Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier: X2VqXxMRsCusch3wvuT+qu0nSIq6xU/EaVOXhciRWfM=
Subject key identifier: CB:CC:00:62:20:C9:CC:5F:0A:AE:8C:78:D5:14:C2:17:AF:23:AD:87
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial: 019D3A8A7D1B072E4480A31742E632FEEA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number: 176F
Signing time: Sun 29 Mar 2026 17:00:47 +0000
Manifest this update: Sun 29 Mar 2026 17:00:47 +0000
Manifest next update: Mon 30 Mar 2026 17:00:47 +0000
Files and hashes: 1: FY64f2n5IZxak83WH5Xr7DjmI48.roa (hash: jtG7O8Fc8btXdN9Jv20DVMBroccgppZEs1H1G7+kiM8=)
2: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: cKtwopNO4TCNXSHxTduFDnrBLqxKObmd255sxdhTIoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:7d:1b:07:2e:44:80:a3:17:42:e6:32:fe:ea:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Validity
Not Before: Mar 29 17:00:47 2026 GMT
Not After : Mar 30 17:00:47 2026 GMT
Subject: CN=cbcc006220c9cc5f0aae8c78d514c217af23ad87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:94:b2:bc:61:ae:f2:de:d1:bc:b9:9b:cf:
11:18:46:fa:bb:ad:5e:f6:d6:94:aa:45:85:0d:59:
50:a8:5b:ab:7e:67:83:d5:2d:dc:17:21:c2:1d:0d:
9d:fc:26:2b:31:4b:f1:e7:a1:f6:fb:8a:dd:10:81:
7e:d0:08:77:a9:a5:ed:ed:d6:ad:7d:e8:8a:f2:37:
98:e1:2f:26:29:37:81:ae:00:5a:fd:21:e5:d1:ca:
98:82:8d:90:9a:32:69:b3:15:d2:b1:69:6e:aa:82:
4e:ae:74:b4:54:77:03:2d:24:e8:6a:9a:85:59:13:
77:4e:fc:38:25:06:db:79:a2:f0:52:06:07:b5:66:
93:49:d2:2d:46:7f:99:06:d5:0e:4c:b2:9a:a8:7a:
ed:42:99:65:09:0c:95:df:74:1c:70:70:dc:63:40:
ca:d4:6a:d0:d8:53:9e:6c:94:d2:81:61:da:84:bc:
95:a2:5e:25:76:69:d5:ea:1b:46:d9:27:71:f3:97:
a3:7f:a5:77:5d:45:14:fd:14:6e:68:52:ba:75:1f:
2e:a1:ad:a9:62:ae:85:c9:fb:61:20:69:1a:02:d1:
6b:d1:f1:a4:0c:36:02:64:46:e1:14:25:22:d2:7d:
b5:9f:8f:91:be:2c:26:b3:17:73:1c:8c:e5:d5:f9:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CC:00:62:20:C9:CC:5F:0A:AE:8C:78:D5:14:C2:17:AF:23:AD:87
X509v3 Authority Key Identifier:
keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b0:73:ce:6b:78:db:d1:80:f4:0c:d7:cc:0c:ec:00:79:19:
d7:7a:c3:d2:6a:04:05:a2:6a:be:1f:45:ab:1e:86:7c:2c:94:
0f:85:7b:fb:02:a3:9f:e0:49:f3:a5:76:cc:0a:73:fc:aa:51:
ac:2f:b8:be:69:cd:9c:1e:a2:b1:23:61:f7:fa:85:16:93:18:
23:fc:c1:a1:62:1c:21:f1:59:f2:8e:8a:b3:e2:cd:81:cb:8f:
c5:51:3d:29:22:4f:4a:34:9a:cf:e8:10:b2:ea:1c:59:0d:4c:
22:5b:94:4b:2c:bc:1c:1e:77:d7:7d:82:c9:db:5c:b5:61:72:
0f:d6:86:22:aa:dd:ed:dd:2d:b4:ae:fe:0a:a6:49:9f:26:73:
6b:da:82:5e:b4:75:17:b3:3b:dd:05:80:8a:3f:b6:fb:d6:ce:
df:dc:de:00:a3:41:df:c7:3f:8e:0d:4f:9c:53:6c:02:41:a7:
23:4b:e6:82:ab:8e:be:a4:0c:a7:fb:c6:18:07:f9:3b:7c:17:
77:12:ba:df:28:a2:a5:38:15:d5:74:bf:69:3d:6b:e6:f9:2e:
18:05:2e:21:75:7b:0e:69:3a:bc:1e:97:b0:dc:43:fd:6d:6d:
0e:6c:91:29:2c:09:d9:ff:83:31:4e:fd:84:61:20:0e:97:02:
69:b0:86:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06in0bBy5EgKMXQuYy/uoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTQ2ZTc1ODY1ZThkNGEwODFlNGI1ZGRhNDZkM2M5NDAw
MzY3OWIwHhcNMjYwMzI5MTcwMDQ3WhcNMjYwMzMwMTcwMDQ3WjAzMTEwLwYDVQQD
EyhjYmNjMDA2MjIwYzljYzVmMGFhZThjNzhkNTE0YzIxN2FmMjNhZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8eUsrxhrvLe0by5m88RGEb6u61e
9taUqkWFDVlQqFurfmeD1S3cFyHCHQ2d/CYrMUvx56H2+4rdEIF+0Ah3qaXt7dat
feiK8jeY4S8mKTeBrgBa/SHl0cqYgo2QmjJpsxXSsWluqoJOrnS0VHcDLSToapqF
WRN3Tvw4JQbbeaLwUgYHtWaTSdItRn+ZBtUOTLKaqHrtQpllCQyV33QccHDcY0DK
1GrQ2FOebJTSgWHahLyVol4ldmnV6htG2Sdx85ejf6V3XUUU/RRuaFK6dR8uoa2p
Yq6FyfthIGkaAtFr0fGkDDYCZEbhFCUi0n21n4+RviwmsxdzHIzl1fk3+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvMAGIgycxfCq6MeNUUwhevI62HMB8GA1UdIwQY
MBaAFCnkbnWGXo1KCB5LXdpG08lAA2ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTIt
YTlkMjY3YWNmNjY0LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTItYTlkMjY3YWNmNjY0
LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbBzzmt4
29GA9AzXzAzsAHkZ13rD0moEBaJqvh9Fqx6GfCyUD4V7+wKjn+BJ86V2zApz/KpR
rC+4vmnNnB6isSNh9/qFFpMYI/zBoWIcIfFZ8o6Ks+LNgcuPxVE9KSJPSjSaz+gQ
suocWQ1MIluUSyy8HB53132CydtctWFyD9aGIqrd7d0ttK7+CqZJnyZza9qCXrR1
F7M73QWAij+2+9bO39zeAKNB38c/jg1PnFNsAkGnI0vmgquOvqQMp/vGGAf5O3wX
dxK63yiipTgV1XS/aT1r5vkuGAUuIXV7Dmk6vB6XsNxD/W1tDmyRKSwJ2f+DMU79
hGEgDpcCabCGzg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:29:29 2026 by rpki-client