Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: Ec7E2wCcH/Eu+3OfSwLTgjDG8UNlk83ZZt9EanoeVbg=
Subject key identifier: F0:1C:5E:B6:7D:5D:78:C4:F2:80:7B:A8:53:18:AD:1A:66:81:9D:C3
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 01A0D727B1EAB658802F08D6ECFF4D871429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 10DA
Signing time: Fri 25 Sep 2026 06:01:37 +0000
Manifest this update: Fri 25 Sep 2026 06:01:37 +0000
Manifest next update: Sat 26 Sep 2026 06:01:37 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: h0OZyGx6CKGLATJEg3dxKq8kAUemIVvS85JREW+iNaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:b1:ea:b6:58:80:2f:08:d6:ec:ff:4d:87:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Sep 25 06:01:37 2026 GMT
Not After : Sep 26 06:01:37 2026 GMT
Subject: CN=f01c5eb67d5d78c4f2807ba85318ad1a66819dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:0f:dd:7e:88:1a:46:3a:27:04:02:8c:ae:
e4:5b:c5:94:c7:cc:c5:12:7d:5d:31:74:55:c0:c3:
34:e2:f5:77:a5:91:8f:01:81:0d:11:2f:ea:b2:6a:
68:32:9f:7d:70:3b:6f:30:a7:21:b7:09:98:e0:62:
b8:cf:c7:d1:76:6f:b1:59:4a:e2:c3:dd:87:61:a6:
51:ff:41:78:d1:ab:da:97:bc:f4:b9:70:11:ed:b4:
04:fd:21:93:e2:56:ee:88:59:b7:07:01:d2:a4:e2:
07:7d:e4:81:b7:7a:33:9f:da:05:08:93:bc:d5:83:
5c:5e:de:f7:12:78:05:b0:e5:f1:aa:f2:96:3c:c3:
34:08:1f:6c:69:d9:c2:3d:22:b9:41:64:c2:1c:bd:
95:f1:21:05:83:dd:2d:61:4d:e9:0a:3e:56:cb:01:
4b:c2:10:b4:54:21:6f:c0:fb:39:a2:9b:f0:a0:2e:
e6:4c:83:db:9e:d0:49:b1:0c:f7:1d:30:d3:7f:44:
b0:9c:e1:9d:bd:e9:a8:cd:c6:ae:88:a9:4d:f0:f7:
fc:b5:63:6e:0c:c9:5c:c9:4f:be:a0:6f:cb:ab:97:
6d:e8:37:0a:cb:7a:bb:2c:4c:f7:8a:b9:95:fd:c9:
ad:d8:39:f3:c3:3b:b5:fa:71:91:47:74:57:f3:3b:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1C:5E:B6:7D:5D:78:C4:F2:80:7B:A8:53:18:AD:1A:66:81:9D:C3
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ce:86:81:bc:78:de:3f:29:7b:8c:72:75:87:31:94:0a:62:
92:2a:12:7d:44:7c:23:3c:78:8c:96:3f:bd:4c:7c:1e:6f:6b:
1f:4e:16:d4:5f:e5:4d:b9:70:71:bd:74:67:42:d7:43:1b:53:
b3:aa:25:22:8a:82:c6:63:a3:23:46:6e:75:e0:b6:34:e1:b6:
1e:c6:8e:0f:af:db:b2:8a:66:82:6b:a9:6a:0d:9c:b8:43:c0:
c3:0f:98:c1:4a:e4:e2:ff:0f:85:fb:30:b5:21:46:87:5d:fd:
19:e6:d1:d1:38:7a:c4:a6:6f:36:4c:17:fe:95:0c:c3:da:5a:
9b:81:f0:d6:30:56:9f:27:9f:c9:00:ad:a5:8f:82:94:f1:67:
13:fb:48:14:55:5d:0e:29:14:29:2a:57:fd:6c:08:0a:3f:da:
64:28:bf:d8:f7:b5:c0:c1:a8:2f:94:66:c8:e3:59:0e:1f:47:
79:ab:9e:14:e9:47:9f:51:67:d5:1e:53:8f:17:1c:4b:56:bd:
b5:37:e1:d4:51:ee:5e:34:3f:f3:44:a9:5a:47:d8:65:0a:87:
79:8d:c3:20:35:c6:ec:df:ef:8e:9b:0b:b9:17:31:20:f6:4b:
77:8b:bc:99:01:34:3c:be:32:03:32:11:f5:4c:d5:fb:05:50:
55:69:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:27:48 2026 by rpki-client