Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: YmogZMsthRP72H8waC1rZ6WBSI2buJ9e1jt4rZCutBA=
Subject key identifier: 7B:51:FC:C4:84:D5:D5:2A:0A:8A:74:A0:B6:02:35:99:28:63:8E:3B
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 019EB9223851AEF9A3D031649647E52AF4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 18EB
Signing time: Fri 12 Jun 2026 00:01:28 +0000
Manifest this update: Fri 12 Jun 2026 00:01:28 +0000
Manifest next update: Sat 13 Jun 2026 00:01:28 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: Z1cLaABa/tdKaIl9FlL1fS4TGxAM+A2uo37/haIvlOo=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:38:51:ae:f9:a3:d0:31:64:96:47:e5:2a:f4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jun 12 00:01:28 2026 GMT
Not After : Jun 13 00:01:28 2026 GMT
Subject: CN=7b51fcc484d5d52a0a8a74a0b602359928638e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:e2:2e:d0:b6:83:67:4c:d4:9c:2a:52:57:
8d:d9:0e:08:c2:ff:5e:d1:ed:13:56:19:85:59:da:
25:d7:0c:fa:a1:7b:60:85:ec:d3:7e:c1:e6:71:83:
43:fb:9f:4e:69:0c:e4:ab:10:b3:b8:21:e8:a7:0b:
32:14:7e:1d:d0:d1:41:ad:74:90:10:f8:07:d2:62:
e0:ae:ea:27:04:85:c6:86:1e:c8:45:27:a4:ba:ac:
88:78:e7:f5:b5:e2:52:09:c1:6c:a2:86:91:c5:f6:
c9:53:a3:7f:e8:48:28:51:37:3d:b0:c1:3b:a2:a2:
57:63:0d:5c:08:31:a9:37:2d:1d:61:98:00:76:3e:
01:50:a0:70:05:62:ba:c4:69:69:1e:4c:ea:4a:3f:
5a:68:ba:f3:2a:88:f9:5a:1a:61:63:98:74:4b:28:
d1:62:6f:1b:2d:ae:93:91:fc:9b:4a:a0:40:e0:b3:
a0:ad:83:06:38:c8:34:73:2e:07:26:39:eb:bd:86:
aa:0e:ee:e9:b9:47:46:90:3b:ef:20:c8:41:2a:ef:
99:6f:0e:44:5a:2c:7d:c1:bc:d9:c4:7f:45:d3:ff:
49:16:ab:86:77:e1:8c:db:12:e9:89:82:c0:6a:ba:
3e:c7:a3:07:07:08:e2:67:6f:80:6f:20:5b:9e:2e:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:FC:C4:84:D5:D5:2A:0A:8A:74:A0:B6:02:35:99:28:63:8E:3B
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:b0:13:c1:3c:d4:bf:2f:5b:8c:50:ad:6b:e7:56:96:3c:
fb:0d:47:88:f9:cf:c6:cb:7d:23:88:cd:8f:c6:7f:e5:31:fb:
46:17:29:bb:07:60:73:ac:43:53:25:79:f9:21:b7:c7:98:57:
8e:c8:11:cf:d6:99:c0:60:4c:e3:a6:31:05:bc:07:66:5e:76:
72:d0:8a:82:f0:a0:9f:58:12:da:ca:df:8a:56:d2:86:fb:db:
11:e2:9f:b7:a3:b8:de:6c:1e:8b:c6:6f:f3:73:e4:35:01:3a:
d8:d7:c7:74:10:50:f5:e4:8a:40:75:83:7c:7f:58:be:1c:7c:
44:24:23:8e:e6:c6:f4:7c:33:2a:15:ca:d7:71:4d:9c:9f:30:
95:d5:f7:65:1d:c0:2f:b6:98:f6:8b:00:13:f4:b0:64:50:7e:
65:c3:ec:fe:41:8a:8b:17:9f:69:2d:80:78:67:58:b1:fc:b0:
52:97:4d:64:45:f0:54:6e:ac:e3:ec:38:5f:7a:3b:7d:9a:f9:
9c:70:e9:a3:4c:a7:f2:a6:05:58:46:43:42:45:07:c0:4b:01:
24:12:3e:8b:b6:37:c7:de:d5:14:98:6a:30:e8:1b:33:ab:55:
87:08:8a:4c:25:41:22:0b:86:9c:d6:7e:3a:06:1e:3d:f4:f0:
6f:b3:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:35:58 2026 by rpki-client