Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
File: Ke_inNmVTrSDWEKZccdq97tfBWE.mft (raw, json)
Hash identifier: DgEgGev1m9gUWpsBRc1ZGAsmDHrpaLERIkQ+Q3UePbE=
Subject key identifier: 13:FA:9C:95:C5:E1:49:E6:23:BA:B0:DB:AF:C8:8A:52:75:9E:C5:78
Authority key identifier: 29:EF:E2:9C:D9:95:4E:B4:83:58:42:99:71:C7:6A:F7:BB:5F:05:61
Certificate issuer: /CN=29efe29cd9954eb48358429971c76af7bb5f0561
Certificate serial: 01A16C7F54852C990A38632122552427D018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
Manifest number: 0136
Signing time: Sat 24 Oct 2026 06:00:46 +0000
Manifest this update: Sat 24 Oct 2026 06:00:46 +0000
Manifest next update: Sun 25 Oct 2026 06:00:46 +0000
Files and hashes: 1: Ke_inNmVTrSDWEKZccdq97tfBWE.crl (hash: TTFB+c1rSiMq1tjKAJyZL79Hh8UqQ2RJG5OptbTO9/4=)
2: MJcxGS0k_kKhq_iBy3QqSFYVnVU.roa (hash: fgIqrkRhKvk9zOrKBAATYNkw1hWIeg0IR0Gjr44Q3Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:54:85:2c:99:0a:38:63:21:22:55:24:27:d0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29efe29cd9954eb48358429971c76af7bb5f0561
Validity
Not Before: Oct 24 06:00:46 2026 GMT
Not After : Oct 25 06:00:46 2026 GMT
Subject: CN=13fa9c95c5e149e623bab0dbafc88a52759ec578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6d:cf:b3:43:2d:6f:63:10:3e:eb:59:46:c4:
db:54:e4:b9:16:d8:16:29:f8:23:19:9d:07:c5:90:
a9:21:d9:09:02:14:88:6b:46:26:12:2a:bc:dd:05:
12:fa:11:7f:8a:03:af:b3:68:a4:f3:50:f4:f1:2c:
b1:58:9a:f3:1c:c6:9e:a1:b0:40:bc:aa:ab:7f:fc:
cf:5b:e1:19:38:b4:da:f8:51:38:56:a8:34:07:b4:
a2:db:50:3b:96:d4:1f:b8:dd:98:e8:28:f2:4c:d9:
6e:7e:a0:7f:9a:cf:2c:98:4c:1d:1c:2e:d7:4f:5c:
d3:9a:a3:2f:38:1f:c5:f5:6e:9a:c9:fc:cf:99:5f:
34:1d:92:55:15:78:63:ce:74:94:b1:c6:a6:ed:df:
d4:93:56:ae:36:cd:15:dc:aa:07:e9:a0:05:d4:91:
97:e1:a3:75:8e:fc:9b:13:6b:02:27:4e:d4:c1:21:
3c:79:e6:e4:ca:06:29:45:fb:21:5a:2e:14:5f:81:
ef:f8:6b:4a:02:47:13:7a:49:a1:fe:ab:8d:e4:57:
f1:e3:74:9a:e7:01:12:2d:52:33:22:ac:d6:16:87:
54:b2:f4:93:14:db:ca:a5:32:be:de:d5:45:e1:af:
cd:7c:df:b3:97:13:a8:56:c2:eb:df:3e:76:80:44:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FA:9C:95:C5:E1:49:E6:23:BA:B0:DB:AF:C8:8A:52:75:9E:C5:78
X509v3 Authority Key Identifier:
keyid:29:EF:E2:9C:D9:95:4E:B4:83:58:42:99:71:C7:6A:F7:BB:5F:05:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cc:f7:c3:d5:7e:18:98:2b:7f:61:9f:66:2f:28:92:e4:f4:
85:8d:6a:ae:fe:41:9b:51:90:c4:ff:3b:cf:8c:ca:25:3c:46:
1f:13:ab:08:d3:bb:93:bd:39:99:14:56:1f:31:e4:d0:b2:62:
3c:a3:1d:ed:20:c5:cc:95:09:3a:4f:48:4e:32:c9:37:72:57:
31:a5:73:d6:93:40:23:fb:f9:ca:64:82:68:91:5e:8e:92:f8:
63:f7:fa:94:00:08:50:d5:a1:1f:09:76:bf:86:8e:24:84:41:
64:14:23:92:4e:d6:4f:ff:87:dd:d0:08:0b:a9:b7:26:12:a0:
a8:ee:8c:ec:f4:e3:07:e1:78:9d:aa:39:68:4c:00:e1:15:ab:
2a:a8:33:94:de:87:3d:fd:5b:9e:92:75:3f:34:bb:91:ef:a1:
f6:1d:1a:a3:e9:e1:c5:4e:f3:b7:96:2f:cb:0f:7b:ec:f9:45:
59:29:24:b1:9f:7f:48:cd:2e:08:b2:cd:46:2d:d8:3e:c7:40:
6b:eb:e8:31:c1:1c:b7:d0:3a:6c:46:17:5c:a4:f1:fc:1c:a5:
a0:c1:dd:bd:e6:af:c7:13:dd:46:f0:4c:c4:8f:59:10:b5:e7:
dc:52:fb:2e:50:34:e1:98:ff:8b:64:da:42:ae:2b:f1:45:c0:
5f:77:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:12:48 2026 by rpki-client