Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: fjeR7colOJIg26C+t7wAyC0ywhfHy3l4e1yoBWeJCtA=
Subject key identifier: 9D:8D:DA:5F:0F:24:A2:67:73:95:3F:57:0A:99:16:B2:0C:84:18:7E
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 019E1DFDE3FEE519AEF4484E81DEAF1F9420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 0F71
Signing time: Tue 12 May 2026 21:00:38 +0000
Manifest this update: Tue 12 May 2026 21:00:38 +0000
Manifest next update: Wed 13 May 2026 21:00:38 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: KEFKo0p6m+rqaiO7fR40B8hBGAcoG6v41g4KkY+M/rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e3:fe:e5:19:ae:f4:48:4e:81:de:af:1f:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: May 12 21:00:38 2026 GMT
Not After : May 13 21:00:38 2026 GMT
Subject: CN=9d8dda5f0f24a26773953f570a9916b20c84187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:fa:5d:2f:35:78:37:be:50:81:0a:b5:0c:
c3:d6:88:35:2b:95:1f:29:58:c7:06:ee:96:f0:f5:
c4:51:d7:06:9e:ee:d2:ef:02:a7:7f:15:73:43:f4:
82:5e:68:ce:ea:02:1b:9d:b9:f4:d8:8b:7a:e1:51:
a9:8f:91:71:79:72:9f:f5:51:55:8c:7c:7a:72:1c:
2d:f8:df:dc:c6:29:4e:0f:69:f5:7c:4c:78:8b:5a:
32:11:ec:cf:17:28:c0:54:82:2c:fb:14:c3:5e:ca:
c3:2a:e7:5b:cf:b8:c9:60:dd:aa:cd:08:1c:5d:d5:
2f:cf:f4:54:88:b1:d3:1a:bf:f9:1a:41:f7:6d:17:
f3:bd:e0:bf:41:28:94:0d:24:8c:61:24:f3:e7:05:
a5:09:e6:8c:ad:12:e1:31:61:92:09:75:33:4d:06:
c5:51:cd:78:6d:0a:d7:cb:4f:37:1d:e5:54:8e:ae:
98:58:32:f5:bd:c1:3a:65:25:bf:6f:25:0c:26:ba:
8a:a7:94:19:5f:e4:44:30:c7:da:4b:52:d7:0d:ce:
c5:b4:bc:bf:7b:29:c9:03:f4:3b:cf:25:ce:05:9b:
9e:d2:94:f1:04:a3:f9:fb:30:10:4f:aa:0d:ac:b4:
de:98:3e:ce:0a:88:b8:d7:11:d0:19:69:ef:8b:ad:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:DA:5F:0F:24:A2:67:73:95:3F:57:0A:99:16:B2:0C:84:18:7E
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:44:6a:ce:34:66:2e:01:e7:ff:f0:e6:6e:26:f1:10:ff:0a:
e8:2f:90:24:62:79:1f:e5:20:77:b4:9a:b2:13:ce:58:e3:48:
4d:86:07:1b:b6:1c:e3:f4:42:af:cb:b2:a9:1d:bb:3c:36:99:
81:69:82:af:b1:4b:2c:1d:4f:39:6a:42:4e:4f:08:ae:25:93:
da:b7:cf:15:04:04:1a:49:cd:a2:6c:b1:fa:5f:e4:84:af:58:
16:96:26:83:6c:6d:6a:21:84:c0:f9:db:26:84:12:a7:7f:c5:
11:4c:06:68:bc:5f:e3:7d:a5:db:9a:50:14:e2:24:81:6b:d0:
6a:09:8f:5a:4e:35:76:b7:8d:33:fe:5e:6d:89:28:45:7c:e6:
60:26:e8:34:2a:b2:5a:95:4f:02:b7:46:2f:ed:8c:89:43:6c:
53:94:50:2b:4c:b2:e9:6c:0f:36:00:27:98:b1:c4:99:72:4e:
e5:ee:26:bf:dd:0f:4b:4f:10:cf:e6:54:d4:67:39:90:2d:63:
66:df:6d:e3:65:c2:c2:a6:44:41:26:66:d1:f2:60:2d:5b:3f:
32:5d:47:ab:21:4b:08:d8:88:50:0d:9a:a0:52:2d:9f:4a:b3:
c5:5e:1d:10:28:d3:39:52:56:73:cb:f2:45:76:91:6b:c1:39:
01:49:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:55 2026 by rpki-client