Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: 9dWXT34stSJE0BmX4U/t6A9g9sxZqvLVvcOtzcXU3G4=
Subject key identifier: 38:7B:9D:E8:B6:50:C2:3E:03:B8:B2:89:FC:E4:42:C9:03:18:EF:43
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 01A17F2B0EEEC39975985EA4805348CD470C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 1131
Signing time: Tue 27 Oct 2026 21:01:30 +0000
Manifest this update: Tue 27 Oct 2026 21:01:30 +0000
Manifest next update: Wed 28 Oct 2026 21:01:30 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: EGzV2rgkQmbFgfng0Qmvvy9CFwO5YSFWj2sn2D2gi4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2b:0e:ee:c3:99:75:98:5e:a4:80:53:48:cd:47:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Oct 27 21:01:30 2026 GMT
Not After : Oct 28 21:01:30 2026 GMT
Subject: CN=387b9de8b650c23e03b8b289fce442c90318ef43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:e3:18:aa:17:c0:ba:c5:01:d1:b8:70:1d:
a6:9d:08:c6:fc:f3:29:b5:ce:aa:59:76:a4:0c:3c:
d0:0e:f9:0f:14:36:8e:33:ee:13:2a:14:95:bc:dd:
c9:0c:b4:96:a1:57:90:0b:77:09:5e:9a:70:f6:a3:
12:d2:94:9f:42:05:41:10:b9:ce:4a:63:ff:68:31:
98:52:38:ca:d4:8e:91:51:76:8d:8c:6e:a1:f8:0c:
f8:84:64:db:30:40:af:12:88:f9:ae:d3:b4:70:22:
32:44:e0:bd:72:08:2e:90:d6:c5:95:22:10:29:98:
c6:9c:48:32:4a:24:5a:a2:98:58:00:74:e7:ba:80:
43:76:b9:3d:85:e4:ae:7d:59:c9:04:fd:e2:9a:d9:
f1:ff:10:be:4e:9e:89:f2:b8:cb:e4:b5:ab:00:9c:
ac:4d:aa:fa:1b:a6:fc:4b:16:99:42:3e:fd:a2:1e:
6d:e1:2f:af:6a:8c:bb:ea:24:cd:a2:3f:ae:3b:e3:
aa:26:61:79:d5:b5:e0:17:00:ef:a6:e2:46:ca:36:
95:88:58:62:fb:9e:a0:d8:ea:e5:9e:2c:66:d5:13:
54:f7:0b:c9:f9:ee:87:6d:f2:df:28:c0:bc:bd:e0:
ec:75:23:da:6b:6a:3b:45:b7:a2:b2:7b:5c:d8:50:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7B:9D:E8:B6:50:C2:3E:03:B8:B2:89:FC:E4:42:C9:03:18:EF:43
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:51:0d:0a:f0:05:bd:7c:ea:30:3f:5b:af:b4:41:80:8e:ce:
35:be:cf:2f:87:3a:06:79:bd:53:c9:e0:37:fd:a0:55:86:ad:
28:55:31:77:46:b0:72:36:2f:68:28:81:08:c8:86:6d:84:c8:
90:e3:f5:23:1e:78:84:ee:03:95:11:aa:f8:a3:25:12:a6:df:
ec:a3:48:1d:d4:81:e2:4a:3c:be:0c:26:ec:5b:40:bf:ad:58:
94:13:a5:94:de:92:c4:78:43:05:95:f0:4b:f8:2a:c8:fc:b8:
c1:aa:fa:4b:9e:d2:8f:55:05:75:9e:56:ce:d2:86:0b:f5:70:
6a:c6:9f:01:ee:cb:d5:f7:96:14:56:6f:19:38:6b:cb:47:44:
da:74:50:5a:cc:e1:b5:71:48:84:6f:59:d1:0a:6e:d7:a6:7d:
d5:df:1b:ef:8f:8a:05:b2:71:23:c4:55:1b:19:1f:e6:7e:e9:
2e:b2:06:80:44:00:b1:a7:69:7f:c5:cb:a5:de:bc:b7:f0:39:
8f:4b:61:8e:e1:0b:7a:74:86:2e:73:82:12:28:40:8e:b7:d5:
ae:47:16:d0:b4:f2:72:a8:59:fd:c9:4c:e8:98:6f:08:97:73:
b4:cf:22:3d:01:0b:ce:ad:32:96:15:98:2d:7b:b1:af:be:1e:
df:ee:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:45 2026 by rpki-client