Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: 2JO2uG5pp1ljnEa0AxJtol6oLHyUxV/+6QnxzegNpbg=
Subject key identifier: A1:43:03:18:40:80:06:4A:25:7A:F4:76:D2:97:C4:6E:1D:2E:A9:E6
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019D3909A3DE6666E6018788CCCB706D31CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: Axi6jN9ST1KDFQivlrOmEFepaOoH3bIVjeYLC//pVNY=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a3:de:66:66:e6:01:87:88:cc:cb:70:6d:31:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=a14303184080064a257af476d297c46e1d2ea9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:1e:4f:d8:bb:0b:23:a5:83:34:1a:6c:a8:
30:45:1f:a8:d7:4a:12:db:36:07:bd:18:c8:08:98:
fc:b7:4d:f2:67:eb:1d:be:36:59:c6:1c:73:d1:39:
aa:92:31:02:11:a9:42:e0:c9:51:fa:16:33:77:56:
1c:17:94:0e:c9:e6:d4:99:08:85:9f:12:c8:40:43:
8f:ff:3b:4a:53:a0:25:67:07:d9:80:b1:8f:56:be:
78:15:a0:61:85:d3:89:1a:88:cf:fe:68:dc:02:8f:
4c:15:17:f5:b6:1a:0c:4e:0e:d5:e1:44:14:b5:62:
f6:1c:bf:86:f6:aa:4c:23:1e:28:7c:fd:12:e7:87:
e4:5c:4e:95:fb:fe:48:aa:07:b5:6c:eb:d1:11:1d:
9b:58:59:b9:3c:1d:94:7e:58:a2:42:a4:f2:da:64:
db:3f:7c:57:45:b9:5d:2d:9a:88:4b:a7:93:c4:5f:
79:e3:ff:13:39:07:24:55:07:78:72:9c:bf:34:85:
89:19:a5:ef:f1:ab:7d:14:96:da:4b:86:83:8d:87:
4c:08:fe:fa:39:f4:50:6a:e4:a9:f8:14:3d:2c:b1:
db:41:12:45:43:cf:8b:6c:67:9d:71:35:fd:17:94:
a6:23:44:ba:55:b0:c9:3b:c2:16:9b:4f:bf:10:c2:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:03:18:40:80:06:4A:25:7A:F4:76:D2:97:C4:6E:1D:2E:A9:E6
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c8:49:f7:51:cf:7a:a3:e4:88:c0:35:89:8d:99:42:85:fc:
e6:15:70:06:a3:95:53:dd:3f:77:8c:79:f3:d8:e6:b0:fa:0a:
6a:ae:f3:e1:7e:28:c5:e0:b0:3c:ff:39:45:11:28:1c:fe:09:
bc:c1:85:d7:f4:4c:62:db:77:57:ae:2d:0a:4f:96:3a:fa:6c:
4f:22:8c:fd:c7:a4:ab:db:2a:77:95:ca:2a:a2:b0:d0:78:04:
9e:a8:ba:fe:70:91:c3:3f:f9:e4:e1:70:aa:db:4a:c4:9b:ce:
d8:d5:20:7d:5d:7e:ad:bd:52:8b:95:e0:df:ab:a1:53:33:9b:
92:66:6c:a0:4f:79:4b:fc:4d:0f:8e:01:84:83:87:70:3a:9a:
c8:4d:aa:db:cd:20:78:80:2a:76:4d:38:f6:51:93:b6:5d:4d:
34:bc:75:5a:2a:98:e6:1b:cf:29:fa:a8:d7:eb:64:84:a6:1a:
b6:6f:b7:29:83:7b:ae:3c:de:32:d3:73:2b:2f:a2:c4:70:d8:
42:4c:83:59:74:d1:35:60:98:4a:8b:82:e2:04:64:d6:4c:cc:
98:37:2f:ac:7c:bc:5d:48:90:e5:9b:af:db:6d:4a:0a:27:f7:
85:a2:6e:a1:07:ea:c3:28:4f:91:7c:a5:10:84:23:1a:34:0b:
8d:bf:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:07 2026 by rpki-client