Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: MMo7+PLXefsS2odppV6iowXY6dvZjgTpe6fZK+ZC0/0=
Subject key identifier: B8:9B:1A:F6:B7:A0:D9:4B:1A:0D:06:03:51:7A:BC:D8:26:23:D1:2D
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019FA116CE900FD6BCABBAE53521BA9922D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 01:00:53 +0000
Manifest this update: Mon 27 Jul 2026 01:00:53 +0000
Manifest next update: Tue 28 Jul 2026 01:00:53 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: YbFS7RRzcXPn7LYLsrYu4rBr57PIvizuYEVZpRVJt+c=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:ce:90:0f:d6:bc:ab:ba:e5:35:21:ba:99:22:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jul 27 01:00:53 2026 GMT
Not After : Jul 28 01:00:53 2026 GMT
Subject: CN=b89b1af6b7a0d94b1a0d0603517abcd82623d12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:22:76:c6:07:8e:4e:8c:40:ec:61:bd:6e:
79:c6:ff:57:a6:c6:ec:31:d1:5b:28:9c:ce:33:c9:
71:36:2d:4e:15:ab:38:25:de:49:bb:f5:03:91:0e:
33:73:b6:e4:01:19:81:16:af:96:54:c7:53:6a:e5:
2c:86:56:0a:f0:83:fd:79:9a:6b:e5:57:b8:36:96:
f8:95:c5:54:a3:98:63:82:84:b0:34:b0:54:10:10:
69:b4:5c:df:b7:2d:69:17:ba:01:2f:d9:ba:e4:46:
b6:22:0b:dc:d1:0c:8e:dc:58:56:96:39:a9:0a:7f:
06:4f:00:e6:28:a0:e7:33:3f:1e:c1:c7:51:19:c4:
e9:af:11:82:14:c4:25:08:a5:9f:8e:af:7b:f1:59:
ab:6a:4f:74:3e:ee:5f:b2:11:c4:87:82:4d:cb:61:
77:0f:35:08:06:66:f8:ed:c8:ae:34:67:75:93:e4:
b7:7e:d2:32:fd:c9:b8:21:37:0e:a7:5b:e1:46:64:
7f:c4:41:71:8c:ca:f0:15:8c:2c:d0:f1:6d:33:0a:
8a:eb:dc:b1:75:cc:60:b7:35:5d:72:0f:0e:30:66:
88:5b:2b:20:17:c0:fa:46:24:47:cd:1a:b7:a6:a9:
17:81:59:6a:05:c4:33:7b:23:37:15:bb:1a:ca:51:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:1A:F6:B7:A0:D9:4B:1A:0D:06:03:51:7A:BC:D8:26:23:D1:2D
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1d:fb:01:8f:44:b3:76:71:91:fc:10:91:f5:6c:9c:51:b7:
7a:2c:4a:1a:e3:dd:fb:2f:49:8f:19:bb:12:73:58:9b:ab:84:
87:94:07:27:1e:d0:1c:19:b2:95:1d:b0:e5:28:c0:25:6c:b6:
05:70:a7:b8:8c:5f:a5:4b:72:3e:3c:f0:84:0b:ce:a6:ee:f9:
83:4d:5f:77:2a:d8:03:1e:be:81:a9:49:33:47:33:83:2c:36:
c9:4e:1e:3f:66:2e:27:0c:c1:9b:47:8c:37:74:bd:08:70:d1:
61:01:c6:49:fa:17:db:31:05:dc:4e:ac:87:c7:7c:37:e1:f4:
d6:0f:58:54:a4:16:72:68:4b:59:2b:19:d9:96:40:7a:0b:d1:
7f:37:5c:1c:c5:01:c4:2e:9b:36:fe:57:d0:49:6a:5e:92:ad:
06:0e:f2:69:36:f6:f6:ef:58:5c:1e:9e:eb:e5:21:2c:17:a6:
7e:83:cc:21:1c:f6:8f:24:91:6b:3e:7f:f7:30:fd:6f:62:d8:
fe:e2:23:71:42:c3:fa:c3:db:31:2e:86:f8:2b:65:58:9b:42:
f5:c4:01:e2:13:27:c5:b8:a9:1f:96:53:65:1d:51:82:c4:e3:
f0:87:05:9d:bb:63:ca:9d:dd:5f:91:72:57:fc:fc:05:0e:83:
f2:74:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:30:19 2026 by rpki-client