Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: /Z+mojnFfDihX91tE8P2Y+kwatLwBDgtqCAG2rSCeJ4=
Subject key identifier: B8:B0:CA:7C:6A:34:5A:BD:2A:F5:87:F1:8B:92:4D:B2:A3:38:DD:0A
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 01A17A04360559CD40279D0274FC00BFCD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1A58
Signing time: Mon 26 Oct 2026 21:00:58 +0000
Manifest this update: Mon 26 Oct 2026 21:00:58 +0000
Manifest next update: Tue 27 Oct 2026 21:00:58 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: L7RBmH/Xp++CgpHdR/eUp8lpDkKGtj88hU3oH/b4UgM=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:36:05:59:cd:40:27:9d:02:74:fc:00:bf:cd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Oct 26 21:00:58 2026 GMT
Not After : Oct 27 21:00:58 2026 GMT
Subject: CN=b8b0ca7c6a345abd2af587f18b924db2a338dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:37:af:ff:b4:63:03:07:b7:9c:81:b6:ce:
00:e5:1b:fd:a6:0f:77:a7:aa:2c:e7:c9:a9:d8:f3:
28:04:cc:fb:08:d6:fa:cc:ec:81:2f:81:92:6a:a6:
c1:9b:d4:23:01:b1:81:bb:25:3f:f5:38:04:df:c8:
4e:1b:ff:ff:14:2e:81:e6:81:a3:15:5d:44:76:6a:
83:76:66:15:5e:3a:57:79:7b:33:a1:8d:f4:81:a9:
37:20:f4:a9:22:27:dd:d6:0b:ec:1d:42:ba:06:ac:
f1:da:22:63:90:0b:0e:31:89:62:f7:7a:3c:cd:53:
d7:51:77:64:9b:92:16:90:95:8f:7c:ca:d4:43:f9:
bb:4a:48:29:a8:71:e2:c2:99:9c:66:2d:be:7b:e3:
d1:5e:3c:35:25:12:eb:bf:47:49:22:c2:43:08:bf:
9f:f9:30:15:6c:99:2b:67:4d:06:6f:ba:59:f7:cc:
7b:65:ef:12:d5:8a:c3:10:89:89:1e:31:f7:12:21:
ec:56:28:af:db:0d:db:b8:3c:9b:3e:d2:91:bd:dd:
f1:37:e3:86:ed:ac:e0:2c:69:c3:c1:fb:0c:01:4d:
bd:33:15:b4:e0:c7:af:a7:83:f3:2e:81:e6:14:be:
bb:f4:09:d9:64:92:4d:10:eb:e1:42:24:d0:16:44:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B0:CA:7C:6A:34:5A:BD:2A:F5:87:F1:8B:92:4D:B2:A3:38:DD:0A
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:24:1a:8e:71:3a:a4:c5:a1:be:bc:4d:b5:3b:7d:df:9d:1a:
f1:e9:8c:d6:7a:35:77:58:70:3a:83:fb:65:26:d6:35:eb:c0:
bf:c6:88:76:c6:38:e7:6a:cb:79:d7:0c:ab:fa:f8:ba:8d:23:
23:94:86:a6:08:30:fc:5c:e5:af:34:14:91:25:e1:df:62:c4:
61:52:60:70:e5:fb:eb:66:e5:fe:f9:22:5c:84:8a:36:2c:d5:
c3:2d:30:fc:9c:20:e3:f6:8b:13:fc:bc:7b:32:0f:55:bc:37:
aa:a4:2a:57:46:01:f2:eb:54:70:4e:9f:c8:61:ff:1c:2e:27:
a7:90:74:37:fa:e6:31:a5:a7:98:cd:88:63:f9:f9:00:b6:e7:
4f:2b:97:9d:45:2c:b5:e3:7d:1a:7b:ef:75:ab:0f:31:56:b6:
bd:c4:1a:da:dd:1e:7b:8a:7c:79:ba:f4:44:24:6f:48:03:64:
e9:67:0c:eb:ed:e5:2c:9a:03:cf:4b:27:2b:ca:35:91:fc:3d:
68:ce:68:69:79:e4:ae:1a:a9:5b:16:d2:53:df:c2:f0:15:12:
82:76:e1:3a:c5:35:b8:5a:8a:f9:a6:18:73:5d:29:2f:1e:aa:
77:72:2f:b7:32:5d:00:d8:3d:87:be:d9:12:ba:a8:3b:d0:dd:
98:0b:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:57:25 2026 by rpki-client