Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: mJuDOON3cxrBQtyvmyZG0UnxoohYmMQDgFJSATHVS8k=
Subject key identifier: 2B:2C:30:61:0C:83:0C:B7:10:6A:93:BB:57:D7:51:A1:12:5C:36:40
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019FF3EAF48E307DC796B6524470BC011DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1A05
Signing time: Wed 12 Aug 2026 03:01:29 +0000
Manifest this update: Wed 12 Aug 2026 03:01:29 +0000
Manifest next update: Thu 13 Aug 2026 03:01:29 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: MlJKNyoqn9yU5gveecCWKeYI6iXqh9oYVeznweRK3R4=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:ea:f4:8e:30:7d:c7:96:b6:52:44:70:bc:01:1d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Aug 12 03:01:29 2026 GMT
Not After : Aug 13 03:01:29 2026 GMT
Subject: CN=2b2c30610c830cb7106a93bb57d751a1125c3640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:b0:8f:72:a2:39:75:43:95:9e:62:f4:2e:
b7:a1:19:a4:45:7a:98:6a:85:ff:3d:44:5a:8c:f1:
1d:9a:2d:c6:88:db:e7:92:c0:70:48:a6:75:d4:34:
ec:ef:3f:ec:06:6f:24:29:0e:36:72:df:5a:91:d9:
68:23:3d:2d:94:e4:0d:d7:e2:23:a9:8e:19:f6:74:
98:f8:27:2f:3a:5d:1e:cc:d8:ed:94:90:d8:f1:49:
eb:d9:f0:e5:68:21:06:0a:e1:8e:d3:d6:aa:f8:b3:
5a:3a:52:19:4f:7e:3d:8a:9b:c4:85:44:bc:11:75:
b2:6c:2a:2f:bf:a6:0d:f0:2a:46:b9:2e:0d:4f:e7:
f1:64:99:af:7b:15:fa:65:89:ff:8a:8a:fa:f5:68:
7f:43:95:6e:37:a4:ef:82:cf:32:ee:e7:bd:89:a5:
b7:1a:ee:e0:f8:fd:df:bb:3d:dc:97:f5:a6:3d:72:
e0:0c:bf:2e:fe:07:f2:0f:4d:f3:d7:b7:1b:1d:0d:
0a:07:81:08:ef:0a:e6:fe:eb:a0:36:dc:21:37:c2:
0e:e2:b1:cf:13:f5:33:53:ec:00:76:f8:73:a9:95:
12:01:40:88:8a:1f:e5:3f:e2:20:ac:7c:dd:44:0b:
1b:02:12:5e:68:23:8d:3f:6f:b6:72:b7:b8:e7:8e:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2C:30:61:0C:83:0C:B7:10:6A:93:BB:57:D7:51:A1:12:5C:36:40
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d6:53:a8:f5:8c:6c:44:5a:a0:d3:72:18:17:a2:ec:84:99:
99:f4:0e:84:17:e3:50:f3:54:31:4d:67:30:1b:cf:46:cb:3c:
76:74:19:ff:2c:8d:f1:e3:62:07:71:f7:fc:79:63:ca:f1:96:
41:17:16:5e:16:9a:b2:ff:cb:85:a6:ba:36:d4:6f:2c:8b:72:
75:42:78:70:eb:29:04:9f:7c:1b:d9:f8:b5:56:f8:a3:a2:52:
53:f1:ed:6a:d1:4a:da:df:a5:3c:d3:0c:9e:43:0e:50:5f:e0:
18:c2:3c:5f:d5:53:67:73:ec:57:b3:13:ff:e9:77:1b:93:79:
62:fd:cb:81:95:aa:ca:67:e6:3d:16:cf:eb:9d:b4:76:a3:cc:
3c:18:55:8e:d4:eb:1d:d1:07:22:24:0e:83:4c:60:77:32:07:
bb:70:99:67:68:32:20:52:80:75:f3:99:24:32:c5:b5:e5:74:
2d:25:fe:4d:bc:eb:16:be:16:f9:58:fa:8d:e5:26:ad:42:6b:
d0:de:41:a8:fb:fe:88:4b:0c:52:12:3a:76:a2:8d:b6:da:50:
62:58:58:37:f9:e4:60:36:47:c9:6b:f7:12:f2:cd:cd:11:32:
7c:d5:87:12:3b:d5:dd:42:cf:6b:bf:ad:9a:e8:f5:bf:91:a9:
f4:e5:64:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/z6vSOMH3HlrZSRHC8AR3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm
YjY1ZTAwHhcNMjYwODEyMDMwMTI5WhcNMjYwODEzMDMwMTI5WjAzMTEwLwYDVQQD
EygyYjJjMzA2MTBjODMwY2I3MTA2YTkzYmI1N2Q3NTFhMTEyNWMzNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBuwj3KiOXVDlZ5i9C63oRmkRXqY
aoX/PURajPEdmi3GiNvnksBwSKZ11DTs7z/sBm8kKQ42ct9akdloIz0tlOQN1+Ij
qY4Z9nSY+CcvOl0ezNjtlJDY8Unr2fDlaCEGCuGO09aq+LNaOlIZT349ipvEhUS8
EXWybCovv6YN8CpGuS4NT+fxZJmvexX6ZYn/ior69Wh/Q5VuN6Tvgs8y7ue9iaW3
Gu7g+P3fuz3cl/WmPXLgDL8u/gfyD03z17cbHQ0KB4EI7wrm/uugNtwhN8IO4rHP
E/UzU+wAdvhzqZUSAUCIih/lP+IgrHzdRAsbAhJeaCONP2+2cre4545FMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCssMGEMgwy3EGqTu1fXUaESXDZAMB8GA1UdIwQY
MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt
ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4
LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodZTqPWM
bERaoNNyGBei7ISZmfQOhBfjUPNUMU1nMBvPRss8dnQZ/yyN8eNiB3H3/HljyvGW
QRcWXhaasv/Lhaa6NtRvLItydUJ4cOspBJ98G9n4tVb4o6JSU/HtatFK2t+lPNMM
nkMOUF/gGMI8X9VTZ3PsV7MT/+l3G5N5Yv3LgZWqymfmPRbP6520dqPMPBhVjtTr
HdEHIiQOg0xgdzIHu3CZZ2gyIFKAdfOZJDLFteV0LSX+TbzrFr4W+Vj6jeUmrUJr
0N5BqPv+iEsMUhI6dqKNttpQYlhYN/nkYDZHyWv3EvLNzREyfNWHEjvV3ULPa7+t
muj1v5Gp9OVk+A==
-----END CERTIFICATE-----
Generated at Wed Aug 12 12:51:29 2026 by rpki-client