Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
File: Ke_inNmVTrSDWEKZccdq97tfBWE.mft (raw, json)
Hash identifier: 8DUTnzgEI5ROfmj2/OgmRGfyfqGtJ5pRMabu5Cj5hok=
Subject key identifier: 3A:2E:DB:C9:E7:1D:C2:7F:7D:AA:27:90:D8:54:27:48:88:0A:A6:6F
Authority key identifier: 29:EF:E2:9C:D9:95:4E:B4:83:58:42:99:71:C7:6A:F7:BB:5F:05:61
Certificate issuer: /CN=29efe29cd9954eb48358429971c76af7bb5f0561
Certificate serial: 01A13E2609466F6B160EDA8EDEC36BF0C4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
Manifest number: 011E
Signing time: Thu 15 Oct 2026 06:00:42 +0000
Manifest this update: Thu 15 Oct 2026 06:00:42 +0000
Manifest next update: Fri 16 Oct 2026 06:00:42 +0000
Files and hashes: 1: Ke_inNmVTrSDWEKZccdq97tfBWE.crl (hash: sih3xmJAMZmEdEgESqVpY/28nRbDpOYtORHHIVEz+P4=)
2: MJcxGS0k_kKhq_iBy3QqSFYVnVU.roa (hash: fgIqrkRhKvk9zOrKBAATYNkw1hWIeg0IR0Gjr44Q3Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:09:46:6f:6b:16:0e:da:8e:de:c3:6b:f0:c4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29efe29cd9954eb48358429971c76af7bb5f0561
Validity
Not Before: Oct 15 06:00:42 2026 GMT
Not After : Oct 16 06:00:42 2026 GMT
Subject: CN=3a2edbc9e71dc27f7daa2790d8542748880aa66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:36:12:e6:37:6c:07:b9:a0:1a:9d:6f:32:
cf:f1:cd:99:8e:01:00:c8:46:15:3c:62:8d:ed:01:
c3:2c:b8:a5:da:e1:95:45:d8:56:94:95:90:1f:9d:
84:f6:dc:ae:ec:fb:98:21:4e:e9:cb:ba:c1:9d:97:
32:28:d3:65:64:87:cc:78:58:4e:53:17:c2:4e:dc:
80:0a:8c:e4:dc:e9:15:9d:c5:e8:30:73:33:76:c2:
cf:ce:f7:8a:8a:8d:37:90:01:29:e9:3f:55:3f:0e:
9d:b0:f2:3b:8f:e2:6d:b3:c9:f8:32:3d:12:cf:ad:
fc:f6:d4:e5:98:ed:c8:8e:eb:c3:a0:60:54:b5:5b:
28:4b:4b:47:f2:0a:54:8f:3c:fb:a5:b0:7c:bb:e1:
32:35:7f:0f:1e:9f:a0:f3:a4:f9:a7:e2:d0:fc:8e:
3c:07:25:b2:2a:b2:e4:b9:98:eb:60:0a:e9:4f:b7:
9e:bc:16:34:48:35:35:43:17:0c:39:c3:a5:b1:2e:
59:4c:54:97:ab:5c:40:04:c5:3f:4d:21:5e:e1:cc:
34:9b:f3:65:a3:5e:e9:5b:7c:fb:63:05:34:bf:b0:
cd:8f:3f:68:20:5e:4e:6e:18:34:4f:ed:fa:3f:01:
6a:c8:24:de:89:a4:35:5b:fd:3f:9d:67:54:6e:79:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:DB:C9:E7:1D:C2:7F:7D:AA:27:90:D8:54:27:48:88:0A:A6:6F
X509v3 Authority Key Identifier:
keyid:29:EF:E2:9C:D9:95:4E:B4:83:58:42:99:71:C7:6A:F7:BB:5F:05:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:02:87:54:42:3e:e4:75:57:9d:49:53:77:2a:5b:ad:d3:
22:3f:5d:fe:c5:cf:e8:c0:f9:62:6e:d6:b0:67:d8:19:99:e6:
39:a1:71:b6:29:20:ae:86:8c:95:87:13:cc:fc:77:41:4d:a8:
ec:2d:6e:cd:73:bb:ea:c1:d8:14:7e:7c:ca:94:ad:d3:57:13:
2f:64:3e:8c:11:e2:41:f5:57:25:7a:c7:21:64:8c:8d:cc:98:
ff:8d:58:b9:8a:4e:1f:d2:71:c3:1f:68:e6:a4:77:36:94:3a:
d0:0d:c8:85:81:ff:f6:52:e0:53:98:a9:19:c2:4e:b5:35:bf:
80:d2:8c:4b:84:77:c6:34:7d:46:6c:3d:77:92:4a:bd:41:3d:
9d:8f:4c:d8:37:25:7a:18:f6:a9:96:2e:94:73:ff:c9:3b:a5:
7c:7b:35:66:a8:f8:e0:fc:8c:c7:d1:de:0e:b7:d3:3e:63:3d:
a1:ad:11:08:8f:1a:9c:49:3c:15:5d:fb:94:18:56:b7:8a:6a:
b9:dd:3e:2d:32:0a:3e:d3:98:ea:c4:fc:a7:41:15:76:f0:6c:
e0:72:80:62:a5:a1:da:14:e3:60:fc:c3:fc:95:9a:52:83:c5:
b5:c9:e0:f5:ca:f5:a2:9c:e1:86:f4:ff:49:c4:d2:06:49:ce:
c8:ea:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:54:23 2026 by rpki-client