Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: K/nmduQy+afI/g1qKPZNYQOE62If8lRRbp40h4n5uUc=
Subject key identifier: 57:20:F2:A0:4B:70:52:80:94:57:03:23:34:CD:BB:CC:3D:5D:5E:09
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019F12D309FC2012D8960839D6D667AEB3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0942
Signing time: Mon 29 Jun 2026 10:00:48 +0000
Manifest this update: Mon 29 Jun 2026 10:00:48 +0000
Manifest next update: Tue 30 Jun 2026 10:00:48 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: L+Gj4+0OC/fgBHbVwvLkgn+GUFOJ85VS2Az6Pz8rB8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:09:fc:20:12:d8:96:08:39:d6:d6:67:ae:b3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Jun 29 10:00:48 2026 GMT
Not After : Jun 30 10:00:48 2026 GMT
Subject: CN=5720f2a04b7052809457032334cdbbcc3d5d5e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e7:cf:ca:c8:dc:7d:9b:59:5c:34:f0:50:03:
ab:a7:80:ce:9d:2f:38:ac:06:b1:2b:39:a9:f4:a1:
33:b0:02:06:13:e4:bb:9d:e0:e4:dd:7c:97:4f:aa:
7f:75:01:f0:54:0c:b2:4c:48:92:b3:fd:e4:be:c3:
ab:91:51:e7:5d:71:76:3f:22:59:84:7e:c5:39:b6:
d1:e6:67:54:cf:3b:75:3c:50:af:4c:74:70:f2:48:
11:b4:98:4f:42:d7:50:78:cb:bc:ac:f4:a3:3c:6a:
fa:3e:b9:2b:70:4c:a6:3f:28:b3:5a:85:22:fa:d4:
d6:71:cb:99:7c:16:21:36:13:7c:de:35:8b:1c:ab:
fe:ea:67:35:e3:74:c0:83:d7:7b:75:b5:ff:d1:9b:
26:ab:6d:5f:fe:a4:49:7c:6a:c6:61:51:90:2d:19:
e0:9a:0b:31:07:1c:60:c8:5d:0d:80:d6:45:37:4f:
1e:97:7d:54:5b:1c:f7:1d:d7:ba:5c:36:19:c2:8a:
87:83:d9:93:ea:aa:d5:0b:fe:7a:86:20:0f:34:a4:
4b:52:1a:47:d5:01:aa:04:e4:94:19:c8:b0:b9:55:
db:03:b3:cb:b0:25:e5:07:3d:51:83:d1:1f:a4:68:
89:e4:eb:11:1a:93:b5:38:fe:6a:a6:4a:95:ac:db:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:F2:A0:4B:70:52:80:94:57:03:23:34:CD:BB:CC:3D:5D:5E:09
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:13:8e:ed:c3:ca:fb:9d:c1:b5:1a:7e:d5:2d:bf:f7:2e:93:
c1:c3:31:a0:30:88:4b:6c:e2:dd:a8:cd:34:0a:6c:5d:c6:d6:
67:62:a7:68:24:f6:2f:15:ed:6e:80:e0:d8:1a:78:c4:79:9e:
f4:f9:b5:67:95:65:2f:df:8b:ec:0d:5a:08:39:7e:be:80:95:
19:6f:2b:7f:b4:66:f3:3a:cd:83:25:ae:07:d1:b1:ab:5d:78:
8e:44:27:d1:21:84:0e:aa:d3:e3:bd:a4:ce:64:cd:59:41:9d:
39:ca:ca:1a:70:ca:bd:aa:d1:dd:94:de:5a:66:76:9e:81:e0:
d1:2c:56:cd:f3:54:9e:46:c4:df:f3:a7:30:90:79:ee:41:75:
9e:ec:1b:9d:66:8f:c9:e8:dc:4d:79:d0:ad:26:c3:fc:82:9b:
d1:dc:b0:6d:87:ec:23:49:a1:d2:6f:c3:8b:1f:9f:f2:17:e0:
eb:06:85:1b:47:99:bf:cc:44:99:e1:d4:88:b8:48:eb:8c:82:
0a:d3:b5:40:70:eb:d7:c1:6a:d8:49:1e:b3:9a:6a:c1:49:8f:
b6:1d:ec:5d:33:45:bc:25:d1:ca:15:3e:76:62:fb:73:97:3b:
9f:b3:bf:ae:41:29:ab:4f:e2:96:bf:96:53:5e:d5:e7:6e:54:
71:6a:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:54:19 2026 by rpki-client