Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: s95E8nu6f+8gFUJUMlhQhwQBkN2WptWAIHOXRYgH0JE=
Subject key identifier: 2C:71:66:25:21:EC:84:9E:AF:F2:1C:A5:B5:2C:89:CC:4B:94:A7:3B
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019CE3A2CBD9D16932A8258737D0173109DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 102A
Signing time: Thu 12 Mar 2026 20:00:22 +0000
Manifest this update: Thu 12 Mar 2026 20:00:22 +0000
Manifest next update: Fri 13 Mar 2026 20:00:22 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: /C7cOexLZFiiXRWErOdhYJd4OjWIq4NJzjKSdNjpux0=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:cb:d9:d1:69:32:a8:25:87:37:d0:17:31:09:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Mar 12 20:00:22 2026 GMT
Not After : Mar 13 20:00:22 2026 GMT
Subject: CN=2c71662521ec849eaff21ca5b52c89cc4b94a73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:7d:c2:a3:5f:6a:63:a4:1c:17:65:da:70:
9a:40:98:fb:ff:fc:de:80:3e:b8:e6:57:88:37:33:
77:d3:ba:30:43:f8:6b:de:2c:d1:12:10:6b:83:9c:
b1:fe:2e:8a:71:99:fb:7b:0c:b1:4d:4f:f6:71:c0:
7e:c7:8c:f8:6f:ae:65:3e:d5:7b:82:dc:67:2b:b0:
1d:d2:8e:7b:fe:5f:12:fd:a5:b4:0d:72:18:89:88:
64:cb:34:7f:5d:26:fd:9b:30:5b:5e:d1:b6:60:b1:
f9:ca:56:20:47:ef:3a:ef:20:7f:f9:93:f3:9c:28:
5c:8d:73:f5:14:0c:73:91:95:42:46:59:74:ed:96:
52:af:2d:2d:45:b6:54:ea:e3:58:cb:29:93:59:c6:
d5:5c:db:6b:7e:76:17:6b:80:25:8e:71:7b:46:f6:
7b:99:8d:76:29:77:90:a5:7b:0c:1e:16:7d:c9:27:
bf:75:14:10:a7:17:85:8e:c6:35:f5:48:46:bf:1c:
21:96:7a:c3:76:2b:89:99:38:68:c6:3c:c4:85:5a:
25:ad:62:a7:0b:b8:4e:6a:19:d3:5a:af:6e:ed:56:
db:7f:cc:a0:b5:da:d3:93:0d:06:6f:1c:b4:fc:4b:
4f:3f:a9:ae:32:bc:07:a0:a1:f6:19:b6:91:38:d1:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:66:25:21:EC:84:9E:AF:F2:1C:A5:B5:2C:89:CC:4B:94:A7:3B
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:7d:b4:04:11:73:87:98:1f:78:40:7e:96:1f:db:20:27:
5f:15:be:c8:2b:fc:24:99:eb:c6:04:b5:82:6a:77:1a:10:de:
e6:f5:c0:d7:90:16:76:9d:e0:ff:b0:fe:e2:b5:0e:2c:26:e9:
8a:f0:53:90:de:0c:2b:40:fd:41:00:6f:24:5c:37:fa:e7:73:
2e:59:45:6a:cd:3c:a6:20:fd:55:e1:f6:4f:2a:fd:7f:0b:ff:
dc:d7:15:64:55:a6:51:62:00:55:50:1b:49:13:ff:c6:96:8c:
1c:12:2b:0c:10:cd:8a:df:40:1e:ea:de:27:1b:06:73:a0:44:
8b:4e:23:1a:5a:e6:eb:53:aa:fb:51:bc:4e:ae:1e:6e:ee:1d:
75:65:13:21:c6:07:6d:f6:70:20:95:2c:36:23:7b:cb:7c:3b:
de:37:11:c9:b3:18:c0:96:db:80:7c:04:02:6b:27:37:2f:79:
7a:7e:f3:52:e6:78:81:60:36:6e:b9:13:86:85:5b:b3:63:0b:
63:02:9e:9f:07:60:b9:50:28:06:cf:dd:62:e0:51:87:b8:6b:
19:ae:bc:5e:05:56:43:20:06:6a:71:e4:a5:46:5a:69:2c:b4:
4d:84:11:98:63:bd:7b:d9:51:6b:ef:7f:1a:06:d6:6b:90:ff:
6b:16:f3:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjosvZ0WkyqCWHN9AXMQndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh
MmZlNzYwHhcNMjYwMzEyMjAwMDIyWhcNMjYwMzEzMjAwMDIyWjAzMTEwLwYDVQQD
EygyYzcxNjYyNTIxZWM4NDllYWZmMjFjYTViNTJjODljYzRiOTRhNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lt9wqNfamOkHBdl2nCaQJj7//ze
gD645leINzN307owQ/hr3izREhBrg5yx/i6KcZn7ewyxTU/2ccB+x4z4b65lPtV7
gtxnK7Ad0o57/l8S/aW0DXIYiYhkyzR/XSb9mzBbXtG2YLH5ylYgR+867yB/+ZPz
nChcjXP1FAxzkZVCRll07ZZSry0tRbZU6uNYyymTWcbVXNtrfnYXa4AljnF7RvZ7
mY12KXeQpXsMHhZ9ySe/dRQQpxeFjsY19UhGvxwhlnrDdiuJmThoxjzEhVolrWKn
C7hOahnTWq9u7Vbbf8ygtdrTkw0Gbxy0/EtPP6muMrwHoKH2GbaRONHGMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxxZiUh7ISer/IcpbUsicxLlKc7MB8GA1UdIwQY
MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt
MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4
LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwt9tAQR
c4eYH3hAfpYf2yAnXxW+yCv8JJnrxgS1gmp3GhDe5vXA15AWdp3g/7D+4rUOLCbp
ivBTkN4MK0D9QQBvJFw3+udzLllFas08piD9VeH2Tyr9fwv/3NcVZFWmUWIAVVAb
SRP/xpaMHBIrDBDNit9AHureJxsGc6BEi04jGlrm61Oq+1G8Tq4ebu4ddWUTIcYH
bfZwIJUsNiN7y3w73jcRybMYwJbbgHwEAmsnNy95en7zUuZ4gWA2brkThoVbs2ML
YwKenwdguVAoBs/dYuBRh7hrGa68XgVWQyAGanHkpUZaaSy0TYQRmGO9e9lRa+9/
GgbWa5D/axbzNg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:16:33 2026 by rpki-client