Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: TDLbPCq3Ht/CPnKcHJZpEyD9dUI13LRE4dJ66fZTUT4=
Subject key identifier: D9:2A:A9:C2:B6:AA:10:27:4B:50:73:F8:AD:09:EC:9A:E9:9A:6B:D1
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 019FA0DFB7B061FD069D5490F0B769D652E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 00:00:43 +0000
Manifest this update: Mon 27 Jul 2026 00:00:43 +0000
Manifest next update: Tue 28 Jul 2026 00:00:43 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: sx6AxbAJlUJVQujqLkopkBJxfaR8XrP7goptDDE/0MA=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:b7:b0:61:fd:06:9d:54:90:f0:b7:69:d6:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jul 27 00:00:43 2026 GMT
Not After : Jul 28 00:00:43 2026 GMT
Subject: CN=d92aa9c2b6aa10274b5073f8ad09ec9ae99a6bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:a2:1b:38:0f:17:76:a4:1c:a1:03:3e:d6:
6e:28:50:65:39:1a:76:e5:04:12:11:96:48:59:29:
89:f9:f2:c5:c7:5f:68:12:41:f7:dd:ca:6c:61:4f:
43:ec:41:2e:1f:03:6e:ce:d1:d8:f9:fa:cf:94:52:
67:eb:1c:9a:54:6d:09:22:ec:ae:b5:96:d0:7c:48:
ae:5a:c0:be:93:c2:9a:49:33:5d:bb:00:e7:da:5f:
c6:de:95:a2:16:a8:04:94:c5:1c:c9:80:a4:d1:d9:
75:f0:fd:6d:96:be:ea:da:07:da:e0:7c:0e:c7:46:
bb:9d:9f:06:0e:62:dc:6d:4f:9b:dd:7a:70:12:87:
1c:52:fd:52:4d:fd:fb:13:c1:1d:1d:2f:d2:1b:4f:
28:da:9b:63:1b:ba:0e:80:f1:1b:02:54:ef:c4:e6:
b0:64:57:42:cd:6b:63:6a:4b:03:3d:e5:c1:1f:ff:
e8:22:43:b7:72:92:2c:34:b0:cd:3e:cb:cd:2a:bf:
2b:5b:b3:bf:ab:1a:cc:c4:71:71:75:d1:4e:a9:95:
39:6f:ec:20:25:72:58:d2:12:85:86:ed:21:e1:15:
b1:e5:25:2b:d3:9e:71:c3:c6:6c:06:a7:e7:aa:1b:
23:75:ae:28:e6:20:db:1b:1a:82:06:78:87:d7:be:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:A9:C2:B6:AA:10:27:4B:50:73:F8:AD:09:EC:9A:E9:9A:6B:D1
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0b:c6:b4:0a:1c:9b:f8:4a:d0:f4:7c:97:89:d8:f9:91:bc:
95:a0:ef:ea:01:28:a0:5e:96:a7:5b:81:95:94:d7:71:af:0f:
f0:46:65:cf:0f:73:ad:7a:ab:b7:64:82:7e:52:3a:cb:64:d5:
10:a8:41:e6:9b:66:29:1f:66:5f:c1:78:37:b9:29:f1:f8:9e:
d2:91:ca:62:68:a6:2d:c0:ff:d9:38:f8:fe:03:f9:35:eb:38:
bd:63:8c:1e:69:e6:c2:68:19:cb:f4:6a:f7:73:3a:e6:7b:7e:
0b:b1:e2:54:25:67:f4:e1:5f:2e:23:06:bd:f9:5b:d0:e4:4b:
ad:3f:7c:73:be:d1:f8:24:dd:b9:a9:24:40:91:2a:2b:e9:1d:
64:1f:66:c8:97:11:38:21:b0:df:8e:69:53:07:22:79:19:97:
f7:c0:1e:81:69:32:d5:f1:fa:fd:d3:68:ce:73:28:ff:d0:a1:
7a:2f:3d:00:c8:09:e1:5e:55:22:84:8c:75:22:b8:b4:01:93:
7d:3d:78:ca:bc:2e:76:b0:ef:d1:b2:b6:4f:cb:6e:b8:a1:28:
33:34:d0:ce:8e:68:55:5e:c7:09:98:5f:61:84:d6:46:0e:ce:
60:f6:c9:11:3f:de:22:60:96:3b:de:63:8c:0b:5b:15:75:05:
d1:ed:b6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g37ewYf0GnVSQ8Ldp1lLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWRmMmE0ZjIwYWMwODIzNWM0MDE4MGRlNzRlYmMzOTM1
Y2ZjMjIwHhcNMjYwNzI3MDAwMDQzWhcNMjYwNzI4MDAwMDQzWjAzMTEwLwYDVQQD
EyhkOTJhYTljMmI2YWExMDI3NGI1MDczZjhhZDA5ZWM5YWU5OWE2YmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dKiGzgPF3akHKEDPtZuKFBlORp2
5QQSEZZIWSmJ+fLFx19oEkH33cpsYU9D7EEuHwNuztHY+frPlFJn6xyaVG0JIuyu
tZbQfEiuWsC+k8KaSTNduwDn2l/G3pWiFqgElMUcyYCk0dl18P1tlr7q2gfa4HwO
x0a7nZ8GDmLcbU+b3XpwEoccUv1STf37E8EdHS/SG08o2ptjG7oOgPEbAlTvxOaw
ZFdCzWtjaksDPeXBH//oIkO3cpIsNLDNPsvNKr8rW7O/qxrMxHFxddFOqZU5b+wg
JXJY0hKFhu0h4RWx5SUr055xw8ZsBqfnqhsjda4o5iDbGxqCBniH177SWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkqqcK2qhAnS1Bz+K0J7JrpmmvRMB8GA1UdIwQY
MBaAFCnt8qTyCsCCNcQBgN5068OTXPwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUt
OTI0YzI5Y2Y3N2M0LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUtOTI0YzI5Y2Y3N2M0
LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwvGtAoc
m/hK0PR8l4nY+ZG8laDv6gEooF6Wp1uBlZTXca8P8EZlzw9zrXqrt2SCflI6y2TV
EKhB5ptmKR9mX8F4N7kp8fie0pHKYmimLcD/2Tj4/gP5Nes4vWOMHmnmwmgZy/Rq
93M65nt+C7HiVCVn9OFfLiMGvflb0ORLrT98c77R+CTduakkQJEqK+kdZB9myJcR
OCGw345pUwcieRmX98AegWky1fH6/dNoznMo/9Chei89AMgJ4V5VIoSMdSK4tAGT
fT14yrwudrDv0bK2T8tuuKEoMzTQzo5oVV7HCZhfYYTWRg7OYPbJET/eImCWO95j
jAtbFXUF0e22zw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:03:59 2026 by rpki-client