Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: 49jJBvLqkMDdZfh9/KWmhob5x9fzO3AD/H602lCrnAU=
Subject key identifier: 2E:3D:C3:AA:82:90:BF:15:44:2F:4E:55:EF:BD:5D:16:E7:12:72:54
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 01A0D012616FF77E59050B61CD74EDEFA089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1A77
Signing time: Wed 23 Sep 2026 21:01:00 +0000
Manifest this update: Wed 23 Sep 2026 21:01:00 +0000
Manifest next update: Thu 24 Sep 2026 21:01:00 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: XMeHSwKskU/TaPTj6RaZblNXJRoSuhZ1CY/VQ5BUCu8=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:61:6f:f7:7e:59:05:0b:61:cd:74:ed:ef:a0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Sep 23 21:01:00 2026 GMT
Not After : Sep 24 21:01:00 2026 GMT
Subject: CN=2e3dc3aa8290bf15442f4e55efbd5d16e7127254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:f6:ce:a7:0c:d1:53:b7:51:27:a3:3f:44:
03:93:5f:e1:06:7d:42:df:93:9c:bb:e7:86:b0:8a:
35:43:57:4b:e3:2e:48:d3:b8:6b:72:04:68:a7:c6:
46:f6:96:5c:b4:a9:a1:a7:0a:32:e2:cd:f6:96:e2:
97:0c:8e:db:1b:6b:d2:6e:5c:ff:c9:5f:08:fb:32:
fd:d4:e9:28:de:ce:a5:2b:f4:90:02:34:19:ef:0e:
05:d7:60:5b:55:28:93:85:f9:c3:e8:dd:a7:15:df:
c3:6c:5d:10:d7:3e:03:d6:e9:ec:0a:12:0a:2a:fc:
42:59:30:25:8e:51:61:de:0f:96:91:ec:10:a5:c2:
bf:0c:b2:3e:af:65:39:f0:2d:92:9e:a6:a6:1d:cf:
ef:94:39:3a:c4:ed:77:e8:ef:10:b7:a7:9c:10:de:
3a:40:84:32:5d:11:29:58:47:89:d9:b0:fa:3b:a2:
1d:6b:ac:23:b9:9b:74:19:28:63:d8:83:f7:e1:67:
ca:5e:50:2a:e8:e5:c5:06:18:a0:81:2a:64:29:c3:
b4:d7:0d:e9:35:5b:bb:9f:cb:d7:6b:e2:94:50:b7:
09:9d:47:56:2a:9c:63:24:b1:37:60:40:14:f9:27:
2a:a4:d5:06:30:95:ac:07:f9:9e:f6:7f:bc:e7:79:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3D:C3:AA:82:90:BF:15:44:2F:4E:55:EF:BD:5D:16:E7:12:72:54
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:d4:a3:55:1e:e7:9c:5c:7f:07:37:8e:7b:ba:3a:84:38:
0c:00:06:c1:9e:eb:6d:76:b7:4e:0b:99:52:38:80:f6:40:55:
55:16:7f:bc:ec:82:2a:ad:4c:a7:d8:0e:02:fb:e9:b7:10:b5:
fb:f3:6b:61:d8:6b:57:82:d0:3c:c0:aa:ad:c4:7a:2a:d4:a4:
aa:21:82:01:70:39:ec:7f:cd:9e:b8:08:bb:ed:68:14:1a:46:
8d:30:06:ae:04:3c:23:78:8f:a0:78:c2:1e:cb:f4:b1:19:9e:
d6:8a:bd:e5:31:3e:9c:60:00:e9:54:55:35:8a:b9:50:ec:60:
ba:b3:25:8b:c1:0d:ec:81:57:95:f6:7a:20:16:6b:6d:f9:db:
25:e4:6d:c7:a7:90:fe:3f:b9:69:c2:07:35:7c:9a:de:c6:2d:
1b:5a:5d:43:f9:0a:f0:68:d8:35:75:26:c8:0b:47:85:9a:29:
b5:b5:d0:94:de:7f:b3:3f:8b:a0:10:55:a4:b4:94:79:94:c4:
ff:32:3d:12:8f:c6:5b:77:06:bd:74:5e:9c:c4:db:33:60:2d:
e2:35:45:3c:69:54:42:26:84:62:35:ab:7d:70:53:b9:06:cc:
87:68:75:d5:d5:fe:95:82:ff:57:38:88:7a:23:75:f9:f8:04:
5d:86:61:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEmFv935ZBQthzXTt76CJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm
YjY1ZTAwHhcNMjYwOTIzMjEwMTAwWhcNMjYwOTI0MjEwMTAwWjAzMTEwLwYDVQQD
EygyZTNkYzNhYTgyOTBiZjE1NDQyZjRlNTVlZmJkNWQxNmU3MTI3MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNf2zqcM0VO3USejP0QDk1/hBn1C
35Ocu+eGsIo1Q1dL4y5I07hrcgRop8ZG9pZctKmhpwoy4s32luKXDI7bG2vSblz/
yV8I+zL91Oko3s6lK/SQAjQZ7w4F12BbVSiThfnD6N2nFd/DbF0Q1z4D1unsChIK
KvxCWTAljlFh3g+WkewQpcK/DLI+r2U58C2SnqamHc/vlDk6xO136O8Qt6ecEN46
QIQyXREpWEeJ2bD6O6Ida6wjuZt0GShj2IP34WfKXlAq6OXFBhiggSpkKcO01w3p
NVu7n8vXa+KUULcJnUdWKpxjJLE3YEAU+ScqpNUGMJWsB/me9n+853kQAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC49w6qCkL8VRC9OVe+9XRbnEnJUMB8GA1UdIwQY
MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt
ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4
LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfzUo1Ue
55xcfwc3jnu6OoQ4DAAGwZ7rbXa3TguZUjiA9kBVVRZ/vOyCKq1Mp9gOAvvptxC1
+/NrYdhrV4LQPMCqrcR6KtSkqiGCAXA57H/NnrgIu+1oFBpGjTAGrgQ8I3iPoHjC
Hsv0sRme1oq95TE+nGAA6VRVNYq5UOxgurMli8EN7IFXlfZ6IBZrbfnbJeRtx6eQ
/j+5acIHNXya3sYtG1pdQ/kK8GjYNXUmyAtHhZoptbXQlN5/sz+LoBBVpLSUeZTE
/zI9Eo/GW3cGvXRenMTbM2At4jVFPGlUQiaEYjWrfXBTuQbMh2h11dX+lYL/VziI
eiN1+fgEXYZh0g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:31 2026 by rpki-client