Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: WVGBH8qxWsu4sGhzDHMfDEi0FGyyK9Geq8vXPQb93S0=
Subject key identifier: 92:00:02:E1:E8:BF:E1:04:B5:4A:A7:B4:E5:66:CD:3B:B6:0A:41:16
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 019D26CD93AADD21211AE4C04462A90042B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 0EF1
Signing time: Wed 25 Mar 2026 21:01:40 +0000
Manifest this update: Wed 25 Mar 2026 21:01:40 +0000
Manifest next update: Thu 26 Mar 2026 21:01:40 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: iXya5yZ4dwwrsvo0H4/Y/sczQXd/gSBS5qzKu/8xxKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:93:aa:dd:21:21:1a:e4:c0:44:62:a9:00:42:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Mar 25 21:01:40 2026 GMT
Not After : Mar 26 21:01:40 2026 GMT
Subject: CN=920002e1e8bfe104b54aa7b4e566cd3bb60a4116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:95:24:5a:07:77:c1:ad:1d:02:31:29:a3:
6a:5b:21:35:92:3b:85:5b:85:f3:63:9d:11:9e:c1:
70:7f:fb:c1:f5:72:91:d4:29:ff:88:eb:38:ed:c3:
17:53:f4:fa:fc:19:4c:60:4a:b5:a0:5d:cb:3c:62:
cd:3d:78:ac:b4:86:70:eb:b5:7e:c9:af:66:e5:99:
c1:ef:a8:93:45:f1:30:50:88:01:d1:be:64:09:1f:
31:a8:6b:fe:cc:93:a9:74:27:66:1a:a5:4e:d6:c8:
96:c8:5e:88:8f:dc:b0:ac:e4:73:45:c2:2d:aa:4d:
e8:91:27:c5:0a:5a:39:c0:46:1e:ec:a2:68:18:bc:
76:96:cd:c2:f2:80:75:b0:ac:40:b2:40:e8:c8:14:
b1:70:d9:50:1b:da:c1:91:81:8f:38:2f:ce:21:78:
ca:9b:5c:4c:ad:2e:3d:48:10:08:40:78:63:a2:8b:
f3:74:4f:5d:8b:a0:79:2b:66:f5:11:56:e8:d5:a5:
a7:ff:e9:a5:69:20:19:bf:ef:b1:c5:83:10:ca:bf:
2b:20:0e:c6:89:01:8d:a1:a4:51:2c:9a:38:8b:fb:
4e:db:5a:ce:38:a7:13:97:09:3b:e7:b1:85:5d:d7:
8d:b5:44:c9:f5:26:44:c7:a2:dc:19:09:14:af:18:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:00:02:E1:E8:BF:E1:04:B5:4A:A7:B4:E5:66:CD:3B:B6:0A:41:16
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:4f:e3:49:3c:7c:b6:a2:58:f7:88:f6:46:da:17:58:ef:
68:05:6f:3f:2c:de:a4:05:80:55:23:46:58:90:68:78:a2:b4:
bd:23:53:89:da:33:6a:e8:e4:be:ce:9a:11:89:60:42:05:ae:
19:55:ed:e9:29:6a:4c:a9:f8:6c:a9:90:b1:b8:68:0d:9d:8d:
fc:00:d3:f9:2d:e3:df:62:54:bc:bb:14:84:3f:e5:d4:00:44:
59:a2:c1:9f:f6:7d:fb:9f:04:7e:5a:ca:05:bb:e0:e5:6b:e4:
33:dc:22:b5:1c:42:1a:2c:45:c9:40:c4:81:dd:d2:fb:c3:c4:
53:ab:73:72:9f:63:2e:4c:a0:33:df:ea:7d:32:b9:0d:25:0b:
57:c7:ea:9f:10:b0:9f:46:2e:a9:be:50:29:4b:8f:5b:96:2b:
76:82:6f:4e:f0:3e:fd:a5:2d:d1:25:3a:01:dd:17:92:21:27:
4a:1d:a5:1f:5f:b2:3c:04:85:a8:11:69:9b:cc:c9:05:8e:b3:
30:87:4b:d0:b1:2b:75:5b:87:ba:1f:42:c4:63:41:1f:47:41:
a6:16:b0:d8:71:03:97:9e:78:3c:ef:eb:6c:b8:df:c0:8a:81:
d1:ec:01:a4:2b:fc:fe:40:83:af:9f:06:b2:29:c0:cc:c4:b1:
6f:b5:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:36 2026 by rpki-client