Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: Gai5cFHhYnHP+wLDB484DzTMI2QRpBjD3Rxx2qtF10A=
Subject key identifier: BB:72:A9:83:02:CC:52:A2:12:D0:55:A6:EC:3D:B6:70:64:F1:D0:36
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 019CA9EB0B3A48499BC50049F893C503A75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 15:01:19 +0000
Manifest this update: Sun 01 Mar 2026 15:01:19 +0000
Manifest next update: Mon 02 Mar 2026 15:01:19 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: M7rcnaxMNHhFYjIAJ67XA4czz/J6RuB7HpZQ49m2sDE=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:0b:3a:48:49:9b:c5:00:49:f8:93:c5:03:a7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Mar 1 15:01:19 2026 GMT
Not After : Mar 2 15:01:19 2026 GMT
Subject: CN=bb72a98302cc52a212d055a6ec3db67064f1d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4d:e3:f3:fb:da:a7:f4:45:5d:e4:ad:65:48:
39:06:56:a5:a2:9a:b5:0a:d6:b3:29:91:53:c7:a1:
9a:a8:8b:68:d8:9c:f1:7f:f8:18:1e:86:4d:3f:35:
cf:61:da:e2:c9:46:fa:0c:f5:f3:3a:7d:e8:88:76:
9e:78:1c:e7:29:b3:2a:67:bb:92:15:48:83:e8:e9:
ac:4f:04:9d:eb:70:c2:4a:39:58:f2:ef:c2:f5:90:
12:ec:30:ac:a0:6e:5c:33:fe:3e:54:6a:31:b0:7b:
3a:76:92:2a:78:fe:40:95:ea:97:e5:dd:b0:4c:48:
98:5c:0f:9b:46:22:e1:45:63:e7:ac:8f:95:49:f4:
0a:01:4a:44:96:e4:f7:b1:9f:13:89:85:f4:e0:51:
a5:a2:06:da:8d:4a:bb:c2:4b:45:c2:91:69:8d:b9:
90:63:35:83:9e:14:6a:56:b1:76:59:55:0c:49:00:
be:b1:17:45:d3:c8:cb:43:fa:55:b9:e2:92:fc:5b:
1b:60:8c:2f:f7:1c:5d:a0:7e:7e:df:99:8d:9b:60:
7e:a3:fd:ec:95:59:ba:ca:e6:5e:c0:23:3d:ff:c4:
4a:0e:e0:9f:a1:3b:d0:52:f0:63:1d:58:fd:16:9f:
75:b6:f9:75:6d:89:f0:45:01:99:d3:66:fc:ea:71:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:72:A9:83:02:CC:52:A2:12:D0:55:A6:EC:3D:B6:70:64:F1:D0:36
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e4:5e:60:d7:24:0e:c6:a9:ad:85:a4:aa:40:d6:9d:59:26:
ec:00:05:2b:9a:a1:f0:3d:22:f9:e9:8e:3e:c0:ba:e8:bb:9c:
79:a6:63:ec:50:a9:6c:17:8e:3a:e4:64:8b:ff:50:0b:b8:29:
84:06:40:b2:c4:b1:84:0d:48:71:3f:31:f2:7c:a2:d2:9f:d7:
34:1e:4c:73:d4:60:4d:f7:57:89:2d:da:87:09:9b:0f:a0:97:
70:34:dc:c7:86:11:5a:9a:17:b8:40:3a:2b:d2:0b:a7:8d:e4:
53:3f:fd:39:3f:ba:1c:0f:29:cc:a0:52:8e:57:2b:22:d9:a6:
f8:06:69:06:c0:a6:32:93:10:2d:aa:1d:fd:d7:94:85:da:e7:
a8:cf:79:6c:cf:a4:d1:38:93:0e:2d:ac:f1:7b:e6:5c:70:f6:
20:54:60:88:46:56:4d:03:6a:d8:ee:ed:df:0b:ca:62:0b:f5:
e7:cc:25:37:81:92:ec:93:47:31:a7:a3:22:b5:aa:d5:b8:b4:
08:18:8b:45:d4:74:87:b0:de:f4:d1:46:34:ae:c1:6e:c3:28:
fe:c4:61:71:11:f8:b9:1f:69:70:18:9b:0b:bf:1f:08:f5:03:
2b:a3:6c:53:9b:de:c5:cd:c7:88:82:ef:8c:1c:f3:85:77:77:
2d:c9:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:27 2026 by rpki-client