Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: CHp+agTbP5wvjt8xGjC4pbOUGPvO4IYHo93ejd1llOU=
Subject key identifier: 8E:A5:28:EE:6D:65:70:4F:95:A8:D3:B2:32:04:0D:EF:FB:0B:C7:D5
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019F0A3E4E86649A9AA5AD2DC27538BEBADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 198C
Signing time: Sat 27 Jun 2026 18:01:23 +0000
Manifest this update: Sat 27 Jun 2026 18:01:23 +0000
Manifest next update: Sun 28 Jun 2026 18:01:23 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: HOVoAmcHRqCSwCnvSKZf2M2azPR+/MEwrfYuwqBikzU=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:3e:4e:86:64:9a:9a:a5:ad:2d:c2:75:38:be:ba:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Jun 27 18:01:23 2026 GMT
Not After : Jun 28 18:01:23 2026 GMT
Subject: CN=8ea528ee6d65704f95a8d3b232040deffb0bc7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bf:68:57:8e:7e:a9:8d:26:fd:bc:c9:18:25:
eb:e9:1a:e7:b6:e7:75:a3:28:36:74:a6:29:4e:dd:
e6:56:df:15:39:b6:e8:89:35:3d:3c:48:61:b3:a7:
9a:2c:dd:4e:75:fe:9d:67:c7:54:e8:65:f8:8f:8f:
46:e6:f2:9a:53:54:71:7a:a8:af:84:d6:f8:74:bc:
3e:b8:f9:87:22:d5:39:9c:18:ab:d9:d5:06:b1:fe:
b6:25:78:f6:a1:ae:1b:69:99:63:40:23:55:56:c2:
5b:da:79:d5:c1:f1:cb:6f:6a:b3:42:25:b1:0d:cf:
10:eb:af:33:3f:55:ab:61:87:4a:d1:04:96:41:27:
0c:c5:53:58:a5:b8:54:d2:ba:2d:8f:92:65:10:56:
81:b4:18:8f:d7:39:c6:52:a0:ff:6b:b7:3a:af:c5:
85:3c:54:fc:33:8a:30:60:5e:eb:03:b1:ab:f9:1a:
70:08:56:7a:4d:f1:27:99:e3:e2:3b:98:0e:75:1c:
35:bd:71:7a:a0:5c:40:d2:8e:47:9b:d2:ff:cd:ed:
91:96:7e:b2:3a:e2:04:0a:a2:50:bb:b1:f5:2c:f2:
7d:d2:db:1d:a3:2f:a1:b7:d3:15:19:6c:d2:cf:24:
db:44:7b:d3:53:62:42:cb:f2:ea:7d:03:01:ea:51:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:28:EE:6D:65:70:4F:95:A8:D3:B2:32:04:0D:EF:FB:0B:C7:D5
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c0:c1:21:ea:1d:94:ee:9e:49:df:68:6e:76:c2:1d:b3:20:
3e:47:17:18:bc:37:c0:bb:b4:11:44:56:52:a5:36:0e:c2:57:
3d:d3:db:96:28:1f:f1:93:46:64:15:91:77:5b:6a:66:c9:91:
95:c0:43:f9:a4:48:6d:93:6a:26:9e:2f:34:0f:b9:58:39:d1:
9a:f2:b4:c7:7e:2d:53:ef:c0:8f:29:43:58:5c:38:79:8f:63:
bb:97:ca:37:68:e9:ec:7e:e1:1f:bf:ca:f0:b9:bc:cc:49:fd:
6d:2f:e2:bc:c9:f3:15:b6:48:14:76:f0:ea:7f:da:ad:21:1e:
04:49:c3:ac:eb:e4:bd:b5:13:08:76:8d:a1:da:7d:a1:c4:6c:
2f:35:f8:b3:7a:21:00:2b:2e:97:be:3e:23:5d:cf:a9:0f:60:
d6:0d:0c:a0:df:17:09:83:ea:6d:a2:16:9a:f6:b5:dc:5c:3f:
93:86:d5:36:0d:3a:58:6f:96:2f:e2:46:e8:dd:81:b1:8b:4d:
6f:3f:db:87:8a:1b:07:24:30:5f:64:65:d6:79:04:0b:90:28:
f4:8e:75:cd:bb:41:aa:7b:bf:57:85:ac:d7:3a:8f:bd:33:06:
16:98:8b:0d:2e:dc:d4:e4:1b:84:eb:64:1d:cc:fd:0e:cf:a3:
ea:77:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:38:07 2026 by rpki-client