Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: 7kbAnFEwDmZyB8ifDyMWsrRXkfCZWixTITRot46q/aY=
Subject key identifier: CE:73:D5:CD:81:5F:2E:C5:71:D2:0E:37:17:76:4D:1E:3F:36:1D:EF
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 019D39AEDEAC8FD80B02120F40D91922F76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 13:00:54 +0000
Manifest this update: Sun 29 Mar 2026 13:00:54 +0000
Manifest next update: Mon 30 Mar 2026 13:00:54 +0000
Files and hashes: 1: I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa (hash: P/ftwFa1S2VKjprGcKvJDhqUROD7iDtwsuNt3XMlEQ4=)
2: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: zMS1XsoQ+sHo30nVdO60h4Ufu6mW/9umUEOEUvFyz5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:de:ac:8f:d8:0b:02:12:0f:40:d9:19:22:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Mar 29 13:00:54 2026 GMT
Not After : Mar 30 13:00:54 2026 GMT
Subject: CN=ce73d5cd815f2ec571d20e3717764d1e3f361def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:6a:b8:2f:7d:3f:98:8c:03:36:f1:6d:71:
0d:c1:ff:e6:dc:2f:39:6f:ea:b1:52:26:6e:cf:5e:
d9:25:0b:9b:1f:f3:3f:05:61:8a:c1:aa:13:39:a3:
4b:e2:d1:d6:f9:54:dd:8d:27:42:3c:20:9a:b2:4e:
88:ea:7e:62:c6:a9:8e:1b:35:bd:cd:97:72:6d:d6:
24:66:84:92:fc:ab:4f:24:e7:4e:24:3b:29:98:db:
d8:c8:46:da:f5:68:91:bd:7e:f5:23:23:70:83:e6:
bc:20:9e:16:58:e3:d2:d0:ce:a1:42:30:00:53:de:
86:0a:0f:de:e7:be:bf:e4:6a:6e:c1:1d:62:21:99:
85:cd:af:0f:44:43:2f:10:e2:a2:c0:ad:45:b4:1d:
c1:d1:82:5f:b9:80:74:8a:c3:70:48:f5:bf:9b:01:
7c:b1:80:8f:9b:8c:90:94:ff:87:96:7c:5f:47:3f:
08:a9:e9:73:b2:78:9a:64:f2:86:83:c1:44:c9:30:
2b:dc:e5:56:53:74:83:df:e3:69:7f:fe:0d:ad:37:
18:9f:cf:45:b5:a6:f3:69:59:cb:e5:ac:d4:10:aa:
a7:f5:f3:96:f1:69:7f:d7:28:b8:34:0f:d4:04:8e:
75:14:fc:6a:70:c2:ac:4a:2c:9b:a5:75:62:02:e2:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:73:D5:CD:81:5F:2E:C5:71:D2:0E:37:17:76:4D:1E:3F:36:1D:EF
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:af:4d:67:81:69:c3:92:ee:53:36:37:87:4c:03:62:05:28:
75:44:31:b8:18:db:f6:0f:5b:51:1d:a1:4c:19:56:4f:50:3e:
0a:75:e3:d1:38:72:8c:e2:f3:c3:38:9b:20:7e:81:f3:94:6c:
2c:9e:2b:26:1c:3f:1d:94:b8:39:ac:de:a1:fe:ed:7c:6f:94:
f9:a2:80:50:a9:ef:9f:0e:12:4c:98:63:14:50:bd:8c:45:80:
7f:49:92:37:27:7a:85:50:09:1e:12:10:8b:bd:b4:1b:60:1c:
b9:8a:86:f9:4b:e6:55:8d:a5:f6:59:59:17:7c:c2:33:ec:d5:
e0:4d:79:d9:0d:c1:ce:d6:8d:63:9c:ff:3b:bf:21:98:64:b7:
a2:de:cd:81:89:6c:e9:28:17:49:63:31:08:f6:d4:a5:96:8f:
73:c6:52:c8:08:07:49:88:84:da:7c:45:e8:85:97:42:e2:19:
0d:08:56:e0:3b:2e:fb:b0:dd:9b:06:65:64:be:ed:5c:25:69:
00:18:85:a0:4f:42:96:b9:3d:ff:63:7d:35:f7:58:d7:fb:48:
58:17:33:16:6b:72:5f:5c:45:02:0f:59:71:8e:d3:04:d0:ef:
c2:32:f2:69:30:16:f2:57:b3:9a:3b:b6:a2:15:de:73:35:b8:
cb:f4:71:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rt6sj9gLAhIPQNkZIvdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl
ZGU3NDQwHhcNMjYwMzI5MTMwMDU0WhcNMjYwMzMwMTMwMDU0WjAzMTEwLwYDVQQD
EyhjZTczZDVjZDgxNWYyZWM1NzFkMjBlMzcxNzc2NGQxZTNmMzYxZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXJquC99P5iMAzbxbXENwf/m3C85
b+qxUiZuz17ZJQubH/M/BWGKwaoTOaNL4tHW+VTdjSdCPCCask6I6n5ixqmOGzW9
zZdybdYkZoSS/KtPJOdOJDspmNvYyEba9WiRvX71IyNwg+a8IJ4WWOPS0M6hQjAA
U96GCg/e576/5GpuwR1iIZmFza8PREMvEOKiwK1FtB3B0YJfuYB0isNwSPW/mwF8
sYCPm4yQlP+HlnxfRz8IqelzsniaZPKGg8FEyTAr3OVWU3SD3+Npf/4NrTcYn89F
tabzaVnL5azUEKqn9fOW8Wl/1yi4NA/UBI51FPxqcMKsSiybpXViAuLVuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5z1c2BXy7FcdIONxd2TR4/Nh3vMB8GA1UdIwQY
MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt
MjI2ZjNiODAzMWI3LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3
LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFa9NZ4Fp
w5LuUzY3h0wDYgUodUQxuBjb9g9bUR2hTBlWT1A+CnXj0ThyjOLzwzibIH6B85Rs
LJ4rJhw/HZS4Oazeof7tfG+U+aKAUKnvnw4STJhjFFC9jEWAf0mSNyd6hVAJHhIQ
i720G2AcuYqG+UvmVY2l9llZF3zCM+zV4E152Q3BztaNY5z/O78hmGS3ot7NgYls
6SgXSWMxCPbUpZaPc8ZSyAgHSYiE2nxF6IWXQuIZDQhW4Dsu+7DdmwZlZL7tXCVp
ABiFoE9Clrk9/2N9NfdY1/tIWBczFmtyX1xFAg9ZcY7TBNDvwjLyaTAW8lezmju2
ohXeczW4y/Rx+A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:18 2026 by rpki-client