Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: NKeSHzd4zF4Q6JTF6HyYguSl2Jh76Bfij8YTLoz00dE=
Subject key identifier: 2E:0B:39:18:48:D5:E5:75:4C:F0:E9:83:CA:9E:87:7F:23:17:17:89
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019D99631032A8AF93873B2E32BAFE1406DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 03:01:39 +0000
Manifest this update: Fri 17 Apr 2026 03:01:39 +0000
Manifest next update: Sat 18 Apr 2026 03:01:39 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: DpmEF/xa8vWmG9nbXQUd8oNgqTzwvVX8oNsEmVvUzMI=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:10:32:a8:af:93:87:3b:2e:32:ba:fe:14:06:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Apr 17 03:01:39 2026 GMT
Not After : Apr 18 03:01:39 2026 GMT
Subject: CN=2e0b391848d5e5754cf0e983ca9e877f23171789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:0f:23:be:05:29:7f:bf:31:36:d8:1b:28:
65:ad:4d:1a:35:00:f2:46:62:75:03:d4:57:fd:a2:
e7:8d:54:dc:14:4f:53:3a:64:e9:0b:b7:2f:6d:e7:
8d:4e:14:86:f4:67:52:25:fb:4a:17:05:47:ec:b7:
0f:2f:32:cd:46:5d:7e:bd:f9:39:50:33:85:cf:82:
70:26:0f:54:cd:88:82:7d:f1:09:65:a5:95:26:81:
94:b3:1c:be:92:59:9a:71:cf:25:08:b0:1e:44:0e:
34:cc:c8:e5:a6:11:70:0c:7b:b3:dd:3d:e7:05:e1:
78:6c:a1:e5:af:d0:22:0c:c8:76:a7:28:c9:67:c7:
70:83:e5:bb:42:45:e5:76:7e:cf:98:ef:6f:76:fc:
03:1b:56:0e:71:df:4e:d0:ac:de:dc:2e:b2:15:ce:
77:ba:e8:5d:d1:1c:37:c3:cf:bf:20:28:79:e5:21:
69:37:5a:41:70:5f:33:50:c8:72:57:c2:3c:ac:50:
54:18:5e:eb:9f:ef:d7:dd:02:a8:5a:cd:f3:b5:cb:
98:6c:d5:5c:e3:91:16:07:16:ea:16:71:6b:fc:47:
37:c7:46:36:79:49:9a:fc:a6:42:56:65:bd:ca:64:
fc:8f:67:15:b1:99:a0:09:9b:63:91:ec:47:96:de:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:39:18:48:D5:E5:75:4C:F0:E9:83:CA:9E:87:7F:23:17:17:89
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7b:c7:f2:64:7a:61:16:9c:22:11:4d:3d:54:16:0a:96:2f:
aa:42:27:a5:8a:bd:07:3d:f6:48:ae:d7:b6:ab:e7:98:05:0d:
e7:16:71:91:9a:bc:c2:c8:54:b2:29:28:97:a2:33:0c:82:29:
04:47:12:66:aa:d6:87:46:ae:10:b4:41:3e:d1:83:1a:f5:0d:
5d:34:df:5b:82:d8:7d:07:c6:2f:5c:67:1c:5b:0f:71:ae:5a:
a9:01:ae:1c:f2:a3:36:48:7c:05:ba:1b:cb:17:54:21:4b:1e:
64:10:52:fe:af:55:9f:7e:49:5a:98:24:3e:0f:00:a3:18:fb:
22:c0:04:85:88:a6:0a:8b:ff:53:9f:ef:89:07:c0:f5:70:29:
9c:42:84:a4:5e:b0:b2:e7:d8:11:07:fb:d7:16:20:1d:f0:7e:
4b:a3:3e:eb:6a:f0:86:d6:99:ac:9b:7a:45:79:f7:f5:4f:3b:
4f:fd:68:9c:2b:5a:11:ff:8e:f6:93:08:a6:a9:db:2f:9a:6e:
01:cd:e0:bf:7c:c9:5f:62:33:cf:0a:3d:fa:67:79:ea:54:f8:
e0:e7:99:8d:8a:e7:99:5d:99:cb:15:f0:6a:cd:de:6c:1b:68:
be:60:18:a1:84:e2:7d:d8:4d:9d:64:e5:b1:e9:2e:62:7d:5d:
f2:3a:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:12 2026 by rpki-client