd:8a:84:f7:bf:6e:aa:61:7f:cb:75:6b:3e:b8:15:a1:31:26:
49:d8:40:5d:57:a3:0f:f0:66:5d:b1:ad:45:e7:e6:f4:c4:cb:
ef:7e:ca:de:5d:53:d1:1a:db:c7:4b:1c:e2:66:9e:c5:2b:af:
63:1b:97:03:a6:d8:d0:dc:b4:bc:6f:bc:dc:ca:f2:77:01:a7:
20:82:01:ba:42:57:ab:54:9d:02:cb:93:7d:57:e3:52:5e:9d:
0f:c9:7c:45:03:9f:e5:0c:08:85:9e:73:71:1c:80:96:96:37:
f6:c2:0b:ed:0d:2a:b0:81:5b:a3:2b:9c:92:5d:19:7f:2e:bc:
5a:06:ea:a4:54:6f:55:7d:23:cf:36:ab:9b:b4:ce:bf:e4:57:
0b:86:5b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx5zC3ncai9SmfWQZ3I1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2QxMDQ0Y2Q0OGQ2MTcxNmQ3NTllMDIwZGRiZGFhODE0
ZDVjZDUwHhcNMjYwNTEyMjAwMTIxWhcNMjYwNTEzMjAwMTIxWjAzMTEwLwYDVQQD
Eyg4MDlmYjBmNTZhMmI3YzMwNjY3ZDEzMTkwOTU1NjllM2E2NTVmZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrvJByFnMJbzFLzysXT5uODkH0Cj
PMmIIn9fYPJawIRmEjckQSVLUFgrWzk1h2PA6QumqsO9NiK0lScP5DIi5HMfafTh
K6VUJ70PZmr3j3aBTu6oXnaiwsQmlMXrfMG9BQXbHi2+lg+5O7aoZoOYX60MMVMC
xaLWIjrwBOUOC0JxhmEPku+RmIfm24iOQpLpDIIqXZ0TPPlV1uy6yq9w2vX+75o9
o8iEug9y4F85Ei+6KKnZ8K3sn4uIxyvS2SBVNYFGOgXa0dAQMQ8+8JJcA9/+NvUD
nMMXm8jQKGIvnIV/GBdBDF38k3zamJ0ntUecz24f0WmrCQF9yl9hwuOi/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICfsPVqK3wwZn0TGQlVaeOmVf6SMB8GA1UdIwQY
MBaAFCk9EETNSNYXFtdZ4CDdvaqBTVzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUt
ZTcxYmVkYTFmMjk5LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUtZTcxYmVkYTFmMjk5
LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVm0Aovk/
xJXcFNYI7dfEtOzBCTuB/l5v6pPyax27CjKmbHLfjhfPzIzKW58Sfs4yFh3q0klS
JoNrCsCWb12At+VFoE+fTulXsVGsCYUBRzYkqJDgU+08+YsHPbMOmP1nmRZtEvYU
VzAsaGG4vYqE979uqmF/y3VrPrgVoTEmSdhAXVejD/BmXbGtRefm9MTL737K3l1T
0Rrbx0sc4maexSuvYxuXA6bY0Ny0vG+83MrydwGnIIIBukJXq1SdAsuTfVfjUl6d
D8l8RQOf5QwIhZ5zcRyAlpY39sIL7Q0qsIFboyuckl0Zfy68WgbqpFRvVX0jzzar
m7TOv+RXC4Zbhg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:17:44 2026 by rpki-client