Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: rlse6TKt9+gj8ORNypQtw8WyRvr2dZ3rVh3tMW2GsbU=
Subject key identifier: 25:5C:1B:E0:0D:35:F2:85:8E:9A:9D:53:57:33:12:F6:81:89:A7:0E
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019E29274E18F6FFD1703322B29E58DB3B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 08C9
Signing time: Fri 15 May 2026 01:01:42 +0000
Manifest this update: Fri 15 May 2026 01:01:42 +0000
Manifest next update: Sat 16 May 2026 01:01:42 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: xYmOiCxJpXIZk00fnLmAbGIXMwQ+HW+6WVkBIjX/Y4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:4e:18:f6:ff:d1:70:33:22:b2:9e:58:db:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: May 15 01:01:42 2026 GMT
Not After : May 16 01:01:42 2026 GMT
Subject: CN=255c1be00d35f2858e9a9d53573312f68189a70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:c1:70:5f:61:d9:ee:3a:09:16:02:fe:ae:
1c:ac:b0:0c:59:68:cb:e7:e7:2d:ae:66:aa:c8:ca:
57:6e:ff:3f:27:c1:21:cf:4f:8d:bb:0c:4d:85:c8:
b6:2d:cf:98:96:99:4d:dd:5e:ad:ad:ad:31:ed:f1:
d9:c7:05:76:56:60:72:40:af:93:ae:dc:57:ea:7f:
85:a9:27:7f:c0:fa:98:76:e6:53:c9:0a:42:79:de:
ee:0c:17:c7:15:97:d5:8d:d0:59:14:6a:32:09:51:
4e:6e:2a:47:26:ae:5b:2a:db:48:5c:f7:7a:ec:fa:
92:74:27:be:aa:de:93:76:35:1c:97:7f:20:29:7a:
f5:30:c2:d9:21:a9:bc:2e:3c:5e:f6:ad:89:a4:ea:
4c:07:2c:83:42:89:b4:0b:a3:29:df:9d:7f:d9:e3:
25:1c:36:0d:3e:8a:99:7e:c5:95:36:ae:22:36:21:
94:2c:96:7b:6e:cf:7a:0c:1d:71:7c:51:51:0c:96:
04:3b:be:ff:13:fa:7f:6a:b0:77:fb:b0:ec:3a:23:
51:82:ed:66:32:4f:e7:a6:94:68:65:20:4f:7b:33:
c7:2f:5a:a7:71:76:7f:3d:c7:e7:c8:f0:bc:67:6a:
57:11:54:80:4f:64:89:22:7e:13:52:5e:0a:0f:6b:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:1B:E0:0D:35:F2:85:8E:9A:9D:53:57:33:12:F6:81:89:A7:0E
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:22:c0:10:44:01:3f:14:7f:cb:85:35:d5:5b:e6:a1:85:42:
55:40:e8:81:95:01:70:32:2d:75:a8:a2:d6:2e:8d:29:4f:ef:
1d:8b:23:e4:a9:39:67:70:26:83:fe:f8:7b:cb:3a:2e:de:53:
03:6a:a9:02:38:e6:a8:8e:b4:f6:d1:bc:5a:fc:51:55:e1:56:
85:27:d2:0f:df:60:8e:15:c8:97:c4:93:2b:43:f8:24:df:2b:
cd:f0:ed:8b:e6:98:4e:a1:c6:a2:cc:02:e5:65:38:a1:60:06:
2f:6b:bc:31:df:72:18:70:5b:54:19:5e:44:61:20:94:48:87:
fb:4e:7b:e6:10:ba:9a:4a:d3:41:9b:32:19:b7:df:1d:06:c4:
f9:3e:5d:28:38:d4:6d:55:bf:bd:09:2c:51:13:77:5b:03:7a:
a0:e0:a2:07:cb:ef:02:d7:5b:15:da:22:1d:3a:4e:b1:07:c5:
04:e2:ba:59:e5:ed:a7:a5:a4:86:5c:11:f0:e3:50:2e:a6:62:
13:73:19:cb:a9:0e:0e:e5:3d:3d:4e:ee:80:9c:cc:84:c4:dd:
7e:26:24:4a:3b:23:d2:4c:76:56:74:d1:9e:9a:df:0d:8d:b6:
85:eb:d4:2a:d5:62:da:2c:53:a2:cf:16:28:58:d6:4e:d4:ad:
c1:59:1a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:55:47 2026 by rpki-client