Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: 3sQa4GRUGrTi4BrRMqJSS//BLnKQaNooYlWD0MYy2IA=
Subject key identifier: 16:F4:83:B9:19:F1:10:4D:35:27:4D:B8:51:6A:82:13:2A:08:F0:88
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019EC0DAA72C6823FDABD9C3F25F73A96A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1966
Signing time: Sat 13 Jun 2026 12:00:15 +0000
Manifest this update: Sat 13 Jun 2026 12:00:15 +0000
Manifest next update: Sun 14 Jun 2026 12:00:15 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: WAU/LO3kNFOQViBQmTCO8EvI4nB71NW4GM9f30OjjI4=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:a7:2c:68:23:fd:ab:d9:c3:f2:5f:73:a9:6a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Jun 13 12:00:15 2026 GMT
Not After : Jun 14 12:00:15 2026 GMT
Subject: CN=16f483b919f1104d35274db8516a82132a08f088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:19:18:17:a6:c5:37:f4:5e:46:9a:97:b9:
25:4e:42:af:aa:f2:ef:c1:f0:fb:9e:fa:26:f7:9d:
c8:f6:b6:71:95:8d:2b:48:cc:29:3b:9b:dd:64:e1:
99:5d:5b:e2:71:59:46:18:d3:17:ca:94:e0:eb:16:
a5:59:61:44:52:2b:15:f6:27:64:dc:fa:b1:ba:31:
45:39:03:0b:5a:83:06:cd:1f:98:a4:66:81:6d:2e:
60:77:51:ae:46:a6:b0:65:80:57:cf:74:3b:00:9e:
7f:22:c4:d5:3a:ab:41:ff:5f:61:20:21:90:ee:fa:
f7:7b:33:ea:4e:f4:3a:9d:d8:86:86:4b:3d:1d:91:
d6:f4:65:7f:da:7b:71:96:0f:41:50:bb:31:84:00:
dd:b9:36:e1:55:99:48:cb:ff:76:f8:64:74:50:23:
4b:ea:7a:9d:5c:1c:07:ee:1f:13:07:8d:28:65:5c:
97:63:e7:65:21:90:2d:5d:be:2c:6b:cb:18:29:9d:
ae:7a:09:44:21:80:2c:f9:9f:e2:3d:aa:59:f6:f3:
79:ef:46:f0:ab:ad:14:8c:14:2b:38:51:f2:fb:6c:
38:ef:88:1f:e9:b2:0e:f0:ab:1a:b5:12:f0:41:a6:
5b:f2:7c:8a:14:3e:89:2c:3e:71:da:a7:53:fb:26:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:83:B9:19:F1:10:4D:35:27:4D:B8:51:6A:82:13:2A:08:F0:88
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c7:1c:b3:c1:2f:0d:47:e5:bb:d6:93:c7:a2:83:78:a9:f0:
2c:03:8e:97:4b:ec:a2:d1:18:e6:a1:1b:73:58:ff:83:d8:8c:
ee:30:98:3d:d7:7d:4f:90:6b:11:3f:32:21:cf:13:7d:60:cd:
c9:72:0b:f2:35:ed:9e:e3:b5:4d:2f:32:b4:9e:82:22:a0:40:
8c:83:4b:da:19:ef:98:e1:18:3d:c3:c9:bc:d7:38:65:42:53:
14:83:01:10:8d:92:10:f2:aa:c7:f4:28:ba:36:4e:67:09:d4:
95:9b:71:f2:30:19:c2:58:d1:e2:eb:d2:ea:8f:3c:3a:74:af:
e9:ac:a1:51:4a:0c:b5:80:cc:43:d2:52:3b:f6:d5:22:35:c8:
12:3a:bb:57:99:1d:4a:81:c7:7d:cf:34:5a:6c:fd:50:45:e8:
6b:da:d6:34:8d:b6:0e:98:cd:d5:5d:74:3b:8b:a4:17:29:78:
86:23:cb:c6:43:8b:89:17:57:cf:bb:e7:e3:79:6b:43:91:5f:
80:3f:cb:e6:db:14:71:00:db:ba:cf:f6:a7:8e:2c:1e:c6:e9:
41:cd:89:1b:df:76:7d:62:77:d6:f3:dc:9b:28:1c:6e:51:ad:
a6:6d:12:fa:b0:5e:ed:63:16:de:ad:76:36:f7:77:6a:43:d1:
19:d7:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:38 2026 by rpki-client