Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: zuwhzuJBjFjD1bKFCGhnsSSWJOkNiz1nK3CbzyNPL80=
Subject key identifier: 34:D1:E1:2D:49:6D:F3:14:7F:03:97:4D:9D:A5:3A:03:0F:1B:DF:66
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019D2772799DA0EC1342D8E315A7C119BED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: CvVp1LgoGgyv1afkR80q85E3wK27rhstWM4Yzbgj1FQ=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:79:9d:a0:ec:13:42:d8:e3:15:a7:c1:19:be:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=34d1e12d496df3147f03974d9da53a030f1bdf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:ee:53:ba:d3:d5:ba:48:65:e1:47:4c:f2:
2c:f0:2b:7a:37:ac:ef:6f:7c:8e:a9:d4:66:7d:1e:
90:ea:f4:1b:88:21:37:7b:75:83:61:b1:eb:57:d2:
ea:d3:72:f5:f0:7c:20:c6:54:15:26:b3:5d:23:5f:
82:8c:de:ed:1f:62:30:92:bb:c6:a8:25:ee:ec:9f:
8d:d8:ca:8a:71:23:36:7a:1f:d9:28:56:e1:45:92:
3c:5a:99:28:8b:3b:06:20:81:fb:77:7d:db:a1:c0:
7e:10:a0:ac:bb:e3:18:47:84:70:b3:e6:f9:9c:d3:
d4:e2:ef:f7:52:d6:cb:b7:9d:23:e5:2a:a8:13:c7:
29:c6:9e:57:7b:9f:3d:c0:be:d2:05:99:d3:3a:86:
c7:22:b7:02:cf:e8:94:11:ea:1a:08:91:31:f0:d7:
ef:67:ed:c4:7d:0a:77:9d:d6:d2:cb:54:f2:a2:e8:
37:04:96:d2:a1:5b:2f:41:f2:a4:e3:c8:9a:52:0c:
c3:32:7b:9c:d3:da:6b:b8:e4:4b:a7:5f:01:47:43:
f3:c5:a6:d9:43:c6:63:aa:5d:6b:04:a8:2b:6a:18:
94:93:76:32:97:73:3d:b8:b8:2b:34:af:51:8b:df:
d0:a6:fe:ae:e1:fa:d9:e7:1b:bb:a1:34:45:3a:41:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:E1:2D:49:6D:F3:14:7F:03:97:4D:9D:A5:3A:03:0F:1B:DF:66
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:67:e6:05:50:f1:9d:7b:d7:74:6d:a6:66:75:7a:10:a7:1a:
80:52:44:25:94:33:d9:d2:ec:c9:af:0f:70:ec:08:ff:14:23:
55:cd:ab:d4:f8:4c:fd:84:00:8b:e2:f9:8d:a2:ae:ca:e2:66:
e4:61:7e:2d:3f:a2:cb:0a:4c:52:73:7d:78:87:cd:88:fd:21:
29:7f:16:13:30:53:ad:46:d3:55:9e:cc:65:0c:0e:5c:4e:e7:
ae:c8:94:b8:3c:2c:d3:da:43:e7:70:95:9b:99:94:ec:1b:37:
03:c3:94:0f:d1:3b:82:ac:dc:00:09:ab:05:85:03:78:05:e9:
ce:33:c7:67:e5:54:1b:c2:53:c2:a3:71:52:4f:ad:29:5e:8c:
d4:d8:92:95:6a:54:81:ad:57:c6:22:8f:67:0c:a5:c0:d0:bf:
78:33:de:1c:bd:21:48:1f:e8:60:24:8f:97:cf:d6:ad:8f:e1:
db:06:2f:20:e8:d9:6c:cf:b9:93:d4:0a:19:48:6c:67:bd:b1:
d2:b7:9c:dc:31:f0:b2:62:c5:7f:fc:ae:cb:fe:33:5e:36:ce:
ed:21:0f:91:3c:6d:6e:aa:bf:42:e1:02:88:19:5c:77:02:4e:
ae:03:de:22:41:59:14:4e:fa:fc:81:84:85:5a:12:ae:f0:ff:
b7:e0:5d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncnmdoOwTQtjjFafBGb7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm
YjY1ZTAwHhcNMjYwMzI2MDAwMTQ2WhcNMjYwMzI3MDAwMTQ2WjAzMTEwLwYDVQQD
EygzNGQxZTEyZDQ5NmRmMzE0N2YwMzk3NGQ5ZGE1M2EwMzBmMWJkZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujruU7rT1bpIZeFHTPIs8Ct6N6zv
b3yOqdRmfR6Q6vQbiCE3e3WDYbHrV9Lq03L18HwgxlQVJrNdI1+CjN7tH2IwkrvG
qCXu7J+N2MqKcSM2eh/ZKFbhRZI8WpkoizsGIIH7d33bocB+EKCsu+MYR4Rws+b5
nNPU4u/3UtbLt50j5SqoE8cpxp5Xe589wL7SBZnTOobHIrcCz+iUEeoaCJEx8Nfv
Z+3EfQp3ndbSy1Tyoug3BJbSoVsvQfKk48iaUgzDMnuc09pruORLp18BR0PzxabZ
Q8Zjql1rBKgrahiUk3Yyl3M9uLgrNK9Ri9/Qpv6u4frZ5xu7oTRFOkGhoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTR4S1JbfMUfwOXTZ2lOgMPG99mMB8GA1UdIwQY
MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt
ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4
LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGfmBVDx
nXvXdG2mZnV6EKcagFJEJZQz2dLsya8PcOwI/xQjVc2r1PhM/YQAi+L5jaKuyuJm
5GF+LT+iywpMUnN9eIfNiP0hKX8WEzBTrUbTVZ7MZQwOXE7nrsiUuDws09pD53CV
m5mU7Bs3A8OUD9E7gqzcAAmrBYUDeAXpzjPHZ+VUG8JTwqNxUk+tKV6M1NiSlWpU
ga1XxiKPZwylwNC/eDPeHL0hSB/oYCSPl8/WrY/h2wYvIOjZbM+5k9QKGUhsZ72x
0rec3DHwsmLFf/yuy/4zXjbO7SEPkTxtbqq/QuECiBlcdwJOrgPeIkFZFE76/IGE
hVoSrvD/t+BdKg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:34 2026 by rpki-client