Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: ixfDcIiUoW4iu2AEc9CCTBGwiq4NDIrdIEW4JBKhM0M=
Subject key identifier: F2:15:C5:9E:6D:2E:7F:21:69:35:3F:5B:0D:4B:C7:71:28:53:B4:02
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 01A1DE70F76442F901E7E1722FC8C3D17790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1B03
Signing time: Sun 15 Nov 2026 09:01:47 +0000
Manifest this update: Sun 15 Nov 2026 09:01:47 +0000
Manifest next update: Mon 16 Nov 2026 09:01:47 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: LBpF2ijX+d9TL0POxBMnDkumeJwmwGcDSN96U5XdKVc=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:f7:64:42:f9:01:e7:e1:72:2f:c8:c3:d1:77:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Nov 15 09:01:47 2026 GMT
Not After : Nov 16 09:01:47 2026 GMT
Subject: CN=f215c59e6d2e7f2169353f5b0d4bc7712853b402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:bc:1d:f6:21:38:81:b1:34:84:21:2e:3f:
7e:d9:30:43:8c:d2:a5:96:33:a4:bc:5a:e4:46:df:
a0:8a:dd:24:30:04:c4:ca:bf:e0:a9:d1:3b:83:27:
0b:f7:23:82:30:5e:67:08:1b:dc:04:fe:c5:ea:71:
c1:67:4e:dd:ff:e0:62:5c:66:cb:d5:3c:08:85:62:
22:57:26:d0:77:0d:19:08:4e:56:a6:e4:72:5d:1d:
23:8a:e9:ec:fd:2b:d7:19:1a:e2:eb:3e:6c:f9:fa:
6e:2b:ce:c2:2f:c8:db:d4:13:bb:4d:12:7e:eb:a6:
bb:14:74:2e:d4:a1:2d:61:b0:57:5f:3d:6d:f1:35:
fa:b8:b4:ec:86:46:02:d1:ff:93:3b:b0:29:b1:80:
25:7d:17:4a:49:ff:a1:43:dd:bf:3c:19:aa:9b:80:
b9:5e:da:7b:58:33:1c:31:37:49:4a:ca:f6:13:4b:
5c:15:6c:bf:cd:0c:ac:98:e7:f6:de:1a:b5:5c:e9:
f6:ec:a1:53:4a:e8:54:8f:0f:d5:91:c5:d7:28:d8:
de:dd:a4:ab:0c:bb:64:8c:f6:dd:f5:88:bb:17:e8:
e9:93:1a:3e:66:0e:a4:4b:a5:59:a2:56:b6:eb:35:
e0:83:50:f7:44:bc:5f:4e:2f:93:3e:fe:f7:82:11:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:15:C5:9E:6D:2E:7F:21:69:35:3F:5B:0D:4B:C7:71:28:53:B4:02
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:98:95:5f:a8:f7:09:e2:f6:ac:69:fc:b5:79:d2:20:0a:
c2:80:c8:dc:1a:3e:19:f3:5b:a6:32:ea:07:dd:24:91:ee:72:
80:c2:ee:0a:8c:97:d4:d9:5c:bc:34:e3:4e:8c:b8:4a:bf:b4:
af:53:d5:ba:34:6f:58:eb:d9:42:1b:39:05:e1:92:a5:2e:da:
f6:63:ce:7a:29:d1:26:10:d1:0f:c7:cc:21:76:74:63:c1:57:
ef:4a:ce:04:5b:5d:4d:f2:66:bf:f7:bf:4e:da:c2:d5:05:57:
fd:68:a9:00:78:4f:76:bf:25:f2:0d:aa:c2:82:7a:c5:11:7f:
62:4a:42:dd:2d:92:a8:4c:eb:77:54:8e:16:41:7f:f3:07:9f:
3a:b9:c8:86:d0:23:7b:3d:0c:d0:2f:4c:06:aa:17:ba:2c:da:
8d:da:27:f6:c5:72:e0:ff:1a:d4:9e:b3:2a:d6:f9:51:c3:bd:
5e:7b:c0:dc:a3:62:22:ac:dd:07:f7:94:55:fa:7e:a6:9c:e7:
11:32:33:99:0e:5b:4d:4d:b7:40:9b:f9:89:d8:e5:d7:1c:2f:
86:86:f4:f4:ab:cd:31:80:b4:fc:18:e2:4c:50:16:e3:8c:0d:
48:26:df:12:eb:93:4c:30:10:4c:4e:bd:d2:17:2b:f6:01:fc:
f8:a9:19:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecPdkQvkB5+FyL8jD0XeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm
YjY1ZTAwHhcNMjYxMTE1MDkwMTQ3WhcNMjYxMTE2MDkwMTQ3WjAzMTEwLwYDVQQD
EyhmMjE1YzU5ZTZkMmU3ZjIxNjkzNTNmNWIwZDRiYzc3MTI4NTNiNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEa8HfYhOIGxNIQhLj9+2TBDjNKl
ljOkvFrkRt+git0kMATEyr/gqdE7gycL9yOCMF5nCBvcBP7F6nHBZ07d/+BiXGbL
1TwIhWIiVybQdw0ZCE5WpuRyXR0jiuns/SvXGRri6z5s+fpuK87CL8jb1BO7TRJ+
66a7FHQu1KEtYbBXXz1t8TX6uLTshkYC0f+TO7ApsYAlfRdKSf+hQ92/PBmqm4C5
Xtp7WDMcMTdJSsr2E0tcFWy/zQysmOf23hq1XOn27KFTSuhUjw/VkcXXKNje3aSr
DLtkjPbd9Yi7F+jpkxo+Zg6kS6VZola26zXgg1D3RLxfTi+TPv73ghGfkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIVxZ5tLn8haTU/Ww1Lx3EoU7QCMB8GA1UdIwQY
MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt
ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4
LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGreYlV+o
9wni9qxp/LV50iAKwoDI3Bo+GfNbpjLqB90kke5ygMLuCoyX1NlcvDTjToy4Sr+0
r1PVujRvWOvZQhs5BeGSpS7a9mPOeinRJhDRD8fMIXZ0Y8FX70rOBFtdTfJmv/e/
TtrC1QVX/WipAHhPdr8l8g2qwoJ6xRF/YkpC3S2SqEzrd1SOFkF/8wefOrnIhtAj
ez0M0C9MBqoXuizajdon9sVy4P8a1J6zKtb5UcO9XnvA3KNiIqzdB/eUVfp+ppzn
ETIzmQ5bTU23QJv5idjl1xwvhob09KvNMYC0/BjiTFAW44wNSCbfEuuTTDAQTE69
0hcr9gH8+KkZFA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:07:26 2026 by rpki-client