Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: vS+xCvLG6G73LZZtah9C+ohlkexpNOFGhPwBEUlhxXQ=
Subject key identifier: 77:C7:0A:DA:1B:BB:54:FE:15:AF:C6:AB:54:E6:A9:F9:D0:A9:E5:D2
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 01A0C7B41A668F233746FE313BFC34D6E2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 10D2
Signing time: Tue 22 Sep 2026 06:01:04 +0000
Manifest this update: Tue 22 Sep 2026 06:01:04 +0000
Manifest next update: Wed 23 Sep 2026 06:01:04 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: 0/q+lWqtgUVIqTYkhmG+7CVG9SRKkPJ7gGXPnwg5uU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b4:1a:66:8f:23:37:46:fe:31:3b:fc:34:d6:e2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Sep 22 06:01:04 2026 GMT
Not After : Sep 23 06:01:04 2026 GMT
Subject: CN=77c70ada1bbb54fe15afc6ab54e6a9f9d0a9e5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:ca:93:8d:04:46:07:67:2f:e5:4e:1c:e4:
a0:0c:d0:9a:2c:a0:e9:ea:95:96:cd:86:7d:3f:90:
3a:b8:04:07:eb:6a:cf:2e:aa:98:17:a5:7f:2a:82:
a2:59:44:ed:e7:30:8c:0a:80:71:6d:44:cd:d7:4b:
e8:03:c6:a3:26:5f:cf:38:18:06:71:07:27:a5:11:
39:e5:55:18:f5:0e:4d:57:fc:1c:e7:fc:5e:12:c3:
2d:10:a9:ed:a4:b4:11:4c:06:4d:a2:2c:e2:b6:43:
f2:d3:55:43:b3:76:a9:f3:8d:db:dc:b6:7a:53:a1:
21:7d:62:e5:d6:51:f1:dd:aa:4a:ab:e1:97:d9:9a:
a0:bc:d0:bb:b0:ad:05:eb:8f:bc:a8:07:f7:59:1d:
d0:75:7f:13:e6:4b:81:14:fe:5a:e9:ca:f2:26:dc:
fe:1c:10:a5:cb:f1:5f:df:f7:06:e2:fb:52:2b:90:
b8:0a:06:c2:2d:7b:d1:b6:c6:8c:e1:4a:f0:69:7d:
6f:ac:de:97:a0:38:90:ff:09:6e:f2:05:7a:40:d5:
38:df:dc:68:79:4c:1f:fc:0d:03:5c:df:41:2c:26:
72:7a:ba:4c:e8:24:78:5e:31:50:4c:e9:01:87:8c:
db:44:a3:46:39:e8:8d:92:e5:80:59:a6:6f:13:e2:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:0A:DA:1B:BB:54:FE:15:AF:C6:AB:54:E6:A9:F9:D0:A9:E5:D2
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c9:bd:61:2f:db:3e:98:b2:84:9f:72:ee:79:6e:7f:8a:0f:
74:e1:98:b7:72:12:d6:31:60:d0:ea:a0:2a:2b:0a:df:91:67:
0d:18:89:5c:93:84:e8:e3:cc:9d:13:61:6c:e8:72:fc:86:5e:
3a:07:de:1f:64:57:44:c5:36:07:48:5f:ef:8e:f5:03:08:70:
1a:a9:6b:2e:6c:91:a9:c8:3c:20:21:12:b5:0d:a5:fb:82:e9:
95:cd:75:64:10:aa:02:b4:71:7c:4c:b4:a5:fc:79:6d:0f:70:
74:95:61:72:fa:58:17:3f:3f:c3:9d:d0:93:40:0d:a3:8c:78:
11:9e:ed:81:69:dc:af:e6:fe:77:50:4c:59:6b:ba:88:81:a9:
89:05:f2:87:ac:e6:14:af:3e:cc:96:4e:8a:ef:e8:38:4e:9d:
ce:9d:1b:dc:56:3d:74:8d:96:8e:d2:1d:ae:92:71:a8:44:fc:
98:1b:1f:86:e5:c3:6c:68:be:8f:ae:4b:fd:51:cd:ad:c2:64:
22:bb:74:4d:ec:88:b4:d2:5b:07:08:2c:5f:db:bf:54:08:4a:
eb:0b:a5:6e:50:07:80:bf:03:c6:50:07:f3:fa:c0:78:49:00:
96:0f:f8:d9:01:77:48:d3:d7:17:78:38:ab:64:75:03:75:a7:
c1:0b:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:36 2026 by rpki-client