Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: 73sMH6hrOGux0Ln6syH9I69py31UNIj0JCXe7UOGdu4=
Subject key identifier: 95:DA:CA:0E:08:0F:81:77:7D:72:99:03:86:3A:3E:73:78:0F:2B:A0
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01A08CB206C8A6C8DCE5103DB859223F7CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 19:01:12 +0000
Manifest this update: Thu 10 Sep 2026 19:01:12 +0000
Manifest next update: Fri 11 Sep 2026 19:01:12 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: hi2eALNZkaGMxa3CoYM3JIv8FLQ6PJiXuFT0ZjumOoM=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b2:06:c8:a6:c8:dc:e5:10:3d:b8:59:22:3f:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Sep 10 19:01:12 2026 GMT
Not After : Sep 11 19:01:12 2026 GMT
Subject: CN=95daca0e080f81777d729903863a3e73780f2ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:5d:31:65:c3:5c:b1:85:5b:b0:3f:83:88:
f2:c5:74:d0:ae:24:e6:dd:59:6e:46:83:c1:71:4e:
8d:db:2f:3d:71:b0:bf:ff:07:8b:60:62:b7:aa:86:
65:1d:1f:55:91:bc:5e:0d:e1:09:f1:e9:70:41:91:
86:4d:7a:2e:96:f8:34:fb:61:cd:31:15:dd:f9:6e:
33:94:39:e0:74:fd:69:1f:f7:b1:97:11:18:3f:03:
1d:2f:05:59:2d:be:93:cc:88:c4:ab:e0:73:63:76:
45:48:96:3e:00:8f:e5:c7:43:60:d5:e7:97:38:12:
53:5f:50:ac:16:e8:5a:56:cd:6e:59:cc:10:de:c7:
86:96:a5:f2:d8:6e:b2:97:0a:f8:9f:92:71:9c:4a:
20:0c:66:df:2c:65:18:da:d8:f1:d0:26:36:cd:b8:
29:50:88:aa:7a:cb:c8:ea:9f:13:7e:d9:ba:f9:a4:
3c:9d:fe:6c:a7:79:da:ec:a5:9f:e5:49:47:02:2b:
5f:b4:04:3c:86:e3:a5:39:77:6c:e7:5e:83:43:02:
60:1a:f0:f5:7a:91:1b:11:02:59:e4:44:66:fa:65:
0a:12:3b:aa:c4:34:b8:98:eb:35:10:88:41:7b:df:
c7:36:c5:f9:b5:53:fd:ae:48:fa:7c:93:6b:c4:5b:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:CA:0E:08:0F:81:77:7D:72:99:03:86:3A:3E:73:78:0F:2B:A0
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f3:08:43:10:b8:dc:ac:d8:fb:0c:d1:9b:ad:b7:3a:4b:06:
e4:6a:2b:4e:a0:25:b4:7f:41:f2:11:27:ae:55:3c:6f:94:af:
ff:db:b5:26:6a:3f:1b:04:ed:68:e2:7c:59:98:69:ab:53:d8:
f1:48:56:c9:64:66:5e:37:79:a4:e4:fe:ec:0c:63:b5:d7:5e:
94:32:37:9f:4d:cd:a4:14:04:5a:76:71:b8:89:a2:41:e0:92:
bb:06:00:73:70:6a:46:ac:19:dc:f6:d3:f9:b3:6b:ec:72:3b:
b9:ac:8f:98:cc:13:aa:d7:3e:48:db:c2:ec:c6:b5:4a:f4:cc:
a0:bf:3d:4d:7b:9d:ce:27:2f:6d:10:64:85:a9:04:f7:96:3e:
70:01:7e:3c:7e:9d:33:6c:18:ba:08:cd:1d:38:48:a1:7f:25:
79:c0:62:8c:3c:6a:0c:dd:18:59:3f:07:dd:60:c6:aa:21:90:
98:98:aa:be:2e:d4:3e:92:b9:0c:64:e3:10:df:09:0a:f0:d7:
a1:09:43:34:bb:79:16:5f:de:c7:b5:b2:89:3e:84:1b:1b:9d:
19:d3:c5:8c:09:94:ca:d1:62:b0:21:97:4a:48:62:d8:f3:95:
70:dd:5c:e1:37:b3:97:53:5d:58:92:5b:61:02:62:00:53:88:
0f:6c:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:35 2026 by rpki-client