Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: APJMhhkJb3NO77CK9EEXglcg1myQwWad7pe4wR5plnc=
Subject key identifier: 50:F1:13:60:E7:1C:F0:F9:F1:8D:7A:3C:2F:9E:75:FA:AB:60:C6:EE
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 019F8F7E19B341DB4CAB0796C0DA494533A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 15:00:33 +0000
Manifest this update: Thu 23 Jul 2026 15:00:33 +0000
Manifest next update: Fri 24 Jul 2026 15:00:33 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: MIQPaRGXE8sDF+F2OsoOV4n0gSlOOUSX4XG3kb18i0s=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:19:b3:41:db:4c:ab:07:96:c0:da:49:45:33:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jul 23 15:00:33 2026 GMT
Not After : Jul 24 15:00:33 2026 GMT
Subject: CN=50f11360e71cf0f9f18d7a3c2f9e75faab60c6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:7e:e8:b6:63:19:33:b6:5a:b1:dc:bf:65:
e9:1c:0a:89:4a:4a:36:1a:c9:fb:7c:6e:c1:52:fe:
a6:ab:55:eb:65:bc:38:89:87:f0:b0:21:b5:f4:5a:
19:3e:03:b0:ae:78:70:81:f9:02:b7:ab:81:84:72:
bc:83:46:92:62:ce:c5:2a:02:ce:6b:12:cd:14:f8:
ce:2d:04:2a:5e:39:29:7d:ef:2d:79:e8:4a:07:12:
90:65:9b:b7:c0:fb:f8:d4:56:8e:78:49:02:a5:e4:
80:70:b0:61:71:17:31:0d:c1:38:be:53:c0:10:21:
a1:d5:a9:05:69:eb:10:35:71:76:2b:f0:43:85:4b:
49:4e:d6:a7:cc:fe:3c:86:7d:e0:0a:6b:48:c9:8f:
fc:af:c4:88:bf:d4:0c:ba:b3:69:ba:6f:5e:7b:a7:
34:3f:3a:c9:c3:c5:30:60:1d:22:c7:c8:3f:13:0f:
b2:26:66:df:11:b8:b7:61:50:c7:34:54:b2:fd:f1:
de:ad:7e:07:a4:aa:8a:59:6e:b8:63:ab:b1:95:ec:
46:bb:a8:cc:1f:5a:50:02:9f:27:30:ed:cc:9a:66:
17:51:de:19:8b:00:4a:5a:28:a2:b6:53:13:01:7e:
3e:f0:a1:35:5b:e7:b3:0a:4c:21:58:45:03:41:ad:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:13:60:E7:1C:F0:F9:F1:8D:7A:3C:2F:9E:75:FA:AB:60:C6:EE
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7a:a3:fd:a1:2e:f8:14:ad:73:3e:ca:e4:e5:17:2f:b8:d9:
3b:e3:be:2d:74:be:53:c8:af:a6:9a:7b:36:de:d1:a0:93:ee:
63:4d:a8:e4:9e:7e:25:b4:d1:43:ed:1a:e2:a7:52:a5:5e:30:
5b:03:44:76:0b:a5:4a:2a:55:be:bf:44:ec:bd:18:df:f8:9a:
87:6d:e3:cf:c0:c4:b2:9f:40:83:8e:bf:a4:bc:ae:b7:ec:ba:
45:86:00:4e:de:e1:dd:d6:61:88:02:d9:4c:dc:16:e8:b9:a4:
1a:db:16:d0:a0:d1:64:3c:cf:31:8a:e9:62:13:a0:b9:d5:84:
da:e0:8d:e3:12:39:da:6d:b8:d8:29:e6:94:7d:3a:4f:53:6d:
57:9e:1b:1d:47:14:63:fe:16:9c:4c:fc:e6:99:0e:b7:44:37:
ff:db:3d:28:43:23:c3:c0:cb:bf:a6:b6:20:39:4f:b8:61:14:
65:93:38:3e:8a:f9:bb:37:bf:ca:e3:41:91:0c:18:3c:b9:13:
17:39:47:67:ed:49:e8:34:3a:ef:7c:98:4b:a6:af:98:41:5e:
c5:3a:73:e6:55:5d:5d:8d:98:19:bd:10:00:4e:c9:af:10:5b:
7a:b1:d5:3f:7d:7d:f8:d0:d7:ec:98:c7:8f:8e:5e:13:30:68:
04:4e:ad:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfhmzQdtMqweWwNpJRTOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWRmMmE0ZjIwYWMwODIzNWM0MDE4MGRlNzRlYmMzOTM1
Y2ZjMjIwHhcNMjYwNzIzMTUwMDMzWhcNMjYwNzI0MTUwMDMzWjAzMTEwLwYDVQQD
Eyg1MGYxMTM2MGU3MWNmMGY5ZjE4ZDdhM2MyZjllNzVmYWFiNjBjNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqN+6LZjGTO2WrHcv2XpHAqJSko2
Gsn7fG7BUv6mq1XrZbw4iYfwsCG19FoZPgOwrnhwgfkCt6uBhHK8g0aSYs7FKgLO
axLNFPjOLQQqXjkpfe8teehKBxKQZZu3wPv41FaOeEkCpeSAcLBhcRcxDcE4vlPA
ECGh1akFaesQNXF2K/BDhUtJTtanzP48hn3gCmtIyY/8r8SIv9QMurNpum9ee6c0
PzrJw8UwYB0ix8g/Ew+yJmbfEbi3YVDHNFSy/fHerX4HpKqKWW64Y6uxlexGu6jM
H1pQAp8nMO3MmmYXUd4ZiwBKWiiitlMTAX4+8KE1W+ezCkwhWEUDQa3PMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDxE2DnHPD58Y16PC+edfqrYMbuMB8GA1UdIwQY
MBaAFCnt8qTyCsCCNcQBgN5068OTXPwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUt
OTI0YzI5Y2Y3N2M0LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUtOTI0YzI5Y2Y3N2M0
LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnqj/aEu
+BStcz7K5OUXL7jZO+O+LXS+U8ivppp7Nt7RoJPuY02o5J5+JbTRQ+0a4qdSpV4w
WwNEdgulSipVvr9E7L0Y3/iah23jz8DEsp9Ag46/pLyut+y6RYYATt7h3dZhiALZ
TNwW6LmkGtsW0KDRZDzPMYrpYhOgudWE2uCN4xI52m242CnmlH06T1NtV54bHUcU
Y/4WnEz85pkOt0Q3/9s9KEMjw8DLv6a2IDlPuGEUZZM4Por5uze/yuNBkQwYPLkT
FzlHZ+1J6DQ673yYS6avmEFexTpz5lVdXY2YGb0QAE7JrxBberHVP319+NDX7JjH
j45eEzBoBE6t4Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:00:58 2026 by rpki-client