Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: jSCakAJrrVp/QN9zX5UhQGo0AGcvq5seTbi9XYO8POw=
Subject key identifier: 67:61:9E:5D:95:01:83:F7:F2:B0:44:18:99:A6:06:86:A7:10:8F:2A
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019D1610D24EE5423ABC4F5E72C50602A5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1889
Signing time: Sun 22 Mar 2026 15:01:34 +0000
Manifest this update: Sun 22 Mar 2026 15:01:34 +0000
Manifest next update: Mon 23 Mar 2026 15:01:34 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: l6cH3lSJ71XfNbBrhl6zB2heaObozG0gm0+11d/OIOA=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:16:10:d2:4e:e5:42:3a:bc:4f:5e:72:c5:06:02:a5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Mar 22 15:01:34 2026 GMT
Not After : Mar 23 15:01:34 2026 GMT
Subject: CN=67619e5d950183f7f2b0441899a60686a7108f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:d8:58:65:e0:e8:28:66:70:a9:64:93:39:
4f:2b:3a:06:03:fa:b9:a0:0c:d0:63:20:4b:70:1b:
ea:3c:60:34:f1:c1:ec:83:c5:e7:0e:c2:c1:7a:4b:
ae:b9:62:8f:e3:7c:6d:d7:09:0a:56:d5:e3:70:17:
94:11:35:66:83:9d:bd:4d:db:c2:ef:74:0d:3e:3a:
66:79:23:3d:c0:16:19:34:a8:80:53:4b:88:8b:51:
33:fe:b4:18:33:01:bd:65:cf:9a:e2:23:4a:3b:23:
fe:37:4e:81:af:64:10:61:c1:f9:21:bd:88:19:41:
09:88:7d:4d:f2:6b:53:83:7a:ee:b4:03:a5:b2:a9:
94:da:e5:04:1d:ec:3b:60:91:31:fd:ab:92:e8:22:
ff:fa:d9:b6:28:f9:68:38:0e:16:56:48:1b:58:d8:
7e:22:bd:7b:53:ff:ed:2a:00:12:ae:25:1d:77:98:
7a:b1:b7:64:08:a8:51:ab:14:30:cb:18:61:86:3f:
2f:b7:22:c8:36:66:50:0a:51:fc:c7:28:0a:f7:de:
40:6c:15:0a:bc:1c:74:97:4a:ba:d3:2b:97:9f:56:
9a:d9:06:76:ff:e9:c5:b8:93:01:09:79:24:a0:59:
e9:94:7b:80:6e:bf:92:07:90:c9:8f:16:90:48:02:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:61:9E:5D:95:01:83:F7:F2:B0:44:18:99:A6:06:86:A7:10:8F:2A
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:94:5f:f8:d1:15:d7:60:bf:dc:41:13:a1:83:86:0c:a8:42:
cc:d9:2c:a3:fc:04:33:8f:54:f6:74:dd:e7:e2:8d:be:1b:05:
06:8e:d7:17:1a:82:d5:69:ca:6e:f0:2d:4d:75:3a:0e:77:75:
55:1b:6a:e0:41:7d:eb:c7:9f:c2:c1:ff:5a:22:68:31:ca:ac:
6a:98:3c:47:c5:a0:ce:6e:f0:86:f3:7d:1b:8f:ce:f0:3d:d5:
ac:9e:26:ab:08:55:49:61:cd:35:16:e3:ca:74:28:db:43:41:
31:0f:20:eb:49:86:eb:20:b8:8b:33:e8:f8:18:b0:a7:a9:bb:
a8:f8:ed:c7:60:ed:b1:47:07:f7:28:cc:fd:79:81:cb:be:e7:
0e:3e:bf:71:19:31:21:eb:d8:5c:9f:11:c5:c5:e0:9e:2f:3e:
c5:0d:fd:f2:c4:66:2e:cb:64:fa:8c:f7:c2:9f:9b:30:d7:38:
dd:3d:b3:83:6d:ef:8a:83:ae:d7:ac:68:b5:b3:76:8b:f7:45:
20:c9:f7:c5:29:ae:cb:43:3a:64:47:e3:1a:10:8e:4d:26:ed:
4b:20:69:10:48:20:26:3c:d8:c8:7e:67:ee:5e:67:97:6a:b1:
5f:41:f1:28:6f:f5:2d:52:46:bc:ed:b1:59:80:17:c3:58:65:
ba:57:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 16:57:35 2026 by rpki-client