Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: B/2bPSnaDIzuZbeP67TjNtHubkEjyABEzht7yZAwl9Y=
Subject key identifier: FC:53:3B:B3:32:FA:B5:96:A5:DC:BB:97:1A:44:80:22:87:40:FA:E1
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 01A08BD5F87DD3C0FF15517B89CF5F7DBF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 10B3
Signing time: Thu 10 Sep 2026 15:00:50 +0000
Manifest this update: Thu 10 Sep 2026 15:00:50 +0000
Manifest next update: Fri 11 Sep 2026 15:00:50 +0000
Files and hashes: 1: AoiLP-aKiV68_RegC3FR8BLmoTY.roa (hash: cAZegRRMeuO3/yO4SqdfyQYoOuuZTcc84vu6Tr6LRDs=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: gkyOL/rXedrEcbWQ3AlGkwROwYfRSnYrbsgW5qY3CKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:f8:7d:d3:c0:ff:15:51:7b:89:cf:5f:7d:bf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Sep 10 15:00:50 2026 GMT
Not After : Sep 11 15:00:50 2026 GMT
Subject: CN=fc533bb332fab596a5dcbb971a4480228740fae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:ec:ae:dc:5a:eb:cf:44:4e:78:50:a9:65:
fc:06:57:00:2c:ac:6a:c5:3b:54:35:c9:72:1c:15:
9d:f4:aa:5d:f3:f7:c7:db:d2:13:32:03:6a:75:48:
1a:51:ab:a0:11:a0:21:86:da:ed:13:5a:29:c5:d6:
57:4d:f8:ee:82:42:ad:59:7b:ef:c6:79:58:76:af:
48:bc:fb:e9:f4:03:ee:87:df:41:16:1a:3c:47:48:
1b:69:15:de:22:12:84:20:32:93:64:fc:c6:d3:1c:
56:0c:ed:5b:65:8b:7c:d7:5f:5f:80:cc:a1:5a:79:
34:6d:2b:75:82:05:b0:a4:56:54:f9:71:64:f2:82:
8c:7d:26:96:10:a9:ef:1a:2a:b7:76:9d:f7:c0:06:
c8:5e:bb:19:32:f5:88:3f:e7:0e:e5:54:ad:f0:50:
13:32:81:6b:da:32:fe:8f:ec:9c:14:9a:a1:72:df:
75:f3:82:93:cc:35:ff:bf:e5:d2:d1:2e:ab:36:6d:
dc:8a:ed:98:c1:b4:00:6b:43:7d:1b:af:0a:80:f8:
e1:21:fd:84:49:a7:5c:93:d2:13:d7:3d:6a:1c:28:
66:a7:78:f9:38:42:bd:e7:0d:72:64:5a:1f:8c:77:
6e:68:91:aa:b0:df:2b:54:6e:45:d3:33:07:fc:af:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:3B:B3:32:FA:B5:96:A5:DC:BB:97:1A:44:80:22:87:40:FA:E1
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:ee:6f:fe:d2:4f:0d:2b:f9:df:35:b9:46:2a:51:f8:42:
5f:7f:d8:7d:de:7a:de:2f:8c:af:9a:e4:f8:73:9a:df:b7:3b:
f8:1d:e2:99:7a:3c:6c:a9:3a:4d:88:81:bb:15:de:73:54:9d:
32:4e:ad:d7:3e:32:a4:e8:db:e6:bc:82:73:18:7e:a1:b0:e5:
9f:5a:34:1f:66:59:0c:69:71:d2:a2:00:0c:19:f1:1a:8c:0b:
fd:a6:0f:c7:1b:d6:17:b0:c6:7d:ef:3e:a3:1f:00:4e:32:f8:
b4:cc:f8:ee:a5:23:32:1c:ff:8d:4b:2a:69:89:21:f8:0c:e5:
65:01:57:06:9d:d7:81:1b:2f:b1:1e:78:1b:95:28:17:41:a6:
4a:6b:71:4b:13:9f:f1:2a:5a:65:a3:e1:5b:a1:fc:2b:51:e7:
da:15:8d:9d:86:b6:f3:b8:51:d7:23:46:d4:25:d4:eb:f4:1a:
c5:af:1f:95:52:81:1e:4e:3f:ad:f2:2f:c1:d2:59:fd:99:9c:
a7:b2:8d:94:fc:79:fb:31:8a:22:10:df:5a:90:e0:aa:7e:8e:
59:9e:cc:33:21:3f:16:6f:c9:97:88:36:2b:f6:98:7f:4d:e2:
4a:8f:9e:97:bb:b4:3f:12:af:2e:68:00:95:e6:ad:e7:b9:92:
7d:af:e1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1fh908D/FVF7ic9ffb8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWEwYmRlN2Y2OTJiYzVmZGMwYjE2OGJhNjE0YTAyNzJm
MmU2NGQwHhcNMjYwOTEwMTUwMDUwWhcNMjYwOTExMTUwMDUwWjAzMTEwLwYDVQQD
EyhmYzUzM2JiMzMyZmFiNTk2YTVkY2JiOTcxYTQ0ODAyMjg3NDBmYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupzsrtxa689ETnhQqWX8BlcALKxq
xTtUNclyHBWd9Kpd8/fH29ITMgNqdUgaUaugEaAhhtrtE1opxdZXTfjugkKtWXvv
xnlYdq9IvPvp9APuh99BFho8R0gbaRXeIhKEIDKTZPzG0xxWDO1bZYt8119fgMyh
Wnk0bSt1ggWwpFZU+XFk8oKMfSaWEKnvGiq3dp33wAbIXrsZMvWIP+cO5VSt8FAT
MoFr2jL+j+ycFJqhct9184KTzDX/v+XS0S6rNm3ciu2YwbQAa0N9G68KgPjhIf2E
Sadck9IT1z1qHChmp3j5OEK95w1yZFofjHduaJGqsN8rVG5F0zMH/K/vAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxTO7My+rWWpdy7lxpEgCKHQPrhMB8GA1UdIwQY
MBaAFCnqC95/aSvF/cCxaLphSgJy8uZNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMmZmNWItMDAwOC00NTcyLTkzODAt
OTc2YzA0YmRmMThmLzEvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMmZmNWItMDAwOC00NTcyLTkzODAtOTc2YzA0YmRmMThm
LzEvS2VvTDNuOXBLOFg5d0xGb3VtRktBbkx5NWswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8Lub/7S
Tw0r+d81uUYqUfhCX3/Yfd563i+Mr5rk+HOa37c7+B3imXo8bKk6TYiBuxXec1Sd
Mk6t1z4ypOjb5ryCcxh+obDln1o0H2ZZDGlx0qIADBnxGowL/aYPxxvWF7DGfe8+
ox8ATjL4tMz47qUjMhz/jUsqaYkh+AzlZQFXBp3XgRsvsR54G5UoF0GmSmtxSxOf
8SpaZaPhW6H8K1Hn2hWNnYa287hR1yNG1CXU6/Qaxa8flVKBHk4/rfIvwdJZ/Zmc
p7KNlPx5+zGKIhDfWpDgqn6OWZ7MMyE/Fm/Jl4g2K/aYf03iSo+el7u0PxKvLmgA
leat57mSfa/hXQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:52:02 2026 by rpki-client