Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: 3RhdMYrxx1srTWrm80SfYtHNbtCj/Ojerbjeazti1DQ=
Subject key identifier: 12:39:C1:DD:02:18:0A:74:77:2C:54:3A:A7:7F:F4:67:49:06:83:EF
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 019ED42BCE9D9B67E46736AB467A358053BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 18F9
Signing time: Wed 17 Jun 2026 06:01:41 +0000
Manifest this update: Wed 17 Jun 2026 06:01:41 +0000
Manifest next update: Thu 18 Jun 2026 06:01:41 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: xIfZ24pQrqVNZWOK34yaKsBxqNpzZBvY3Zvr+OWod8Y=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:ce:9d:9b:67:e4:67:36:ab:46:7a:35:80:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jun 17 06:01:41 2026 GMT
Not After : Jun 18 06:01:41 2026 GMT
Subject: CN=1239c1dd02180a74772c543aa77ff467490683ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:5b:d1:0c:f8:24:03:9e:93:77:17:28:36:
d1:33:7c:59:4f:82:e3:0d:5c:44:9e:93:8a:84:ee:
31:6b:e0:9e:7a:4c:34:53:56:02:5a:22:74:d1:f4:
d4:30:59:4f:06:f2:75:90:ed:f3:4c:d1:74:e9:ac:
9f:5e:1c:34:0a:d1:5f:18:de:5a:a3:2e:df:86:07:
d9:38:df:1c:a0:75:61:71:5c:60:8d:76:d4:b5:63:
60:38:ed:6b:52:84:1a:1f:34:1e:37:fb:88:12:20:
5e:00:2f:78:38:a6:47:80:ea:43:ad:04:13:8e:0f:
05:ee:d4:0e:ed:91:db:f6:08:d1:cf:ee:7c:08:e7:
10:03:04:25:1f:2e:cb:c9:54:eb:53:f7:e4:09:4e:
27:eb:ec:3d:4a:e1:7c:d2:fc:87:be:00:69:4a:ac:
72:a8:63:9e:aa:4d:e1:c8:4f:e4:ee:d8:e6:bb:f0:
f6:86:17:1d:70:95:15:44:a8:21:0a:b2:c0:e1:4f:
f6:2d:76:27:69:4d:7f:28:89:e1:23:5f:39:c6:52:
bc:06:12:6c:30:98:6d:c6:a4:b8:76:63:82:53:8b:
4b:a4:df:99:06:ad:59:da:4f:d6:fe:ef:ea:9b:0a:
04:d3:06:9c:f2:be:b8:f4:dd:d5:79:b9:8e:f6:26:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:39:C1:DD:02:18:0A:74:77:2C:54:3A:A7:7F:F4:67:49:06:83:EF
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:86:e3:36:fa:01:8e:23:a4:a6:43:17:47:76:07:a1:24:e9:
f8:23:52:23:da:14:64:92:46:52:2f:83:2f:44:46:3b:23:e6:
e1:cc:ec:84:1f:95:bf:76:f7:98:9d:04:50:db:bf:d1:d5:f6:
bd:b3:d7:be:3e:f2:6f:43:2e:54:17:ff:71:0a:58:e1:83:43:
80:d2:cb:e5:7a:a9:f3:dd:a2:2f:93:7e:1e:d2:ab:10:ba:88:
29:b5:d9:54:12:72:c4:22:cc:99:65:94:be:1d:d5:b0:ea:a8:
76:e9:79:9d:9b:81:b8:73:20:90:6c:d6:29:de:18:cf:a8:13:
a9:a5:e2:3f:a3:db:e2:68:7f:30:d2:ab:81:64:02:32:f5:94:
5a:52:7a:d8:05:37:ca:c1:ef:89:03:23:60:0a:ce:7e:cc:78:
e6:97:9b:c6:2d:7a:93:4b:69:ac:9a:1f:09:3f:b4:49:57:6c:
30:39:da:fd:b4:ec:b8:e4:71:65:69:85:1b:1a:ad:2e:7b:87:
67:e9:e6:18:34:3c:01:fb:22:ac:b7:ef:5d:45:83:08:ba:f9:
ae:85:5a:d8:18:55:f2:3a:03:4d:04:07:26:85:c9:90:6c:24:
b3:47:39:a0:ca:85:cf:d9:98:62:73:67:f8:11:1a:4f:a5:91:
ad:90:46:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:55:09 2026 by rpki-client