Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: Czo3CaxSNh1MaXmbAdzkBM3+vcAnTlBb6ACjU8nlOc4=
Subject key identifier: 48:EC:F6:C0:7E:54:2D:62:B9:98:C6:BA:EA:14:CF:E3:A0:2F:89:68
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019E20912E8BBF1E995917222EBDA96B00D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1913
Signing time: Wed 13 May 2026 09:00:45 +0000
Manifest this update: Wed 13 May 2026 09:00:45 +0000
Manifest next update: Thu 14 May 2026 09:00:45 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: RUkf2b6ps1LhfJNZxkgWOslizjocT1S2EvqKJc88qy8=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:2e:8b:bf:1e:99:59:17:22:2e:bd:a9:6b:00:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: May 13 09:00:45 2026 GMT
Not After : May 14 09:00:45 2026 GMT
Subject: CN=48ecf6c07e542d62b998c6baea14cfe3a02f8968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:0f:a4:a6:97:66:bc:78:3f:80:f1:26:70:
9a:54:56:c3:ab:cb:07:66:57:7a:de:da:4e:6b:eb:
bc:da:78:1d:1b:ab:21:2a:77:45:6a:9f:40:dd:55:
8c:a9:24:e7:88:7e:4a:df:c1:2f:0f:e5:eb:77:91:
3d:eb:f9:59:f1:c8:ed:be:74:3f:a9:87:69:96:55:
1d:3a:14:be:b5:10:18:da:d8:4e:1c:9b:fc:eb:50:
9c:d5:e7:7d:c1:74:ce:47:4a:bd:0e:bd:21:8a:70:
71:a1:8f:4c:84:ff:72:92:e5:d4:fe:11:b5:54:30:
5b:10:6a:cf:48:b4:89:8b:45:7e:82:79:08:7b:52:
94:99:77:26:b2:45:53:95:21:8f:e1:cb:0b:c2:ec:
82:7f:04:90:cf:54:6b:52:57:c5:36:7a:b0:93:0a:
5c:6e:2e:cb:02:c0:4b:83:ac:1a:52:02:bd:3d:2a:
aa:72:40:e7:c1:53:7f:eb:a3:0f:d9:f8:86:96:d8:
15:41:e7:a2:88:69:ad:4d:bc:a6:7b:bf:aa:a7:aa:
a2:8e:a6:d9:eb:58:ac:50:cd:e0:a8:01:48:09:8d:
c5:de:a8:79:6e:3a:46:d2:32:b2:27:a6:92:c1:35:
be:a4:5b:b7:99:d5:1e:fd:b3:5a:b3:64:ae:70:5c:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EC:F6:C0:7E:54:2D:62:B9:98:C6:BA:EA:14:CF:E3:A0:2F:89:68
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:cb:40:a2:9f:c2:bf:a5:19:52:a4:fe:61:f0:d3:42:f9:
4e:c6:d0:46:5e:1a:4d:ee:54:7e:e1:1f:71:c1:90:9e:44:5a:
df:99:e6:7a:37:5c:c9:fb:7c:2c:e9:16:f1:a3:34:60:e5:23:
18:2f:9d:e7:ed:a0:ef:56:ec:3a:e9:32:b9:5f:3c:eb:7f:ec:
99:07:b4:e2:30:fb:f0:aa:fa:d2:08:93:cc:d4:4d:42:01:83:
a6:a0:77:65:5b:0d:6c:37:9c:d2:72:87:d6:26:f0:2e:21:15:
21:db:8d:1f:00:7c:01:30:18:5f:11:4a:e6:02:37:79:48:54:
5a:8f:a2:42:5d:2d:80:00:f5:f1:00:12:70:a9:74:c9:2e:df:
fd:0d:97:9f:e0:22:d0:35:80:9d:79:d6:01:80:4e:34:de:d0:
ef:1e:d8:d8:28:ce:05:fe:ca:71:dc:db:06:dd:23:2d:96:93:
e3:07:2b:2d:f0:85:46:37:69:73:c4:d7:a8:c9:1c:26:9a:d0:
37:ed:57:6a:bf:17:51:5f:6f:b6:55:e1:ab:5f:11:5d:7a:97:
83:8e:63:22:27:4f:a3:ab:43:4d:48:ef:b0:d3:c3:b8:a5:7d:
5a:65:cc:82:23:43:d6:07:9c:37:1e:96:80:b8:1e:3e:ea:f9:
92:2e:2d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkS6Lvx6ZWRciLr2pawDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm
YjY1ZTAwHhcNMjYwNTEzMDkwMDQ1WhcNMjYwNTE0MDkwMDQ1WjAzMTEwLwYDVQQD
Eyg0OGVjZjZjMDdlNTQyZDYyYjk5OGM2YmFlYTE0Y2ZlM2EwMmY4OTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4APpKaXZrx4P4DxJnCaVFbDq8sH
Zld63tpOa+u82ngdG6shKndFap9A3VWMqSTniH5K38EvD+Xrd5E96/lZ8cjtvnQ/
qYdpllUdOhS+tRAY2thOHJv861Cc1ed9wXTOR0q9Dr0hinBxoY9MhP9ykuXU/hG1
VDBbEGrPSLSJi0V+gnkIe1KUmXcmskVTlSGP4csLwuyCfwSQz1RrUlfFNnqwkwpc
bi7LAsBLg6waUgK9PSqqckDnwVN/66MP2fiGltgVQeeiiGmtTbyme7+qp6qijqbZ
61isUM3gqAFICY3F3qh5bjpG0jKyJ6aSwTW+pFu3mdUe/bNas2SucFyZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjs9sB+VC1iuZjGuuoUz+OgL4loMB8GA1UdIwQY
MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt
ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4
LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALA3LQKKf
wr+lGVKk/mHw00L5TsbQRl4aTe5UfuEfccGQnkRa35nmejdcyft8LOkW8aM0YOUj
GC+d5+2g71bsOukyuV8863/smQe04jD78Kr60giTzNRNQgGDpqB3ZVsNbDec0nKH
1ibwLiEVIduNHwB8ATAYXxFK5gI3eUhUWo+iQl0tgAD18QAScKl0yS7f/Q2Xn+Ai
0DWAnXnWAYBONN7Q7x7Y2CjOBf7KcdzbBt0jLZaT4wcrLfCFRjdpc8TXqMkcJprQ
N+1Xar8XUV9vtlXhq18RXXqXg45jIidPo6tDTUjvsNPDuKV9WmXMgiND1gecNx6W
gLgePur5ki4tgw==
-----END CERTIFICATE-----
Generated at Wed May 13 18:59:03 2026 by rpki-client