Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: mACJSJO5gi6WIkjlDPTeCRv0zm2D5UpWdBPLlr4UmA8=
Subject key identifier: B6:23:9B:EE:61:6A:FC:DC:49:70:7C:85:B7:AA:67:2F:CB:C5:8E:4A
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019FFE6DBDD933FBEBFE74142BA2F772291E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 09BC
Signing time: Fri 14 Aug 2026 04:00:32 +0000
Manifest this update: Fri 14 Aug 2026 04:00:32 +0000
Manifest next update: Sat 15 Aug 2026 04:00:32 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: Nc3kWfx6RLkSYNrpu0qkF7Pgit1z/IXoZteke+QtaOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:6d:bd:d9:33:fb:eb:fe:74:14:2b:a2:f7:72:29:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Aug 14 04:00:32 2026 GMT
Not After : Aug 15 04:00:32 2026 GMT
Subject: CN=b6239bee616afcdc49707c85b7aa672fcbc58e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:bb:dd:6d:a2:99:66:a3:e6:cb:d2:3c:42:
00:c8:2e:45:85:bc:93:61:03:6c:f5:99:00:76:5e:
25:66:82:33:6e:7e:44:bf:a8:ae:af:52:c3:f3:90:
07:67:0c:e5:c9:08:11:fb:a1:33:63:a3:fd:2f:85:
db:9e:c3:b8:6e:16:34:61:dd:a5:92:68:9b:93:97:
83:23:41:ef:a6:a7:5e:61:6d:ea:7c:cd:21:68:16:
ee:2e:1a:28:6a:12:97:c8:1a:64:a9:00:d8:0d:fc:
e3:93:1d:7c:59:3c:2b:80:a3:aa:80:9a:6a:5f:76:
04:8a:98:50:bd:47:2e:e4:12:f0:d9:5b:ff:e2:69:
5c:ed:df:ba:a9:4c:01:b5:69:ab:65:ab:82:3e:af:
00:23:46:b4:29:82:a1:1b:91:66:a5:0f:e5:a0:01:
52:80:f7:5d:d9:57:4c:8c:56:c0:d7:1f:b9:82:7f:
cf:56:28:5d:ec:e7:ed:d1:61:b3:80:12:e1:5a:00:
fa:2c:9f:f8:1d:10:19:4b:0f:b6:6f:bb:55:ef:5d:
01:0f:f4:b1:26:fb:93:b5:0d:9d:7b:da:7b:a1:ad:
f6:e3:f2:17:81:27:10:bd:9a:cf:e6:ed:33:43:63:
29:8e:74:ad:d1:77:72:e5:7f:f1:42:e7:13:c5:17:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:9B:EE:61:6A:FC:DC:49:70:7C:85:B7:AA:67:2F:CB:C5:8E:4A
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5d:53:db:0c:62:b9:d2:0d:94:23:44:31:d0:09:6e:b6:e5:
87:70:53:85:f7:54:e9:85:05:9f:b9:99:30:98:4a:65:f9:56:
44:29:a9:c6:43:01:8b:e7:ef:77:fc:61:a6:c2:d4:0b:e4:e0:
11:fd:7a:e9:91:99:ff:16:e1:b1:63:b9:63:23:35:56:1f:0e:
39:2d:20:24:76:ef:92:ee:49:cd:ba:59:2f:97:59:59:7f:b6:
db:72:cb:00:d1:4b:a1:39:c7:88:56:ab:ac:71:22:05:59:1c:
70:ab:8c:48:d6:11:0e:37:cd:0e:5f:52:69:16:8a:fd:ea:2b:
01:13:8d:a0:c9:19:dc:00:3d:be:91:72:20:4d:ec:e8:23:83:
2e:08:c6:bb:b5:7c:b7:56:10:6b:db:c1:c8:a9:0d:4f:07:81:
73:75:54:34:5b:ea:1b:77:a5:00:5d:51:a2:45:80:03:9f:82:
99:63:79:2b:1d:27:3d:0a:84:37:91:00:d3:1a:ee:53:af:2e:
5c:73:ab:d1:62:46:42:48:63:86:18:50:e5:c8:d5:82:3e:57:
ae:65:e9:65:18:7b:26:1e:68:6f:7a:be:89:0e:0f:e5:f7:11:
ac:68:cc:f2:b8:d3:6e:d7:69:56:bc:2c:45:ef:1a:e5:70:0f:
d8:3e:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:14:10 2026 by rpki-client