Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: XpNx22YNB3cHFOmzRdS39+V1IyjoWctiyksrQwy+SS8=
Subject key identifier: 1F:82:0B:82:47:F2:70:98:F7:DF:CE:A4:83:BE:AA:0F:BE:95:43:50
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019EB958278549B06C14470C23D38DC2A57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 01:00:22 +0000
Manifest this update: Fri 12 Jun 2026 01:00:22 +0000
Manifest next update: Sat 13 Jun 2026 01:00:22 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: woyfA0DPG+KVRzCxAj6A3YxMWC3/nKT5VkVE6ESkIrU=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:27:85:49:b0:6c:14:47:0c:23:d3:8d:c2:a5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jun 12 01:00:22 2026 GMT
Not After : Jun 13 01:00:22 2026 GMT
Subject: CN=1f820b8247f27098f7dfcea483beaa0fbe954350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:85:9b:49:fb:a4:8e:1e:5b:ae:3b:21:60:
e7:d3:7f:f0:0b:a3:5a:a8:96:e4:75:20:04:d3:7d:
54:91:c6:b0:a3:3a:74:bd:ba:2a:6b:c5:01:60:3a:
95:b3:0c:b4:a7:80:27:7a:d7:e0:f5:82:77:06:70:
f1:0b:a4:22:32:8e:38:45:c4:45:5c:5b:46:08:a2:
95:a3:3d:c2:62:84:9d:ee:c6:0f:68:3f:66:48:da:
e9:03:2a:dc:f8:23:0b:aa:61:43:ae:06:3b:d1:b6:
df:3c:9c:ca:0f:6c:0f:e9:de:a3:87:d4:0b:23:78:
cf:76:4d:27:14:79:e9:70:b7:1e:db:ad:af:ed:d4:
43:e4:5d:bf:69:3e:f9:ec:b5:dd:e2:35:be:19:f1:
9e:fe:f8:17:62:96:3e:84:e2:c7:6d:d8:54:9a:55:
fa:41:b3:fa:0a:62:d1:c6:b0:df:59:b5:fd:98:da:
8c:b4:6c:e3:0d:9f:75:a2:c0:f2:ef:df:68:a8:0d:
b5:87:2c:b9:67:6a:9c:6c:b3:56:8c:32:d4:05:f2:
a0:88:69:c5:45:21:46:03:fe:06:d7:d5:6e:b8:f8:
a6:2f:32:b4:11:6d:43:dd:f3:2f:65:c5:40:1f:ba:
29:ad:66:1a:f8:00:cf:60:32:05:40:21:5c:7f:47:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:0B:82:47:F2:70:98:F7:DF:CE:A4:83:BE:AA:0F:BE:95:43:50
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:55:b9:ca:b7:eb:29:1d:86:18:38:cc:5e:f6:61:8f:da:b2:
a6:14:b4:9a:6f:4a:51:bb:cc:60:b9:c0:90:05:69:9e:ff:4f:
cc:b4:6f:bf:6e:39:5b:e5:a0:25:63:6e:a5:06:af:a6:df:22:
01:17:d2:af:59:44:bf:2c:68:43:ef:37:b4:a1:8c:66:df:9e:
c0:c2:41:df:ea:97:3f:19:80:dd:62:f5:5e:73:f6:2f:05:87:
7d:b5:d4:56:c1:cf:99:72:d9:25:7c:43:f0:7b:3c:53:0c:14:
35:1f:21:4e:e1:07:30:48:25:31:23:e5:43:69:f8:fb:8e:e4:
83:fd:5e:b0:b1:35:62:ec:d8:62:95:93:43:6b:0f:08:62:31:
10:f6:dc:30:65:22:4b:4d:f0:79:ff:9a:17:42:43:c1:5f:57:
ed:7e:5b:8b:d3:6f:9e:f8:26:f7:1e:da:c0:a8:1a:8f:04:07:
77:3d:79:15:f6:5a:c5:d7:cd:66:92:79:9c:55:0c:da:bc:0f:
83:56:57:85:f9:4a:74:83:62:06:26:94:e5:4c:cd:a3:03:f5:
d4:49:c8:4b:81:9b:3f:49:02:96:33:54:f0:77:26:8a:e3:ce:
97:d6:25:a2:16:bf:33:d3:d6:43:d9:11:4d:bb:bb:01:0c:b4:
8f:14:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:38:18 2026 by rpki-client