Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: RUwEVj1mu2n0CObcweIGY2BqsDNXiCFf5yShM6ZMnWg=
Subject key identifier: B7:A7:6F:48:F0:C0:63:B5:CE:01:72:EC:8D:2D:83:F3:BF:5A:08:65
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 019FABD15F8272CEC72E219967A6A9F0F978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 103F
Signing time: Wed 29 Jul 2026 03:00:53 +0000
Manifest this update: Wed 29 Jul 2026 03:00:53 +0000
Manifest next update: Thu 30 Jul 2026 03:00:53 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: 0BinrpgFueYUnYbnAalSkN6eYb9ZEF4MnjfyTGPg4i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:5f:82:72:ce:c7:2e:21:99:67:a6:a9:f0:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Jul 29 03:00:53 2026 GMT
Not After : Jul 30 03:00:53 2026 GMT
Subject: CN=b7a76f48f0c063b5ce0172ec8d2d83f3bf5a0865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:13:8e:6b:13:14:27:9d:b3:78:e9:2d:d7:
e1:5d:37:db:ea:cf:90:d1:1b:fe:88:67:b6:ec:24:
ab:38:60:b9:44:0b:85:dc:4e:ac:6d:50:8d:71:2b:
c4:9c:73:cb:07:56:b9:25:6a:11:bf:2e:09:be:d3:
1d:ac:a3:c9:21:df:fd:f3:25:6f:81:78:bc:04:13:
1f:24:38:8a:1b:37:a5:8a:3a:9e:6a:08:02:87:7c:
2d:ac:65:fc:bf:45:6c:4a:a8:d4:29:4a:11:72:a8:
9c:22:70:17:6c:e2:0c:0d:a7:2e:10:6a:ef:e0:d3:
15:ce:52:db:1a:5c:d6:cb:42:2d:8f:12:43:fa:c1:
3c:9e:9e:5e:d4:e7:38:dc:37:99:ff:6c:96:42:43:
9a:02:0b:5f:67:66:82:e2:e1:e3:e5:0c:fa:67:79:
1a:c3:da:3f:6e:3e:c2:4e:1e:b4:10:6d:23:61:fb:
7f:dc:f0:06:07:d9:7b:48:67:5f:46:8e:f3:2a:05:
b3:96:3b:12:35:27:07:b3:b6:d8:fb:04:fa:1f:ee:
57:fc:71:c3:51:af:58:88:68:25:ba:a6:e4:34:58:
6f:08:ee:c0:3a:7d:e1:fa:f9:e6:b9:bd:b8:32:b2:
1f:d1:29:bc:35:f4:93:e0:71:27:92:a0:6f:c4:39:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A7:6F:48:F0:C0:63:B5:CE:01:72:EC:8D:2D:83:F3:BF:5A:08:65
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:0b:82:64:0a:e2:1a:8b:c8:50:f8:07:18:d4:2e:5b:d8:
3c:d2:5c:a6:06:db:69:60:85:64:57:0a:91:dc:f6:6b:e7:9b:
eb:d7:f5:7a:2c:5a:90:c0:21:72:f7:40:cd:f6:83:2c:21:39:
4a:1c:34:e9:63:02:96:b9:71:30:c3:08:f3:ac:33:66:d9:70:
49:b9:39:f0:ad:32:63:0b:ea:e9:33:16:0a:2c:e8:c4:15:25:
f9:03:42:00:ae:ed:8f:dd:8c:cb:8a:97:cf:b9:cb:7d:d9:50:
96:6d:87:f8:8f:20:27:f7:8f:ac:73:f5:f5:8f:87:63:b7:b1:
04:c3:de:f7:87:0a:f2:8a:d7:e0:99:15:16:bd:aa:16:4b:74:
f8:7c:8e:bb:0a:3d:72:92:55:f8:6c:5d:c7:c9:49:7f:83:dc:
72:e9:ee:ef:91:b6:37:f4:8d:dd:19:81:ff:88:15:ce:46:e8:
ed:7a:60:d3:5d:76:a5:c9:b8:79:7e:2d:e1:30:78:e9:52:ff:
3e:83:5c:0a:44:58:af:df:3a:bc:16:cb:71:f5:4e:1e:2d:d3:
0f:ee:3a:4e:b2:14:5e:eb:65:64:98:5d:0c:59:f2:a2:c6:9d:
b9:3e:28:45:6e:58:ea:b6:79:d5:a5:38:aa:c8:01:ca:35:c2:
c2:c6:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:03:49 2026 by rpki-client