
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: 4fLOEjuAlhn4o/oInk0qD0Y/zpx2r2VcYyGNorFky8U=
Subject key identifier: B6:3D:60:C5:D8:01:6E:56:E0:11:D8:40:99:35:E1:32:63:E0:A4:C5
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019FAC3F07AD0791E303580EEFAFC8DCA0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 119B
Signing time: Wed 29 Jul 2026 05:00:39 +0000
Manifest this update: Wed 29 Jul 2026 05:00:39 +0000
Manifest next update: Thu 30 Jul 2026 05:00:39 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: YMCSNvei67WiGnPO6QREvGhspLJvNmntDylO7+oxedc=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:07:ad:07:91:e3:03:58:0e:ef:af:c8:dc:a0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Jul 29 05:00:39 2026 GMT
Not After : Jul 30 05:00:39 2026 GMT
Subject: CN=b63d60c5d8016e56e011d8409935e13263e0a4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:69:c5:d7:bc:2e:2f:f5:92:39:7f:58:a3:
a8:51:dd:d4:11:5a:8e:c5:66:64:a2:2f:9d:97:46:
0e:af:1a:88:37:1e:d1:23:b2:f6:04:99:8c:06:5d:
0e:ab:cc:81:a5:07:88:a0:c9:cd:a6:99:b1:00:e8:
51:ba:85:c7:a5:d8:ea:e8:df:2f:5e:80:80:aa:73:
02:29:8c:6b:0b:22:49:0c:d5:f8:f8:a4:4d:cc:58:
fa:14:bd:61:8e:f9:7b:7b:31:75:8a:13:92:f5:b9:
d0:06:d3:cd:6a:5b:21:ab:14:1b:33:af:6e:af:2a:
86:e9:fd:64:66:2e:86:00:22:4e:6f:13:3d:eb:db:
6d:4c:24:dc:72:9f:50:3f:6f:20:3b:d0:16:9c:96:
a3:ca:e7:31:87:dc:68:3c:24:17:3f:1b:42:5a:f7:
bf:e8:c9:a1:84:7b:1d:fa:71:f9:9f:69:db:ce:aa:
1a:3c:e4:37:09:52:28:b6:88:fd:4a:90:bf:c2:b6:
77:e7:8a:9d:e9:72:15:9c:da:ce:7e:a9:25:3d:73:
8f:0c:c6:30:52:57:a2:be:63:54:bc:91:8c:e7:84:
ea:70:d0:fe:88:60:f2:b7:b5:9e:f6:84:61:fe:d0:
82:da:1a:51:ca:68:2d:8f:6d:24:33:8c:26:13:20:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:60:C5:D8:01:6E:56:E0:11:D8:40:99:35:E1:32:63:E0:A4:C5
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8c:ed:40:24:6e:4a:a3:52:6c:9e:90:b9:40:c0:55:d0:fa:
c1:75:4a:d4:be:d5:31:91:c6:2c:97:3c:0a:72:cb:fc:c7:c8:
e4:b3:e7:07:ba:fa:8e:07:55:59:25:e9:f1:9b:a6:05:22:85:
96:81:28:5c:2d:d1:92:c5:db:15:95:9e:69:ce:25:a7:a5:f6:
06:ee:78:f0:7d:b4:bc:52:c0:d9:ac:30:e6:84:dc:69:53:b4:
4f:de:a2:f9:9f:50:55:0c:49:a9:1f:21:2b:0a:44:b0:b8:f2:
cc:09:c6:22:91:12:49:e6:9a:23:b5:c4:dc:c6:25:10:dc:71:
9c:45:fb:59:3f:ba:3d:e6:d4:0d:a0:27:77:c0:e4:36:da:41:
4c:1a:b8:d0:0b:45:ad:83:20:e7:82:a9:7a:7f:47:42:c4:bc:
1f:a2:c7:72:10:0e:fd:1e:4e:aa:b4:8e:13:ba:9c:04:b4:dc:
88:60:ec:e1:e1:b3:15:b4:5a:c0:9f:ae:41:8b:10:0c:a4:8a:
23:24:db:e5:48:5d:28:63:f8:78:d2:93:2b:be:29:a7:87:60:
ad:7c:70:d8:bb:6f:4c:e3:4b:01:98:93:a6:08:9e:a9:56:99:
5b:2c:89:7a:4d:e9:1e:64:a5:1e:48:a9:4c:d3:64:ba:27:b2:
b4:6c:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:07 2026 by rpki-client