
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier: vtqtEfLtlWHse0MQz4qImcxyqawbUjg5jfjeqAOO/44=
Subject key identifier: 3A:74:51:A8:67:4E:7A:4F:29:58:C5:F6:AF:6A:76:8B:A1:35:7D:0A
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019CBF299C525C312BEB2CD4C6247DAFE8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number: 168A
Signing time: Thu 05 Mar 2026 18:01:41 +0000
Manifest this update: Thu 05 Mar 2026 18:01:41 +0000
Manifest next update: Fri 06 Mar 2026 18:01:41 +0000
Files and hashes: 1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
2: 1-R3TJEB1D957QD1tYOh6D052f5Q.roa (hash: bF0D4wZ7s3Qqr3mXkvQEOoRSdwhhsjFFJKgc7cqZo8s=)
3: 26rLNje-5GxvYZVT0swfwJnqk7o.roa (hash: QK5jjtwOLc2LvgvPPlN4ghX4dCXmOU5tCJW4D3OFYHA=)
4: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (hash: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=)
5: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
6: 7jZAi51aHExWPZHg8Bwl9g1fDmo.roa (hash: TNKFGF2TYtoFuGPgkD5XD7N/fcDVAQd/RPU9vBC0xJw=)
7: 8R7LSfhE3UtkOqqB0W3_nrZ3ho4.roa (hash: WHfNau4t7umd5KoTkut/GoNz6JYCazshlb2JdkIEsSE=)
8: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
9: BmmyqjzhhXCXtNHXQfS0o58DPKI.roa (hash: DmbfSz+gKQgjE19mwt2GeyXLjwNpk6u4gHjc47wtCuE=)
10: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
11: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
12: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
13: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: VdfGRrugWph3kUGWXsC+Mcu0/giwZ4lph8/LBJIGYXM=)
14: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
15: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
16: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
17: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
18: SieC0IyKC-s4NPMTRe3DmUB4FlU.roa (hash: PHIVyy53IZ8dhds+WPFhb109SCgpqIxERR2QN3DJoJI=)
19: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
20: XFj-fnhFgawupIWxTj-icBAYgOM.roa (hash: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=)
21: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (hash: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=)
22: YhJKl7AH9KvyQ9rlDo_0amk0ptk.roa (hash: PIyIy62ey151jJrTV3rH4pTgvt8halTI4IYk/dvJ1HU=)
23: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
24: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
25: bQQuskf_Gdw4DO36Hp_jpIO7obs.roa (hash: iHc9KJJ7h5KMbS9+RDpsi3zVAhZamVfT5BEtYu5oO3E=)
26: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
27: c_j3yg5BcCKfjWJSyLhPsoCl8fo.roa (hash: weVyx7PM+QIce0xZCK8Hvkau7tg9BgiipAufz6BRHN4=)
28: fBBdkc9OcFL9IFNGRsTh7kzJnu8.roa (hash: 3718oBliIf8ahxlcxxTMJ4qT3erkgc0V2HhmRL6/2UY=)
29: fDvTCb65T0NBgfyYMw8klNFzoZc.roa (hash: iBd2cBxyy2dAUeAKty88sfgipeeadpR8WNmR7CuYLUc=)
30: f_FM5aYYFD8ySbs3-yt5otduaRM.roa (hash: lIl1eF0+KnIkUbSdLUIqNysQ5npLcyCf9ozlvmFKa8A=)
31: h9u4DfipobReXuEiWzWzM5DyqDg.roa (hash: EkmpfqduZILDOkjZmc9IOhDZh2tXHoeaKKFboeH+zxA=)
32: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
33: i6c0fz52t6bu--A_rRnfITTUlCo.roa (hash: KAIju8KEB8xo308kFMUSGZu/p5Ia6QPecoz7gKo7AxU=)
34: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (hash: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw=)
35: jgB1BVjnSKjwrRYXRD9mqswIqgg.roa (hash: P69vvjLIDAW8RokNa2JlifEO8AoFeyWx23eDMWo0u6g=)
36: nwRskVFO7jVpgv0FgU_I-l_JL24.roa (hash: jE2BzVrznI2L2o690JEPpHV4meuzDSDEB31wOas8YwE=)
37: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
38: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
39: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
40: vNjUtTl5TDF7FLt_LUcWXa6UMv0.roa (hash: dq4TnmZiEM7MrzwPhSEuA5J/9VcYxfK23x7Z1EsSn4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 18:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:29:9c:52:5c:31:2b:eb:2c:d4:c6:24:7d:af:e8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 5 18:01:41 2026 GMT
Not After : Mar 6 18:01:41 2026 GMT
Subject: CN=3a7451a8674e7a4f2958c5f6af6a768ba1357d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:63:20:9a:3a:06:f2:0e:47:6b:57:4e:94:
64:9e:77:61:94:33:94:81:a6:0b:ec:1e:6d:97:8f:
2a:76:a7:15:f1:63:f5:57:31:f0:51:00:f6:80:e8:
87:b2:0e:f8:10:89:51:73:a7:80:b2:c4:76:72:3a:
1e:6d:4e:72:71:49:91:61:cf:a9:3f:c4:e3:7a:9d:
bc:44:02:62:2f:32:f9:ea:cb:4c:fb:a2:46:0f:88:
5c:96:2a:1c:f3:36:b3:0b:45:f7:f9:6f:47:a9:87:
57:6b:bc:bd:e7:9c:58:cc:c8:c1:8a:06:de:8c:f1:
3a:08:cb:8c:8f:aa:ec:db:61:b5:32:bf:62:91:4a:
b9:67:c5:a8:98:35:ed:1c:f4:e9:2f:87:31:50:86:
55:db:8e:78:4e:ac:87:3a:8a:ab:95:74:05:5d:e3:
f0:bb:31:6a:a9:aa:9e:d4:07:f9:dd:88:dd:03:8c:
b1:48:f9:ef:86:10:8c:f3:26:9b:a9:7d:b8:b1:c6:
98:0b:5a:79:a9:1c:0f:26:ab:6a:82:36:39:a4:0b:
70:a0:6e:e0:21:f9:5f:ef:ce:d5:1c:7e:0e:37:39:
dd:2a:50:30:4b:41:d8:53:37:62:4e:5c:3e:05:3e:
c9:2c:35:20:7a:a0:4d:d1:99:49:b0:cb:71:0b:67:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:51:A8:67:4E:7A:4F:29:58:C5:F6:AF:6A:76:8B:A1:35:7D:0A
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3f:5d:f7:b8:15:70:51:2c:26:7a:0b:7a:e7:cb:6c:52:ed:
df:c4:63:ab:fe:ca:6c:9b:40:9a:a7:7f:c1:9a:29:5c:91:dc:
d6:9b:53:85:f2:4b:f6:3e:30:9e:97:32:79:a2:f7:ea:f4:a2:
d4:83:9c:82:1c:de:05:bd:bd:73:9a:82:fb:16:f4:13:89:60:
d6:06:69:eb:ca:55:69:e3:89:e5:54:6c:97:2c:5e:87:ea:ee:
e6:5b:81:cb:35:57:7d:48:be:37:c2:4f:0b:a1:ea:24:2d:9d:
72:1f:32:98:db:74:8f:c8:a0:1e:77:2d:b5:7a:e9:3d:4d:4a:
6c:9c:dc:39:14:62:12:25:f7:7d:a5:62:74:ae:1e:d0:52:1d:
25:aa:1b:39:d2:a8:63:50:30:c5:d9:70:f8:ba:d9:c6:79:ab:
b2:f6:74:49:b3:a1:36:fc:0d:9e:ec:ef:ee:cb:01:26:a3:90:
33:a0:91:99:13:5e:cd:ed:bc:b8:a0:52:13:e4:74:5f:64:7e:
26:3e:3a:e6:04:c8:81:52:91:8c:81:79:f9:6a:5f:11:7b:2b:
d4:1f:be:e2:89:ac:48:ae:07:af:e8:20:4c:0f:94:6e:f0:66:
46:a6:3f:04:6b:5d:f6:84:41:24:d3:a5:a2:05:ae:80:28:76:
2a:94:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:47:35 2026 by rpki-client