Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: q7z9tcQ8VMb4GPAah+aP8//GdXsuN6cqS6tkdOxCubA=
Subject key identifier: AA:00:EB:FE:92:24:9A:23:5D:02:41:6B:EC:EF:E9:34:98:65:9C:B9
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 01A0FE6C43DB6477F74D0C45A656CFF569EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1A8F
Signing time: Fri 02 Oct 2026 21:01:43 +0000
Manifest this update: Fri 02 Oct 2026 21:01:43 +0000
Manifest next update: Sat 03 Oct 2026 21:01:43 +0000
Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=)
2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=)
3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=)
4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: +1uhRemlmYl47ilcX90JlxhR1q3Kus5lUuZL/HIxH0g=)
5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=)
6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=)
7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=)
8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:6c:43:db:64:77:f7:4d:0c:45:a6:56:cf:f5:69:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Oct 2 21:01:43 2026 GMT
Not After : Oct 3 21:01:43 2026 GMT
Subject: CN=aa00ebfe92249a235d02416becefe93498659cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:55:1f:33:09:8e:89:3d:b9:97:23:15:07:
d2:e5:9e:3c:24:a7:68:a5:b9:db:ae:e7:fb:37:00:
9b:b9:9a:22:38:d9:ce:ce:7a:cd:b2:89:b1:96:5b:
5a:84:1b:b9:7b:1a:ef:f5:98:c6:ab:20:e1:26:93:
60:b1:c7:d1:cd:01:7d:08:18:5b:55:70:13:b1:0f:
80:1c:08:8b:1e:c0:08:3e:5f:fb:98:61:fd:ce:6d:
e5:d1:84:bb:11:2e:e4:af:2c:d8:44:76:68:63:4b:
a8:ee:9a:19:2a:29:dd:ee:ee:02:76:bd:c4:bf:46:
2f:ed:c7:b8:3e:ea:f7:78:e1:3f:ca:9b:2b:44:3c:
61:83:97:bb:dc:f3:9f:74:92:21:33:1d:5d:9b:5e:
ae:34:4d:56:22:21:d2:36:86:0f:f8:26:00:93:96:
04:0d:e3:8c:cb:07:09:7a:31:35:98:1d:31:9b:22:
8b:8f:b1:ea:34:a7:06:15:c3:57:27:13:e6:e3:f5:
b9:a9:e4:23:1a:96:8a:f3:b8:f4:48:07:e7:5c:07:
b5:59:48:35:80:a7:2e:da:b4:f6:cb:47:df:bd:19:
76:f0:b7:e9:1a:50:59:bf:ec:f1:d3:65:55:36:62:
4a:04:83:54:73:f0:7b:5e:7d:4e:4e:e9:64:fc:ce:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:EB:FE:92:24:9A:23:5D:02:41:6B:EC:EF:E9:34:98:65:9C:B9
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b9:cc:2e:66:29:29:4b:50:a9:dd:2b:8b:83:93:83:89:92:
e1:66:f8:a2:c9:e1:c2:bf:5c:09:47:63:f9:d6:36:95:09:6e:
f8:7a:82:5d:7e:eb:d9:3b:b8:82:1e:6b:d3:a8:93:97:69:2f:
5f:ff:ef:21:5a:52:94:b3:3a:a6:cf:de:d6:7f:a2:08:05:08:
c0:f3:5f:c6:be:11:3f:63:93:06:cc:30:b5:01:10:e4:65:74:
1b:c8:1d:c1:ce:fd:ab:35:60:53:57:7f:6c:db:19:f9:68:c1:
bf:b4:ca:88:47:b2:8b:ee:e6:6d:ba:15:92:9d:48:4f:f9:f5:
b1:7a:ca:ec:7c:dd:e4:ed:eb:33:8b:a7:85:9c:d4:70:04:60:
42:09:16:0c:03:e0:0c:d2:37:da:ee:6e:ce:ce:01:36:2d:b5:
6d:6b:56:19:48:ae:d4:ca:a3:1c:52:86:b7:f6:37:f2:76:d4:
e2:28:f6:e1:ab:5d:d0:4f:51:b9:65:2c:ce:bb:61:d3:04:da:
18:00:7b:b9:a9:0c:a1:99:5b:ea:d1:71:0d:90:e4:98:74:21:
28:b6:b0:fd:84:1b:38:6e:24:e9:40:c7:7c:ba:d2:a0:a4:9f:
5d:a1:2a:cd:96:f9:09:c0:7a:6c:61:88:ed:54:0a:38:df:5c:
a5:57:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 05:54:12 2026 by rpki-client