Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: 81/NPoVo9tub3kIoUC1xZhjKKfxQ2K0pPym8RKNVvWA=
Subject key identifier: E6:AA:8F:A7:8E:34:87:7A:E8:9B:32:B6:C8:A0:29:D3:15:6C:AA:3E
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019D25F169657F0BF705002BCA3435F0C99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:11 +0000
Manifest this update: Wed 25 Mar 2026 17:01:11 +0000
Manifest next update: Thu 26 Mar 2026 17:01:11 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: FOYR97vH2qyb7IoyRuUT5OuXpfkY+Cixr1PFbSyVJvY=)
2: QR9wcx2L71SKEtutJS3_6RZ2qBM.roa (hash: jMtzB+uj9QQoD07qr0k17Wvt08fncaVh2dRnLEBazkA=)
3: kJniZJ6iZYXidYzcJA4ZBySrhb4.roa (hash: IPJtJpbvrKU2IYcfqcSW/SQBNcuNJehfDhscEcl6bto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:69:65:7f:0b:f7:05:00:2b:ca:34:35:f0:c9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Mar 25 17:01:11 2026 GMT
Not After : Mar 26 17:01:11 2026 GMT
Subject: CN=e6aa8fa78e34877ae89b32b6c8a029d3156caa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:1d:2a:0e:25:a5:d3:8e:c4:b3:0c:d4:5a:
25:03:c8:12:b9:6f:b2:3d:b7:96:c3:39:36:b1:f6:
39:55:ae:c8:c3:28:b8:ba:6d:ae:11:6e:b5:14:66:
e9:19:31:37:19:ae:81:a2:62:2d:56:cb:fd:63:a6:
40:f3:c9:f6:9b:3b:45:5c:2f:f7:e3:2e:ed:e5:af:
db:37:af:69:fe:30:59:73:c9:f8:03:88:df:0d:82:
cc:fa:a3:1c:13:86:16:3a:77:9d:6c:92:9c:6d:9d:
d7:1a:62:f1:17:08:dc:0f:32:e6:28:c7:d1:69:c2:
20:d1:25:ce:8b:87:6a:1d:11:87:5e:d7:d5:fb:0a:
54:97:de:45:2e:78:e4:0b:9e:61:9c:ea:83:0e:08:
2b:a2:73:1a:70:2b:be:6e:d8:55:5d:80:9f:d1:a8:
ea:09:a1:9d:d9:4c:ff:9f:e7:35:82:94:c7:62:38:
93:c3:2b:ef:0c:04:ba:30:98:fe:91:73:73:db:7c:
5d:00:b9:6b:90:dc:51:d3:92:f6:96:97:0d:2c:c7:
c0:dd:25:d8:cb:18:26:1c:a6:1b:ec:41:dc:73:9d:
97:b5:8e:c5:2c:27:35:a0:af:3e:7f:6d:f4:ca:61:
4b:47:3a:86:9f:18:69:18:43:7b:bd:97:7e:ca:2b:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AA:8F:A7:8E:34:87:7A:E8:9B:32:B6:C8:A0:29:D3:15:6C:AA:3E
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a9:03:59:85:cd:60:34:35:38:a2:8f:d7:28:cc:46:67:23:
bb:d9:b6:a9:f2:b6:cc:c8:6d:6b:ab:ab:fe:34:5e:05:d5:7b:
8b:54:1c:ee:b1:76:7b:d9:ab:da:dc:90:7d:b7:2a:eb:c1:38:
23:19:45:7b:a2:57:3b:29:5c:82:7e:9d:96:c8:5d:a0:46:78:
ad:04:ba:d6:4f:a2:51:91:c6:e0:69:f6:68:a2:10:03:c9:a8:
f7:b0:44:9a:a0:d8:4a:c4:c0:a6:fb:34:19:c9:69:6a:ce:65:
0e:22:df:6e:48:60:63:f3:91:b1:06:d1:b0:17:b3:f6:c6:3d:
0b:08:5f:dd:84:92:bb:e7:0a:70:36:c1:15:32:87:13:58:f0:
9f:b3:69:7e:2f:08:6a:1a:38:7b:92:54:54:a8:eb:06:24:a6:
2f:50:2f:76:a0:3f:a6:ab:e5:e6:27:c1:66:a3:f6:7b:3d:a4:
a3:f0:90:7e:e8:73:3d:9a:b7:01:15:3a:16:e1:ac:3e:17:c8:
65:17:ac:b6:8d:44:fc:88:a9:a4:1b:f4:a6:b6:93:bb:cf:ca:
57:07:d6:bc:f8:47:4b:bd:df:5f:b7:ac:a5:56:dd:1c:1c:8b:
05:a7:fd:9f:34:e4:66:e2:69:46:a1:bf:ac:8b:6d:06:32:e0:
1c:bf:5c:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Wllfwv3BQAryjQ18MmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDEyNjJhY2Q2MmM5MGU2ODA4MWE2Zjc3NzM3NWRmMmMz
NzEzYzIwHhcNMjYwMzI1MTcwMTExWhcNMjYwMzI2MTcwMTExWjAzMTEwLwYDVQQD
EyhlNmFhOGZhNzhlMzQ4NzdhZTg5YjMyYjZjOGEwMjlkMzE1NmNhYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCMdKg4lpdOOxLMM1FolA8gSuW+y
PbeWwzk2sfY5Va7Iwyi4um2uEW61FGbpGTE3Ga6BomItVsv9Y6ZA88n2mztFXC/3
4y7t5a/bN69p/jBZc8n4A4jfDYLM+qMcE4YWOnedbJKcbZ3XGmLxFwjcDzLmKMfR
acIg0SXOi4dqHRGHXtfV+wpUl95FLnjkC55hnOqDDggronMacCu+bthVXYCf0ajq
CaGd2Uz/n+c1gpTHYjiTwyvvDAS6MJj+kXNz23xdALlrkNxR05L2lpcNLMfA3SXY
yxgmHKYb7EHcc52XtY7FLCc1oK8+f230ymFLRzqGnxhpGEN7vZd+yiuuMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaqj6eONId66JsytsigKdMVbKo+MB8GA1UdIwQY
MBaAFChBJirNYskOaAgab3dzdd8sNxPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2It
OTVhMzNlMTJhM2FkLzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2ItOTVhMzNlMTJhM2Fk
LzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqkDWYXN
YDQ1OKKP1yjMRmcju9m2qfK2zMhta6ur/jReBdV7i1Qc7rF2e9mr2tyQfbcq68E4
IxlFe6JXOylcgn6dlshdoEZ4rQS61k+iUZHG4Gn2aKIQA8mo97BEmqDYSsTApvs0
Gclpas5lDiLfbkhgY/ORsQbRsBez9sY9Cwhf3YSSu+cKcDbBFTKHE1jwn7Npfi8I
aho4e5JUVKjrBiSmL1AvdqA/pqvl5ifBZqP2ez2ko/CQfuhzPZq3ARU6FuGsPhfI
ZResto1E/IippBv0praTu8/KVwfWvPhHS73fX7espVbdHByLBaf9nzTkZuJpRqG/
rIttBjLgHL9c8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:20 2026 by rpki-client