Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: +EtOabsgdkOK5Q6liDz2v9XA4e7RaITWcgHB33Cm9qE=
Subject key identifier: 0F:20:91:0A:56:AA:C6:E4:76:10:C1:7B:58:9E:A0:C4:CC:2B:58:68
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019F9324558A2D4E5A5ED7DEEC2E3F904CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 118E
Signing time: Fri 24 Jul 2026 08:00:59 +0000
Manifest this update: Fri 24 Jul 2026 08:00:59 +0000
Manifest next update: Sat 25 Jul 2026 08:00:59 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: FMJuSn11ujaviO+wDW+HrGioDvfmK8/ws2Sy4Kacfmc=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:55:8a:2d:4e:5a:5e:d7:de:ec:2e:3f:90:4c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Jul 24 08:00:59 2026 GMT
Not After : Jul 25 08:00:59 2026 GMT
Subject: CN=0f20910a56aac6e47610c17b589ea0c4cc2b5868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:62:fb:7e:65:9f:da:35:38:06:d5:1a:76:
90:e7:b4:08:20:03:89:d8:e5:ba:44:25:87:0e:fd:
8b:95:f3:c2:75:79:0a:99:2e:65:c8:96:f3:40:bf:
03:bc:e8:2a:54:40:ac:5d:8f:5c:41:f3:18:e4:8e:
5a:05:7b:44:8a:af:d8:cd:30:1a:8d:27:83:d7:eb:
0b:eb:33:20:92:40:f9:2e:f3:f1:79:51:4d:d4:e1:
a4:ac:85:74:98:0a:9c:6e:90:50:c8:71:54:c7:90:
35:15:a9:c2:ad:a3:be:a8:b4:70:f1:ad:2d:f6:93:
54:e4:3f:fb:1e:ee:e3:75:89:8b:e8:51:75:2d:8d:
40:04:e3:1a:f4:3a:83:6c:04:0f:91:22:a7:ae:07:
4c:fd:4c:0b:04:e3:a3:c6:4e:f1:ad:77:be:41:8f:
80:5d:e8:3b:ec:4e:27:24:79:c0:8b:3d:e6:2b:23:
72:7f:15:88:6b:6c:11:83:ec:e4:ea:2d:19:03:68:
5a:2f:9a:01:ad:9e:4c:ff:55:d8:f6:31:9f:89:db:
41:7a:c3:fb:c1:34:1d:0f:18:ba:09:71:65:28:27:
7d:53:cd:98:97:26:53:00:2e:92:6c:63:dc:75:97:
03:e6:4c:b5:17:af:71:44:49:99:67:a8:b5:87:17:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:91:0A:56:AA:C6:E4:76:10:C1:7B:58:9E:A0:C4:CC:2B:58:68
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1f:36:7b:ea:7f:ac:4a:6c:93:04:0c:1a:dc:23:cc:be:1b:
b4:11:08:2c:92:6e:5a:ab:12:a9:98:c0:b0:20:be:ef:6c:9c:
5f:f5:93:75:3e:c5:9a:1c:34:7b:82:58:41:a9:51:e2:47:a2:
f9:eb:55:b6:7f:af:6e:3d:6a:2d:1b:27:0b:c1:0a:34:14:ac:
a5:c3:22:53:c6:78:e2:5d:01:51:42:a1:04:6f:09:0e:19:50:
42:ed:88:81:48:09:70:b3:38:18:3d:d3:0d:42:c8:7a:b1:fc:
47:8b:d8:09:82:51:cb:63:76:0b:a5:54:28:e9:97:e6:0a:4d:
2f:02:f8:47:6c:ca:68:01:23:db:96:60:fc:f4:b1:bd:25:ef:
88:f9:ad:b9:2c:10:ea:3f:72:12:5c:5a:31:c1:86:07:b8:dd:
3a:99:94:91:4e:1f:1e:08:c0:97:2c:de:f3:c4:6a:b0:45:db:
c8:f9:1b:8e:b0:47:17:90:40:41:19:47:40:57:b8:28:2e:ce:
1f:9e:95:2e:19:56:03:d3:9e:bb:f4:85:42:1e:d0:9a:2d:03:
3a:04:6f:43:c2:de:b3:a0:17:de:6e:5d:65:24:74:b1:e1:86:
23:98:d6:13:ad:74:eb:68:b8:25:51:f1:1e:79:8b:12:2b:7f:
74:8d:0f:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJFWKLU5aXtfe7C4/kEzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh
MmZlNzYwHhcNMjYwNzI0MDgwMDU5WhcNMjYwNzI1MDgwMDU5WjAzMTEwLwYDVQQD
EygwZjIwOTEwYTU2YWFjNmU0NzYxMGMxN2I1ODllYTBjNGNjMmI1ODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Vi+35ln9o1OAbVGnaQ57QIIAOJ
2OW6RCWHDv2LlfPCdXkKmS5lyJbzQL8DvOgqVECsXY9cQfMY5I5aBXtEiq/YzTAa
jSeD1+sL6zMgkkD5LvPxeVFN1OGkrIV0mAqcbpBQyHFUx5A1FanCraO+qLRw8a0t
9pNU5D/7Hu7jdYmL6FF1LY1ABOMa9DqDbAQPkSKnrgdM/UwLBOOjxk7xrXe+QY+A
Xeg77E4nJHnAiz3mKyNyfxWIa2wRg+zk6i0ZA2haL5oBrZ5M/1XY9jGfidtBesP7
wTQdDxi6CXFlKCd9U82YlyZTAC6SbGPcdZcD5ky1F69xREmZZ6i1hxdgzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8gkQpWqsbkdhDBe1ieoMTMK1hoMB8GA1UdIwQY
MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt
MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4
LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqh82e+p/
rEpskwQMGtwjzL4btBEILJJuWqsSqZjAsCC+72ycX/WTdT7Fmhw0e4JYQalR4kei
+etVtn+vbj1qLRsnC8EKNBSspcMiU8Z44l0BUUKhBG8JDhlQQu2IgUgJcLM4GD3T
DULIerH8R4vYCYJRy2N2C6VUKOmX5gpNLwL4R2zKaAEj25Zg/PSxvSXviPmtuSwQ
6j9yElxaMcGGB7jdOpmUkU4fHgjAlyze88RqsEXbyPkbjrBHF5BAQRlHQFe4KC7O
H56VLhlWA9Oeu/SFQh7Qmi0DOgRvQ8Les6AX3m5dZSR0seGGI5jWE61062i4JVHx
HnmLEit/dI0P5A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:55 2026 by rpki-client