Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: qiGDuYNoG7HXtyu6KVeygHjbdVfv0xpc1rg1DC4xxQM=
Subject key identifier: 20:1B:8A:5B:29:AE:55:0D:89:45:D8:94:B2:37:B6:23:31:A9:40:39
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 019CE5C9190E4DE461651D9E136F1414384C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 17F9
Signing time: Fri 13 Mar 2026 06:01:27 +0000
Manifest this update: Fri 13 Mar 2026 06:01:27 +0000
Manifest next update: Sat 14 Mar 2026 06:01:27 +0000
Files and hashes: 1: 6-YW9sC3fmqI9cF9PQepWCOlFtc.roa (hash: +93M5uubDUkyxrvS4oPJtZZYK4f9dHRBFSbst0HIfRU=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: ommYRLjZiypxP2qaGuDL4Svx2E6kNRgFnF1IREKq9F0=)
3: Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (hash: NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:19:0e:4d:e4:61:65:1d:9e:13:6f:14:14:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Mar 13 06:01:27 2026 GMT
Not After : Mar 14 06:01:27 2026 GMT
Subject: CN=201b8a5b29ae550d8945d894b237b62331a94039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:dd:96:76:98:23:f8:f0:b2:e1:83:84:8b:
fe:b4:fa:47:2b:23:83:2e:90:79:18:2b:e5:97:91:
a8:38:ad:bb:d3:19:13:a8:3f:31:fa:83:b6:97:f2:
f1:51:ac:f0:f7:d3:ee:41:3d:45:59:0b:68:10:29:
a7:7e:f6:89:a0:76:8e:eb:cf:1f:6f:b5:f9:6e:a4:
75:29:b5:ef:2d:81:3e:cf:20:b7:de:19:ee:4d:fb:
7e:2a:16:a3:e2:c9:ef:47:bb:d8:7e:7f:e5:ba:38:
c0:85:b6:eb:05:a9:a0:a6:f6:34:c6:8d:d0:8d:c4:
11:bc:53:6d:f6:45:1f:0e:81:38:fa:68:60:97:0f:
b0:2e:57:2f:ae:e5:29:1e:e6:c5:67:dd:a3:d6:10:
a2:76:de:a5:24:97:69:42:ea:f6:f4:4f:49:28:df:
00:39:89:0d:2b:fe:90:04:1d:01:1e:92:17:d9:e8:
14:bc:1d:88:8a:c2:4d:7d:ec:5f:fc:99:c2:d3:ef:
6f:5e:49:68:5b:7b:4c:25:50:11:09:7c:74:f2:e6:
6c:c5:41:b8:e8:85:a1:ee:2c:bf:1f:ee:cb:4c:dc:
e4:78:57:dd:e2:c8:6b:97:da:bc:83:97:c8:73:d7:
f2:75:6c:ae:77:c1:d6:6b:7b:4a:fc:11:b7:79:b5:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1B:8A:5B:29:AE:55:0D:89:45:D8:94:B2:37:B6:23:31:A9:40:39
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fd:84:db:aa:39:cf:5a:b5:81:68:c1:23:31:81:cb:9d:6e:
0e:62:f0:56:b9:8c:db:a2:ce:6c:63:13:13:3e:c1:0c:c4:48:
9f:c9:13:57:75:85:65:9e:08:16:43:b5:bd:56:9a:3f:10:34:
67:90:79:f6:86:19:3c:56:eb:33:86:e4:6f:72:cd:24:ba:83:
4c:9e:74:1c:4e:66:e6:9e:9f:86:d7:51:05:8d:22:31:d2:72:
3d:5e:8c:33:2d:9f:83:6e:2b:91:a8:8d:d2:04:62:d6:d7:aa:
84:5c:ac:4d:52:4e:b3:a8:a5:4d:91:77:ca:58:d9:d5:b1:7e:
a8:61:01:8c:65:88:e5:12:a4:45:1b:a6:11:c3:75:d2:fc:51:
fc:5f:f1:0d:15:e0:e8:97:9e:93:fc:64:ec:85:4e:a4:cd:ae:
c7:d8:da:49:77:5e:11:f8:23:96:68:bb:89:ce:a3:0d:93:39:
66:19:38:51:f5:ca:56:36:7d:d5:7f:eb:75:a3:8a:80:d0:e3:
93:4f:aa:99:74:af:2b:8b:36:ee:7a:16:16:4c:14:b9:25:ff:
60:c4:32:93:7a:8d:4f:ab:34:aa:71:81:b4:f9:3e:1b:7e:05:
de:60:d4:04:40:27:07:f8:92:56:ef:e4:1e:0d:ee:09:51:3f:
de:42:fd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:51:40 2026 by rpki-client