Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: DF+b7LgoZWG7NxPW5zdzrDoupTu/OTKJbxvDn7bkhXc=
Subject key identifier: 9C:FD:49:B1:CC:7F:BC:9C:85:51:02:31:DF:20:50:07:47:6D:E4:CD
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 019DCF756F0DB3E95B2515A9B788FCAEBFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1872
Signing time: Mon 27 Apr 2026 15:01:12 +0000
Manifest this update: Mon 27 Apr 2026 15:01:12 +0000
Manifest next update: Tue 28 Apr 2026 15:01:12 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: ZBZjtMSQYKnnDzEmjKYNaGHt471GpbhiSDUQgDAf2QQ=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:6f:0d:b3:e9:5b:25:15:a9:b7:88:fc:ae:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Apr 27 15:01:12 2026 GMT
Not After : Apr 28 15:01:12 2026 GMT
Subject: CN=9cfd49b1cc7fbc9c85510231df205007476de4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:d6:44:3f:16:db:e9:e5:70:d4:12:33:ad:
2b:8c:40:29:6f:f5:67:c4:6b:57:dd:1b:e2:f4:e4:
2a:de:29:c9:f2:82:4e:a3:4b:a8:f3:ab:2c:dc:ae:
67:1b:10:7e:73:83:c0:32:24:b5:75:c5:8e:c7:76:
aa:50:e4:fd:a1:e4:2d:ac:56:1d:68:42:85:c8:fb:
48:b8:1b:00:ae:fc:ec:df:e9:1b:68:97:ca:b8:13:
e9:11:25:35:48:9e:9b:3f:07:99:60:9b:05:4f:83:
05:96:f2:7d:0d:a8:ad:9b:5c:ba:d7:af:ab:f8:ce:
3a:e3:2e:15:ea:84:5c:b1:1f:6a:8f:af:c7:9a:5a:
d4:3e:ce:3a:e4:ad:3f:d1:9e:65:4b:f1:5e:21:75:
09:7c:31:74:37:95:0a:ad:30:17:cb:fc:58:8b:0f:
85:40:25:2d:c4:e2:d0:f5:94:66:e8:a1:f2:05:48:
33:2f:8d:88:2c:08:47:22:82:2c:f1:dd:5f:9b:2d:
d3:61:e9:1e:ea:0f:7e:2e:c7:ae:3a:92:c6:bc:61:
42:29:ab:43:7c:9c:1c:f7:7a:70:4d:14:ae:22:be:
1a:6f:50:f5:66:50:25:60:24:60:4e:13:80:67:35:
e5:b8:17:4d:14:c5:a1:fd:08:7a:b9:b8:80:1b:45:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FD:49:B1:CC:7F:BC:9C:85:51:02:31:DF:20:50:07:47:6D:E4:CD
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:da:57:1b:af:22:fc:cf:ea:b4:ee:6d:70:c4:5f:64:d3:db:
6d:fb:2b:47:d7:d8:d2:66:d8:b8:bc:71:8d:f6:18:34:02:e9:
ac:30:6e:b2:13:06:d8:c5:f7:5b:e6:f5:b4:c8:37:93:ca:e1:
bd:68:d4:d9:af:fd:80:60:af:45:60:3e:0f:77:95:1b:bb:79:
8f:7c:67:99:a5:a9:81:80:2f:ca:85:90:aa:02:76:66:22:ad:
ae:fe:7f:3d:e3:f9:ff:90:86:01:ba:92:34:60:e5:31:25:a7:
8c:6d:b2:af:cf:dd:bf:a6:c0:ec:bc:e3:55:3f:60:4c:8c:43:
54:f7:9e:69:5a:2a:10:3e:f9:48:f1:82:bb:7e:fc:66:54:e6:
e2:ab:d0:9e:d7:ca:76:04:b1:05:0d:a6:78:1e:85:5a:7b:56:
1d:14:60:61:e1:d9:94:f2:68:b6:7a:ce:df:21:cf:cf:ff:d5:
d1:8c:d2:2b:32:7f:a1:49:3b:fd:4e:57:c3:ed:69:bd:5d:44:
0f:85:49:90:e7:bf:c3:a5:60:29:d5:12:f0:23:c5:9e:70:12:
ba:73:38:99:30:b9:e0:4b:53:1b:9b:37:a4:6b:f7:ad:86:2d:
11:31:6f:57:f8:dc:2b:ef:c7:2b:f9:66:51:d5:f8:62:9c:49:
0b:8a:31:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdW8Ns+lbJRWpt4j8rr/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWRmMmE0ZjIwYWMwODIzNWM0MDE4MGRlNzRlYmMzOTM1
Y2ZjMjIwHhcNMjYwNDI3MTUwMTEyWhcNMjYwNDI4MTUwMTEyWjAzMTEwLwYDVQQD
Eyg5Y2ZkNDliMWNjN2ZiYzljODU1MTAyMzFkZjIwNTAwNzQ3NmRlNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYrWRD8W2+nlcNQSM60rjEApb/Vn
xGtX3Rvi9OQq3inJ8oJOo0uo86ss3K5nGxB+c4PAMiS1dcWOx3aqUOT9oeQtrFYd
aEKFyPtIuBsArvzs3+kbaJfKuBPpESU1SJ6bPweZYJsFT4MFlvJ9Daitm1y616+r
+M464y4V6oRcsR9qj6/HmlrUPs465K0/0Z5lS/FeIXUJfDF0N5UKrTAXy/xYiw+F
QCUtxOLQ9ZRm6KHyBUgzL42ILAhHIoIs8d1fmy3TYeke6g9+LseuOpLGvGFCKatD
fJwc93pwTRSuIr4ab1D1ZlAlYCRgThOAZzXluBdNFMWh/Qh6ubiAG0WO/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz9SbHMf7ychVECMd8gUAdHbeTNMB8GA1UdIwQY
MBaAFCnt8qTyCsCCNcQBgN5068OTXPwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUt
OTI0YzI5Y2Y3N2M0LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUtOTI0YzI5Y2Y3N2M0
LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdpXG68i
/M/qtO5tcMRfZNPbbfsrR9fY0mbYuLxxjfYYNALprDBushMG2MX3W+b1tMg3k8rh
vWjU2a/9gGCvRWA+D3eVG7t5j3xnmaWpgYAvyoWQqgJ2ZiKtrv5/PeP5/5CGAbqS
NGDlMSWnjG2yr8/dv6bA7LzjVT9gTIxDVPeeaVoqED75SPGCu378ZlTm4qvQntfK
dgSxBQ2meB6FWntWHRRgYeHZlPJotnrO3yHPz//V0YzSKzJ/oUk7/U5Xw+1pvV1E
D4VJkOe/w6VgKdUS8CPFnnASunM4mTC54EtTG5s3pGv3rYYtETFvV/jcK+/HK/lm
UdX4YpxJC4oxnA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:02:21 2026 by rpki-client