Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: +NpNF1DvnqUFxfuEecKnpax8E592rCG+XDyreZSsGcw=
Subject key identifier: 7A:6D:B8:9C:05:51:05:62:09:00:78:23:C0:3A:2C:63:29:EC:39:CD
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019FAC7609DB25369A05AD1B60E61B779D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 19E0
Signing time: Wed 29 Jul 2026 06:00:44 +0000
Manifest this update: Wed 29 Jul 2026 06:00:44 +0000
Manifest next update: Thu 30 Jul 2026 06:00:44 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: nUFifvQRcUOTI+98PKfNCIeb5mjE7shDIy43Mo7O4Yw=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:09:db:25:36:9a:05:ad:1b:60:e6:1b:77:9d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Jul 29 06:00:44 2026 GMT
Not After : Jul 30 06:00:44 2026 GMT
Subject: CN=7a6db89c0551056209007823c03a2c6329ec39cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:9e:ae:4d:d4:06:29:62:ad:39:3a:c2:c9:
61:26:0d:e2:95:7f:12:2a:5a:04:6d:b0:eb:84:6b:
38:f1:2c:eb:92:e3:61:ac:b0:c1:33:b8:1e:8d:3a:
5c:06:e4:f6:1a:27:9d:7d:74:a2:44:30:ea:79:51:
5e:b4:5a:0e:80:89:7d:28:9e:5a:9b:a3:54:ad:65:
40:44:d7:2a:7e:1c:7d:0d:18:75:ad:84:17:60:cb:
ce:03:8e:40:c5:97:72:bc:f5:43:42:1a:dd:33:e5:
87:d7:51:e2:4e:20:73:2d:f0:41:ff:6f:5b:84:aa:
ab:ee:51:a5:3a:7f:e6:5e:1e:0a:63:08:9b:5a:3c:
c6:37:bf:ae:27:b7:4c:ed:b4:d3:17:2f:38:46:a5:
4c:50:86:45:23:ed:2a:e3:89:fd:9e:ae:5b:c4:ec:
77:46:2c:9c:a4:6e:7d:4b:d3:d0:ac:ff:07:ec:43:
08:27:29:28:db:2a:09:43:14:74:f3:f4:90:c8:c1:
86:70:35:90:82:cd:b2:5c:d9:42:64:53:2a:04:a3:
37:5f:aa:67:df:14:2f:22:bd:2a:f6:05:ef:e0:eb:
c6:5c:ec:c0:03:58:80:2b:ba:45:81:b2:43:34:34:
66:9e:fc:36:59:8e:b7:0f:5e:5b:24:4f:27:35:8b:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:B8:9C:05:51:05:62:09:00:78:23:C0:3A:2C:63:29:EC:39:CD
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:74:1d:8e:ac:91:d4:54:ce:c3:ae:98:ba:8f:f3:23:0d:df:
af:ac:d8:9a:a7:cf:8d:80:c3:bb:3c:2d:3c:68:d3:eb:ca:6d:
8c:cd:ff:5d:07:42:6f:43:60:ef:1c:b5:e5:76:7c:61:d0:87:
ac:c4:e2:c0:19:5c:46:11:fb:10:c8:07:44:c1:89:ee:f7:00:
f1:59:88:a9:df:8a:54:6d:f4:07:d8:cd:80:2f:3b:0b:32:b7:
8e:96:c8:30:0f:54:5e:fe:fd:fd:c1:d4:7e:41:cf:aa:78:d3:
29:f4:d3:c0:45:cf:c6:94:1a:5a:04:55:f0:a6:9f:69:de:58:
3a:89:d1:ae:9a:cc:c5:d1:42:cd:e4:f3:4a:e9:c8:6e:3b:90:
fc:38:51:d0:d4:a2:b3:02:b5:84:6c:e4:d8:38:fa:5d:64:36:
65:cb:9d:e4:52:26:58:de:e8:42:d6:67:3f:8a:1d:3f:03:c5:
8a:65:1e:b8:19:f8:a7:4a:f3:70:14:9a:ba:aa:0e:02:48:ef:
bb:db:35:99:5f:72:44:0f:d8:12:c2:d1:8f:45:48:80:3c:15:
d9:a1:ec:69:fa:3e:9e:50:da:cd:1f:95:57:fd:8e:9b:ba:29:
31:7d:34:f0:c5:17:b8:90:b2:c8:06:50:15:5b:e2:db:0f:12:
a9:d3:77:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdgnbJTaaBa0bYOYbd52fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm
YjY1ZTAwHhcNMjYwNzI5MDYwMDQ0WhcNMjYwNzMwMDYwMDQ0WjAzMTEwLwYDVQQD
Eyg3YTZkYjg5YzA1NTEwNTYyMDkwMDc4MjNjMDNhMmM2MzI5ZWMzOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU6erk3UBilirTk6wslhJg3ilX8S
KloEbbDrhGs48SzrkuNhrLDBM7gejTpcBuT2GiedfXSiRDDqeVFetFoOgIl9KJ5a
m6NUrWVARNcqfhx9DRh1rYQXYMvOA45AxZdyvPVDQhrdM+WH11HiTiBzLfBB/29b
hKqr7lGlOn/mXh4KYwibWjzGN7+uJ7dM7bTTFy84RqVMUIZFI+0q44n9nq5bxOx3
RiycpG59S9PQrP8H7EMIJyko2yoJQxR08/SQyMGGcDWQgs2yXNlCZFMqBKM3X6pn
3xQvIr0q9gXv4OvGXOzAA1iAK7pFgbJDNDRmnvw2WY63D15bJE8nNYsNYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHptuJwFUQViCQB4I8A6LGMp7DnNMB8GA1UdIwQY
MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt
ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4
LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXQdjqyR
1FTOw66Yuo/zIw3fr6zYmqfPjYDDuzwtPGjT68ptjM3/XQdCb0Ng7xy15XZ8YdCH
rMTiwBlcRhH7EMgHRMGJ7vcA8VmIqd+KVG30B9jNgC87CzK3jpbIMA9UXv79/cHU
fkHPqnjTKfTTwEXPxpQaWgRV8Kafad5YOonRrprMxdFCzeTzSunIbjuQ/DhR0NSi
swK1hGzk2Dj6XWQ2Zcud5FImWN7oQtZnP4odPwPFimUeuBn4p0rzcBSauqoOAkjv
u9s1mV9yRA/YEsLRj0VIgDwV2aHsafo+nlDazR+VV/2Om7opMX008MUXuJCyyAZQ
FVvi2w8SqdN31A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:28 2026 by rpki-client