Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: /w/9FBpJ7Ku0o4fTIjhM88bvc2SHusj+ayiTRSzUxxg=
Subject key identifier: BA:5B:6E:9F:AC:7C:E0:84:E6:CE:E7:A3:23:55:4F:73:22:DB:2E:D0
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019F12D33DFFA8F87B50DC8F3037B9FF2632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 0659
Signing time: Mon 29 Jun 2026 10:01:01 +0000
Manifest this update: Mon 29 Jun 2026 10:01:01 +0000
Manifest next update: Tue 30 Jun 2026 10:01:01 +0000
Files and hashes: 1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: ASv/VvdfM1M8xVSorB65rMCyLx9PQC4rWKY7xjV3/9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:3d:ff:a8:f8:7b:50:dc:8f:30:37:b9:ff:26:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Jun 29 10:01:01 2026 GMT
Not After : Jun 30 10:01:01 2026 GMT
Subject: CN=ba5b6e9fac7ce084e6cee7a323554f7322db2ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:db:5e:b4:6e:bf:02:b1:06:0b:a1:74:96:
12:c2:75:d8:23:bb:82:66:0a:d0:2b:9e:51:8e:c8:
9a:fa:6d:bb:8c:72:47:b3:40:f0:26:62:fe:5f:6a:
a5:66:50:80:32:8f:e1:85:9f:f2:5b:95:fc:9a:07:
e6:29:c1:ac:06:36:da:50:b3:99:d6:4d:e9:de:67:
50:23:aa:c8:16:c7:2b:23:47:2d:f4:ef:cb:5f:04:
00:a9:4a:8e:b1:6d:0d:8a:5f:5d:a2:c6:cc:6a:8d:
b0:51:38:30:d9:b5:d0:98:ff:19:20:79:ac:65:a4:
61:06:61:2d:03:56:b0:9d:d1:e4:0b:b1:42:de:79:
43:df:00:21:d3:3e:7d:02:0a:b1:dc:97:af:af:a3:
55:6d:e7:9b:4b:5e:9a:0e:2c:9f:a1:ad:c8:fc:f8:
19:5d:54:40:88:57:9d:4e:57:26:ff:24:c5:04:2e:
03:40:d8:14:fa:a7:f6:46:fa:d1:f6:a3:37:a9:fe:
3d:52:73:98:ef:1d:bc:71:15:39:e6:9a:9c:c0:dc:
a1:09:43:6d:b7:13:43:06:4c:ad:e4:1d:e4:54:60:
ec:6c:6e:07:e1:1f:24:fa:85:1c:2f:49:da:8f:49:
f9:d9:31:9c:d7:63:90:d3:2e:87:2a:f0:92:e8:b7:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:6E:9F:AC:7C:E0:84:E6:CE:E7:A3:23:55:4F:73:22:DB:2E:D0
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:26:53:50:05:23:74:b1:ea:84:56:7f:36:42:c4:a4:fe:f9:
41:cf:13:fd:d3:d2:84:25:11:9b:04:d1:39:44:bc:a0:af:08:
3b:c3:3f:bb:f5:10:43:96:ab:b4:18:e0:c6:03:c5:0d:87:5a:
50:7e:ff:89:70:0a:32:70:9c:7d:b8:76:22:b4:18:d5:4f:54:
87:89:82:64:ac:1c:ab:96:3d:7f:31:a1:48:af:8c:5e:ec:4a:
7b:47:30:32:3a:43:52:a9:ab:f5:9b:92:c5:e0:c0:d6:b5:71:
b9:79:70:ed:a7:79:10:25:1f:ad:20:fc:31:5f:c7:ad:cf:8d:
6c:b9:6e:de:44:25:37:76:71:06:48:bf:3c:b9:63:d1:9e:07:
b1:fd:cb:04:ec:40:c2:f6:2f:fd:00:e7:19:aa:8a:a9:07:55:
7f:c4:a4:60:f9:84:09:1e:9f:28:f0:9e:1e:9f:d8:8c:39:53:
a2:f4:2c:a5:8f:ed:aa:04:ef:b4:6c:71:f5:b2:c8:3a:0b:1a:
3d:aa:4a:c9:ed:b9:fb:84:23:82:a7:aa:82:17:e6:17:92:df:
65:c8:51:bb:ee:65:41:49:59:6e:b2:67:92:9f:d2:4a:61:ef:
7f:2c:53:c7:6f:bf:d6:71:62:39:70:2d:42:c9:88:1f:a2:f5:
e9:be:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:16:22 2026 by rpki-client