Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
File: Ke_inNmVTrSDWEKZccdq97tfBWE.mft (raw, json)
Hash identifier: f5rjXdKcMCctvIbJETnd0wOGny9ZwHTyumGso6Ckzb8=
Subject key identifier: BA:9A:76:23:25:A8:AA:78:C5:96:E8:A4:42:42:69:F0:DB:94:DD:2E
Authority key identifier: 29:EF:E2:9C:D9:95:4E:B4:83:58:42:99:71:C7:6A:F7:BB:5F:05:61
Certificate issuer: /CN=29efe29cd9954eb48358429971c76af7bb5f0561
Certificate serial: 01A11597B4ADF00A278D2095B2A070C71BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
Manifest number: 0109
Signing time: Wed 07 Oct 2026 09:00:25 +0000
Manifest this update: Wed 07 Oct 2026 09:00:25 +0000
Manifest next update: Thu 08 Oct 2026 09:00:25 +0000
Files and hashes: 1: Ke_inNmVTrSDWEKZccdq97tfBWE.crl (hash: IQkK65sNDh6FxPYxbHQzZ4bu8H4kbLLraFZ3uHvHfX0=)
2: MJcxGS0k_kKhq_iBy3QqSFYVnVU.roa (hash: fgIqrkRhKvk9zOrKBAATYNkw1hWIeg0IR0Gjr44Q3Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:97:b4:ad:f0:0a:27:8d:20:95:b2:a0:70:c7:1b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29efe29cd9954eb48358429971c76af7bb5f0561
Validity
Not Before: Oct 7 09:00:25 2026 GMT
Not After : Oct 8 09:00:25 2026 GMT
Subject: CN=ba9a762325a8aa78c596e8a4424269f0db94dd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:b8:0e:91:8c:b3:d7:7c:1b:c3:97:7e:5e:
30:8e:e6:a6:57:54:35:62:25:c9:f9:e3:f2:65:1b:
24:95:11:a2:d4:09:eb:43:b7:9b:31:b0:a2:c3:58:
81:ec:27:79:02:d4:a2:d9:0e:17:4f:72:80:b9:ee:
31:91:c5:36:1b:b6:49:26:e4:6e:37:e2:f9:71:af:
bf:24:64:9b:9d:b7:f7:26:e2:ee:a4:07:16:5b:cd:
34:3f:2b:f9:b8:3e:e7:9e:78:24:b6:6c:91:c5:1c:
92:a7:37:49:6a:f6:98:04:1e:29:7c:ea:dd:d2:37:
a0:7f:2a:45:59:1e:77:b2:e8:43:4d:39:55:8e:cd:
2f:f3:a5:cd:b2:de:ab:e5:84:9f:69:fb:bf:3f:3a:
78:20:93:bc:fe:f3:45:37:b4:ac:e1:6e:93:0e:6d:
e9:bc:51:54:54:4a:20:ac:18:37:11:1b:db:36:06:
65:72:2f:d0:05:85:e4:ca:4c:b2:ee:84:80:75:c5:
7c:8c:d9:f5:d7:0b:ca:35:da:35:00:bf:de:c1:94:
5f:79:81:d5:e7:55:08:fb:87:cc:f5:93:fa:04:34:
bc:91:1e:28:f8:f6:bb:a6:31:1f:a5:21:59:d6:6b:
2a:9a:56:0f:c6:11:f3:aa:ab:8f:42:57:1b:46:13:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:76:23:25:A8:AA:78:C5:96:E8:A4:42:42:69:F0:DB:94:DD:2E
X509v3 Authority Key Identifier:
keyid:29:EF:E2:9C:D9:95:4E:B4:83:58:42:99:71:C7:6A:F7:BB:5F:05:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ca:d0:7a:bb:5d:c5:b2:0c:c5:04:12:0b:e0:e5:be:93:16:
1a:b9:4f:7d:62:d8:6c:a7:04:8e:d3:be:0e:f6:30:f0:b3:fb:
70:1d:94:f0:aa:6c:22:f7:cd:90:ca:68:31:6b:2f:00:aa:33:
d5:a8:bf:2c:4b:58:93:2e:c2:37:fb:92:74:8c:ea:19:77:fd:
69:7e:1e:ee:45:58:f2:79:8d:5f:30:de:48:71:35:5b:b1:25:
4f:02:2f:1d:48:71:ac:25:ea:1f:1f:e3:c0:88:a4:85:42:fa:
b2:2c:7b:7b:ea:15:3a:64:5b:be:9b:d6:23:3b:30:45:20:1a:
9d:89:9d:2b:61:89:b2:8a:ed:34:3d:48:33:37:8d:70:1c:64:
4f:ff:59:0c:1e:d0:93:f9:96:b6:d8:0e:61:51:42:08:b1:c0:
f9:4f:5f:4f:b6:28:1e:d8:c4:6d:f2:84:d3:9a:6b:22:2f:e3:
18:51:2c:41:8e:ee:4b:99:a2:d3:f1:08:61:1c:c8:25:88:0c:
b7:47:2e:3d:5c:ad:7b:69:80:b1:e5:3b:c9:36:b4:f7:b0:17:
8d:03:0f:05:5e:40:81:77:76:0c:38:3e:38:07:8c:21:c4:12:
5e:76:b7:aa:d5:16:ab:8c:d1:ba:a6:8f:76:f3:d3:ad:7c:4e:
cd:ef:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:26:41 2026 by rpki-client