Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: rVo7s+G7maOq7bQP2JdRNYoMPa2+b9IitLlKb+g4eFw=
Subject key identifier: 0B:CB:29:D7:3A:F6:BA:EF:F4:42:FB:7C:63:EF:C0:50:24:79:59:66
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 019F92B684661DDE3501C5314A65168C6FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 1032
Signing time: Fri 24 Jul 2026 06:01:02 +0000
Manifest this update: Fri 24 Jul 2026 06:01:02 +0000
Manifest next update: Sat 25 Jul 2026 06:01:02 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: 85O5U3qR5h2t0V7hzWUSTJekY8wSQvUQlbuw65Plf74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:84:66:1d:de:35:01:c5:31:4a:65:16:8c:6f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Jul 24 06:01:02 2026 GMT
Not After : Jul 25 06:01:02 2026 GMT
Subject: CN=0bcb29d73af6baeff442fb7c63efc05024795966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:d3:0f:53:74:da:da:25:e0:65:c8:f6:72:
50:c8:a5:3c:25:5f:31:a0:55:c4:89:64:e5:49:b7:
d7:43:c4:d1:2e:8f:ed:18:69:be:5b:27:be:23:e6:
06:79:09:bc:c8:18:d5:42:08:90:1e:e0:53:0f:09:
e6:bd:23:05:1d:2f:4c:cc:b0:e3:82:8f:bb:df:2f:
6b:cc:da:2f:02:13:5a:05:14:71:86:60:11:d2:7b:
61:3d:0e:81:1e:33:34:82:f0:9a:d4:cd:16:a5:44:
59:5f:0e:68:4d:07:fb:9b:64:b8:c1:27:c7:a0:8c:
67:6d:75:92:b0:9f:79:68:80:26:77:ee:ad:cd:2d:
af:8e:8d:f9:20:5b:23:6f:ed:ab:bb:3d:0d:c0:bc:
37:7b:fd:2f:04:1f:8e:2f:70:cb:e1:43:56:61:9e:
d4:c7:17:42:87:9f:be:e4:d3:d3:25:0c:a0:5e:4b:
b1:13:91:9e:0a:ad:b8:fa:32:fd:f5:e6:bb:8c:bb:
b9:d4:f1:5f:a0:45:ef:8f:00:fe:b8:23:29:98:59:
a7:47:4d:d0:99:8f:e2:79:a8:63:dc:b4:d6:ab:06:
b1:8b:e7:87:e7:ac:be:aa:20:f2:91:d5:05:11:8b:
02:d1:ad:0e:9f:dc:7d:54:36:96:55:c4:a7:8c:ab:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CB:29:D7:3A:F6:BA:EF:F4:42:FB:7C:63:EF:C0:50:24:79:59:66
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:91:09:4f:09:34:96:80:86:39:4d:e6:79:83:ee:c9:bd:6b:
56:64:26:31:ce:29:91:f5:20:6e:dc:8c:42:08:a4:c3:f4:a4:
68:f5:76:4f:f8:68:22:7a:94:b4:2c:e7:04:95:a3:8e:b7:81:
18:d6:39:f7:5a:d5:ff:86:2c:e0:89:c1:84:35:ae:dc:b1:30:
bc:2b:65:98:95:66:7d:7b:63:45:b2:72:be:e8:dc:8b:3c:73:
d0:8f:18:c0:4f:e6:bc:4f:fb:ff:4c:86:d8:05:e7:67:9e:89:
f6:6a:83:32:c2:dc:58:1c:c0:9d:bb:c7:fe:c9:29:d8:24:52:
29:41:5e:9a:97:57:21:28:88:25:d4:d1:ea:5d:ce:33:fd:83:
77:34:1f:8a:92:d7:ee:03:ee:63:ba:9c:44:6c:c6:70:46:8b:
ac:46:9d:91:91:8c:7b:1a:ac:41:3d:66:2a:0b:0f:7d:49:35:
2d:f9:ca:80:49:59:7a:58:78:d4:c0:db:73:ac:40:8b:a4:9a:
ed:74:27:33:2e:86:61:c5:26:92:51:ad:c6:1e:d5:de:cd:42:
d9:19:2c:f0:dd:a5:c0:48:5a:a0:ae:06:bd:e1:17:58:03:b3:
60:ff:b4:c6:3d:0b:58:83:b1:ba:5c:24:18:95:9f:04:08:f5:
7c:4f:60:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StoRmHd41AcUxSmUWjG/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWEwYmRlN2Y2OTJiYzVmZGMwYjE2OGJhNjE0YTAyNzJm
MmU2NGQwHhcNMjYwNzI0MDYwMTAyWhcNMjYwNzI1MDYwMTAyWjAzMTEwLwYDVQQD
EygwYmNiMjlkNzNhZjZiYWVmZjQ0MmZiN2M2M2VmYzA1MDI0Nzk1OTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmDTD1N02tol4GXI9nJQyKU8JV8x
oFXEiWTlSbfXQ8TRLo/tGGm+Wye+I+YGeQm8yBjVQgiQHuBTDwnmvSMFHS9MzLDj
go+73y9rzNovAhNaBRRxhmAR0nthPQ6BHjM0gvCa1M0WpURZXw5oTQf7m2S4wSfH
oIxnbXWSsJ95aIAmd+6tzS2vjo35IFsjb+2ruz0NwLw3e/0vBB+OL3DL4UNWYZ7U
xxdCh5++5NPTJQygXkuxE5GeCq24+jL99ea7jLu51PFfoEXvjwD+uCMpmFmnR03Q
mY/ieahj3LTWqwaxi+eH56y+qiDykdUFEYsC0a0On9x9VDaWVcSnjKvNPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvLKdc69rrv9EL7fGPvwFAkeVlmMB8GA1UdIwQY
MBaAFCnqC95/aSvF/cCxaLphSgJy8uZNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMmZmNWItMDAwOC00NTcyLTkzODAt
OTc2YzA0YmRmMThmLzEvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMmZmNWItMDAwOC00NTcyLTkzODAtOTc2YzA0YmRmMThm
LzEvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpEJTwk0
loCGOU3meYPuyb1rVmQmMc4pkfUgbtyMQgikw/SkaPV2T/hoInqUtCznBJWjjreB
GNY591rV/4Ys4InBhDWu3LEwvCtlmJVmfXtjRbJyvujcizxz0I8YwE/mvE/7/0yG
2AXnZ56J9mqDMsLcWBzAnbvH/skp2CRSKUFempdXISiIJdTR6l3OM/2DdzQfipLX
7gPuY7qcRGzGcEaLrEadkZGMexqsQT1mKgsPfUk1LfnKgElZelh41MDbc6xAi6Sa
7XQnMy6GYcUmklGtxh7V3s1C2Rks8N2lwEhaoK4GveEXWAOzYP+0xj0LWIOxulwk
GJWfBAj1fE9gcA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:32 2026 by rpki-client