Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: LfuEL+vTIyEFW2wPd9ns0DsHmNw0Td++d7WsGLDKmas=
Subject key identifier: B3:8D:13:C0:F3:11:1A:7D:86:C8:CC:52:F8:D5:20:33:94:A1:9E:76
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 01A1781504C5AF2B4DF449EC30E6DC9575C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1A57
Signing time: Mon 26 Oct 2026 12:00:05 +0000
Manifest this update: Mon 26 Oct 2026 12:00:05 +0000
Manifest next update: Tue 27 Oct 2026 12:00:05 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: T3H/3qbdkN2wzHmhZceaAaFNpDLb3n3eQLAT2n1+8Yg=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:04:c5:af:2b:4d:f4:49:ec:30:e6:dc:95:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Oct 26 12:00:05 2026 GMT
Not After : Oct 27 12:00:05 2026 GMT
Subject: CN=b38d13c0f3111a7d86c8cc52f8d5203394a19e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:a4:8a:24:66:b7:e0:ff:fa:39:14:72:dd:
f2:90:cd:a0:dc:ce:33:60:bb:cb:7b:e1:96:2b:26:
e0:08:86:21:74:ea:8c:af:c3:ae:2a:54:1b:b0:0e:
a3:fb:6c:33:84:86:17:5c:db:24:69:8e:5b:3f:3d:
03:db:a7:c3:85:e1:cf:6a:ce:71:e9:f7:f3:d9:db:
a7:56:18:87:b8:7e:21:7d:23:34:09:10:95:24:a0:
cd:5e:3b:6e:f7:a7:74:d9:42:4f:48:a3:04:b3:c4:
be:56:00:85:77:53:f9:a6:5a:9b:a7:7c:f2:06:b0:
5e:f8:e0:0b:8e:65:28:af:5e:52:dc:79:74:11:29:
20:34:d4:dd:57:32:8c:86:17:fe:b3:c5:08:d6:a3:
76:c6:ec:83:67:ca:8f:55:84:aa:80:55:2c:f3:2b:
d7:c5:df:46:0b:51:45:1f:c9:e1:ac:d2:9e:28:ea:
7b:5c:3c:b4:94:a6:0a:60:6d:80:cd:d4:6e:81:c3:
ed:da:5c:92:7c:bd:8e:94:43:61:f4:94:a6:c7:9e:
3b:8d:df:5d:d6:7c:c0:a6:7c:e0:39:f2:f2:8d:76:
c1:71:d8:0c:60:85:d5:0d:fa:5c:4a:c7:91:0e:e9:
6c:c2:eb:e6:82:63:40:e6:f3:82:ce:1b:14:48:83:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8D:13:C0:F3:11:1A:7D:86:C8:CC:52:F8:D5:20:33:94:A1:9E:76
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9d:32:40:22:91:70:26:2e:18:c7:4f:36:0a:33:62:9e:79:
e8:ab:86:ec:62:9f:80:26:82:0f:d7:d0:61:37:d5:ea:0c:94:
d0:12:8a:73:12:6c:b1:c1:b6:f5:6f:b9:88:37:6e:e4:70:05:
7f:53:51:71:c7:66:95:22:b3:65:4e:3b:7a:2f:c8:d0:65:8c:
2a:df:bf:31:7d:5a:f1:d3:5f:08:1b:23:ed:0c:dd:10:3d:33:
f1:27:69:31:b7:7c:a8:b5:ee:29:ec:f6:ff:16:15:dd:ec:2f:
f9:3b:8d:21:7d:de:ea:68:76:8b:14:80:ea:88:a2:2c:bc:9e:
be:2f:17:5a:39:16:cc:05:9c:0f:41:d5:88:7c:6e:17:cf:53:
98:ce:5d:1a:f0:46:5d:36:12:04:6c:49:3a:d2:96:3b:ba:51:
50:ed:60:88:1b:45:f0:66:35:5f:9c:67:53:d3:e2:43:60:32:
56:f9:cd:13:92:10:06:92:02:37:51:c0:87:97:3d:88:09:9a:
2f:41:f2:e3:71:1c:94:fe:ce:c4:c7:c7:ce:42:a9:59:63:a1:
d3:c0:c2:9f:4d:8c:e9:22:41:0d:24:1c:7f:53:63:1f:4d:37:
b3:5e:e2:d8:39:30:eb:d9:c6:2f:71:26:60:d4:1c:a4:f7:07:
9e:da:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:50:51 2026 by rpki-client