Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: CIyshttnvXx/qgPeANK4biCcynHihUiUotA3vcPgQb8=
Subject key identifier: BD:75:70:15:C9:28:DF:93:C3:AB:AF:3A:7E:6A:BD:B0:A8:C8:D2:BD
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019FA29717B4A5AD51A898CFF8DC6804D4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 1196
Signing time: Mon 27 Jul 2026 08:00:38 +0000
Manifest this update: Mon 27 Jul 2026 08:00:38 +0000
Manifest next update: Tue 28 Jul 2026 08:00:38 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: BrdgeA8tgimjNQbxxGvWAWWSh9rKF7eN2+OdyUkj6G4=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:17:b4:a5:ad:51:a8:98:cf:f8:dc:68:04:d4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Jul 27 08:00:38 2026 GMT
Not After : Jul 28 08:00:38 2026 GMT
Subject: CN=bd757015c928df93c3abaf3a7e6abdb0a8c8d2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:67:5f:f8:ff:dc:da:f9:8a:e9:b1:90:06:
91:6d:87:4c:cc:0c:6d:06:f7:78:ac:7d:b8:57:00:
24:38:bc:05:bf:ac:c3:df:29:fc:8e:aa:77:58:52:
dc:41:53:15:7f:21:9b:05:11:fc:a4:d4:62:99:dc:
22:ae:d7:ab:5a:3a:c7:e4:80:77:19:ec:f8:c9:e7:
6c:84:a3:e2:50:9b:54:cc:a8:bd:ce:da:68:97:9e:
87:5b:da:ae:01:8b:76:3d:ef:b9:1e:69:8d:d2:a7:
c3:fc:fe:8c:a7:2c:37:c8:42:3d:be:63:a6:ca:6c:
2d:0f:c6:49:b7:bb:d3:c0:55:f1:1a:76:ab:9e:cf:
4f:66:53:de:c4:72:1b:94:44:3e:fc:d2:9d:81:bf:
21:e1:1b:cd:28:4a:64:e4:de:3b:79:a0:43:cd:a0:
1e:91:b9:7f:85:69:ca:00:35:6e:99:a2:6a:6c:5f:
d7:9b:a9:63:62:d5:2a:7f:f0:5c:5f:31:18:1c:4b:
ad:32:f7:38:fc:2b:9b:5f:29:a4:04:c7:cb:5c:b0:
39:9f:2e:21:dd:ae:3f:5e:59:d5:49:b0:90:08:c1:
2d:65:52:09:1c:05:73:13:9b:4f:0e:18:7b:ee:38:
e4:89:f5:35:bf:01:1b:40:e4:23:64:de:40:f3:41:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:70:15:C9:28:DF:93:C3:AB:AF:3A:7E:6A:BD:B0:A8:C8:D2:BD
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:28:db:34:d3:d9:bc:1b:65:eb:ee:79:c4:af:ef:2c:c8:ec:
fe:2b:23:5b:d9:e0:d0:92:91:9f:9f:2e:2c:3f:4a:d0:f2:5c:
8c:3b:01:d0:b6:1b:70:85:b9:d4:7d:0e:2b:2f:e3:13:86:5b:
ab:4b:27:2b:38:b0:a0:75:eb:c9:4b:ef:b5:7c:93:5f:0e:18:
bb:ad:e3:05:e1:62:49:24:6e:c9:04:0b:f4:d3:cd:1f:34:55:
26:c6:c4:6e:d0:b2:b6:ba:98:07:5d:c5:e4:7b:dc:f1:df:76:
2c:ad:cb:44:d4:d6:16:39:46:bd:d8:aa:2f:7a:2f:97:0e:21:
aa:26:1e:10:5e:c8:c9:16:00:85:b2:6e:54:49:73:31:da:12:
d1:b1:f7:11:de:a6:aa:04:e0:45:1f:d4:f0:62:9b:ae:8a:48:
37:3e:8e:60:f1:69:e2:80:ea:a2:ee:c4:a5:b9:7c:8b:86:eb:
41:f7:b4:ff:2f:a6:0b:62:fe:65:6d:07:03:b6:da:cd:28:3f:
b1:2d:37:b5:e2:62:bf:91:61:bf:63:f9:f2:0c:04:17:2e:8d:
87:6a:a3:16:7d:24:8a:f0:87:f1:aa:10:69:f3:13:ca:d2:2e:
6a:30:3d:12:1d:11:64:19:b5:09:3d:e4:f2:35:ac:b3:b8:28:
81:f4:d5:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ilxe0pa1RqJjP+NxoBNTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh
MmZlNzYwHhcNMjYwNzI3MDgwMDM4WhcNMjYwNzI4MDgwMDM4WjAzMTEwLwYDVQQD
EyhiZDc1NzAxNWM5MjhkZjkzYzNhYmFmM2E3ZTZhYmRiMGE4YzhkMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDBnX/j/3Nr5iumxkAaRbYdMzAxt
Bvd4rH24VwAkOLwFv6zD3yn8jqp3WFLcQVMVfyGbBRH8pNRimdwirterWjrH5IB3
Gez4yedshKPiUJtUzKi9ztpol56HW9quAYt2Pe+5HmmN0qfD/P6Mpyw3yEI9vmOm
ymwtD8ZJt7vTwFXxGnarns9PZlPexHIblEQ+/NKdgb8h4RvNKEpk5N47eaBDzaAe
kbl/hWnKADVumaJqbF/Xm6ljYtUqf/BcXzEYHEutMvc4/CubXymkBMfLXLA5ny4h
3a4/XlnVSbCQCMEtZVIJHAVzE5tPDhh77jjkifU1vwEbQOQjZN5A80HO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL11cBXJKN+Tw6uvOn5qvbCoyNK9MB8GA1UdIwQY
MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt
MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4
LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCjbNNPZ
vBtl6+55xK/vLMjs/isjW9ng0JKRn58uLD9K0PJcjDsB0LYbcIW51H0OKy/jE4Zb
q0snKziwoHXryUvvtXyTXw4Yu63jBeFiSSRuyQQL9NPNHzRVJsbEbtCytrqYB13F
5Hvc8d92LK3LRNTWFjlGvdiqL3ovlw4hqiYeEF7IyRYAhbJuVElzMdoS0bH3Ed6m
qgTgRR/U8GKbropINz6OYPFp4oDqou7Epbl8i4brQfe0/y+mC2L+ZW0HA7bazSg/
sS03teJiv5Fhv2P58gwEFy6Nh2qjFn0kivCH8aoQafMTytIuajA9Eh0RZBm1CT3k
8jWss7gogfTVzw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:18:29 2026 by rpki-client