Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: 6r9h4XcHUAXvujXu5tK3UxvXldMJradXL4LAMKq4V7o=
Subject key identifier: 32:6D:D5:B9:47:AF:2C:95:E5:0C:E2:A1:22:38:56:BD:51:03:4A:5C
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 019FA229B64075C381931666E52B30652E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 103A
Signing time: Mon 27 Jul 2026 06:01:10 +0000
Manifest this update: Mon 27 Jul 2026 06:01:10 +0000
Manifest next update: Tue 28 Jul 2026 06:01:10 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: Ztmz6wspbsHmfjT1OVDNxUgT4tD9OKZZhfwgcMl/XCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:b6:40:75:c3:81:93:16:66:e5:2b:30:65:2e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Jul 27 06:01:10 2026 GMT
Not After : Jul 28 06:01:10 2026 GMT
Subject: CN=326dd5b947af2c95e50ce2a1223856bd51034a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:6e:18:3e:01:58:d6:49:25:9f:ff:98:11:
fe:a2:be:57:a4:fd:2e:3b:85:03:c9:58:4f:21:36:
17:04:d5:ff:da:cc:96:38:4f:ed:d1:42:b9:f8:31:
e5:e6:39:31:1d:5e:ad:a3:18:16:17:d1:73:e7:a9:
84:5f:c7:ba:c5:25:56:aa:a4:2f:8f:90:ad:59:55:
2d:d3:de:e8:73:7b:22:f4:bf:26:41:6b:18:6a:8b:
a5:ac:96:65:3f:09:04:e9:11:76:77:cf:07:3a:d9:
2a:e8:89:c1:34:90:bc:2e:82:3f:1e:61:20:37:d2:
28:3d:ac:dd:0d:81:cd:2d:7a:e7:03:26:02:96:c4:
49:95:75:d0:9b:46:b0:ea:30:b1:8b:73:6d:c2:92:
7e:ee:f3:cc:c6:df:8f:1f:c7:9a:8b:48:f6:bc:12:
0e:3c:3a:59:f3:b6:a1:c3:76:fd:53:14:b4:bb:69:
60:1d:c6:fc:c5:3d:08:c6:49:72:5b:b0:37:00:c5:
a7:08:b8:83:f6:6e:89:98:7f:68:96:3d:ef:63:b1:
23:b0:49:62:b0:1d:98:0e:27:c5:29:5f:29:dc:a2:
ad:ff:d2:e2:e7:73:d8:65:ce:f6:84:5f:e9:40:fe:
8f:5a:6c:f6:aa:df:be:84:2c:af:35:44:dc:63:35:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:D5:B9:47:AF:2C:95:E5:0C:E2:A1:22:38:56:BD:51:03:4A:5C
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e4:85:36:45:ba:c2:31:c7:9c:d2:58:b6:86:77:69:64:d6:
a9:d3:4b:65:94:ba:15:25:e6:9e:ac:26:37:67:da:67:5c:25:
70:f7:4b:08:bc:57:67:f0:c1:76:1a:19:2a:81:1f:41:21:7e:
76:4e:41:54:62:7c:ce:05:3c:2e:d7:23:ac:ed:88:df:22:ab:
a9:b9:aa:d9:30:6e:43:9b:ef:8c:9c:f2:d1:1d:4b:01:ca:d7:
a5:38:4a:f2:1a:88:e9:38:a9:52:2f:6f:db:0d:6e:19:59:f9:
ce:9d:65:2d:6c:28:4c:a5:73:2e:8f:10:39:a9:5a:4d:43:1f:
ea:bb:20:17:30:90:e9:8e:3f:a4:e9:4d:bb:a9:9c:7b:d1:28:
99:f1:2a:82:42:e3:e3:f1:27:a0:62:9a:91:ea:a0:50:d4:e9:
ac:91:6c:61:3a:60:0b:25:88:9d:70:f0:70:4b:43:39:58:7f:
be:7a:fc:d3:be:c1:19:51:e9:83:09:68:61:50:97:72:0a:1a:
9b:4c:d8:83:77:42:d1:04:14:e2:a8:36:bc:a3:17:f8:2c:de:
67:50:90:64:4a:15:91:63:11:31:01:b8:fd:9b:a3:01:5f:e6:
d5:3e:d6:18:c2:c0:52:4d:e3:7d:0c:fd:1f:8b:7d:39:1e:5b:
8b:d9:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:27 2026 by rpki-client