Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: VtepDCcl5wBN5W8+bZC0Hk+V+OLiea02u3SmXQspgbQ=
Subject key identifier: F4:3A:47:74:D4:60:46:50:19:BB:98:95:A3:20:89:17:6F:55:D4:05
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019D3752DA0E079282E1F17C8941D3E4CFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:01:09 +0000
Manifest this update: Sun 29 Mar 2026 02:01:09 +0000
Manifest next update: Mon 30 Mar 2026 02:01:09 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: mOCbt+eHvEcAa/ht9a1ZWQpwkaRQFqKeHPhln69oiFk=)
2: QR9wcx2L71SKEtutJS3_6RZ2qBM.roa (hash: jMtzB+uj9QQoD07qr0k17Wvt08fncaVh2dRnLEBazkA=)
3: kJniZJ6iZYXidYzcJA4ZBySrhb4.roa (hash: IPJtJpbvrKU2IYcfqcSW/SQBNcuNJehfDhscEcl6bto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:da:0e:07:92:82:e1:f1:7c:89:41:d3:e4:cf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Mar 29 02:01:09 2026 GMT
Not After : Mar 30 02:01:09 2026 GMT
Subject: CN=f43a4774d460465019bb9895a32089176f55d405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:78:be:d0:32:9f:80:97:66:70:e3:3a:70:
04:b6:9d:16:9d:0b:b6:8a:3a:77:a9:69:68:e9:d5:
39:5f:5a:fb:d9:7a:4a:85:c8:5c:80:65:8c:b8:19:
27:de:68:01:cd:62:09:a6:a0:c8:a8:85:51:73:6e:
ac:56:e2:5c:fc:51:99:f0:d0:94:ad:d7:e6:54:50:
7d:4b:04:11:02:10:f6:f1:c4:dd:eb:4b:63:71:d3:
b6:85:1d:70:7b:0c:25:62:1d:3c:ac:09:ae:09:7b:
93:a4:41:c1:36:d1:c7:1f:01:f6:08:bb:4b:ca:89:
2b:d4:63:b0:d4:00:2a:82:26:93:3e:61:63:be:9a:
90:e3:33:da:2a:5d:b7:dc:6e:40:c8:d6:96:4d:7f:
64:ce:0f:ea:47:a2:b2:8c:6f:ac:80:4d:32:b8:b8:
d2:10:64:3f:5c:8a:d0:4c:6f:e8:e9:e1:f6:3a:5f:
56:dd:af:2c:e9:ff:a3:4e:4d:1f:7e:7f:e6:62:f7:
98:e6:ed:00:e2:38:a6:7c:da:dc:dd:f7:7c:e7:de:
71:ab:bb:3c:b5:18:b1:39:a0:4d:c5:c5:76:9f:6b:
15:5e:fa:19:0c:7d:63:51:2f:d7:ee:3a:c0:05:52:
ed:1f:9b:c2:ad:65:f3:f2:61:53:26:fc:fe:51:be:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:47:74:D4:60:46:50:19:BB:98:95:A3:20:89:17:6F:55:D4:05
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:55:06:2e:3b:e3:6d:8a:13:d4:d9:19:79:c2:da:51:b2:c8:
48:88:5b:9b:63:49:48:d8:67:6e:0b:5b:c4:71:e8:42:b7:7e:
38:e5:11:30:c3:f1:02:04:d3:cd:b4:c8:07:e9:98:b9:7a:e4:
4d:8d:94:36:9d:2c:db:e1:32:75:66:92:93:75:3d:b1:87:0c:
0a:92:04:35:99:16:a4:d2:44:f2:3a:c4:7b:49:72:61:9d:86:
ac:a0:ae:73:1f:53:dc:63:33:68:f8:17:f4:7e:e0:54:35:7f:
ef:9f:35:f2:4d:52:27:ae:51:bd:5f:d1:6d:50:32:3d:7e:dc:
98:f8:9b:b2:6d:f6:8c:c9:9f:61:b2:8f:ad:02:de:44:0e:f7:
ff:38:63:8c:ff:f1:d2:de:1b:1d:74:e3:a5:65:9f:d2:67:e5:
f1:67:4f:b2:e8:f2:8e:ee:e1:6d:04:88:9a:85:1b:96:ce:cb:
c2:06:cc:ca:4b:fc:6c:65:d7:ff:41:4f:07:37:be:5f:2e:8d:
03:af:55:3c:71:a6:bf:9d:47:a8:67:c2:67:16:24:e9:9a:64:
fb:8e:9d:f2:74:92:f4:06:6e:c4:52:7b:c0:22:42:23:03:56:
1a:d7:74:75:4a:b2:c9:d5:88:69:94:a5:d7:27:a2:a1:f1:e7:
59:a0:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:27 2026 by rpki-client