Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: iMVqgFAjm7AyMefQAXKkcV1zYTl56YtUfc+bWYslhsA=
Subject key identifier: 77:40:80:AC:08:DF:26:FC:36:6E:2A:E9:46:E3:70:42:AB:51:1D:B3
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01A17A3B02D68522CF47BB31E2E73E39522A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 22:00:49 +0000
Manifest this update: Mon 26 Oct 2026 22:00:49 +0000
Manifest next update: Tue 27 Oct 2026 22:00:49 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: yVs2ZI6kwWD4fQaFi1Z5j4A/txxECsG7LS+DeqvROFo=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3b:02:d6:85:22:cf:47:bb:31:e2:e7:3e:39:52:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Oct 26 22:00:49 2026 GMT
Not After : Oct 27 22:00:49 2026 GMT
Subject: CN=774080ac08df26fc366e2ae946e37042ab511db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:8c:4e:ac:5a:7c:29:b4:a2:86:0f:a3:ad:
ec:d7:cd:c9:a7:71:10:7e:70:e1:d5:cf:36:28:79:
a7:b7:e1:23:06:1f:ae:83:2f:f5:32:3b:83:e6:c3:
aa:f8:37:fc:10:72:e9:2c:d7:4e:6a:ab:d6:e1:2f:
80:5b:13:bb:b2:21:63:0a:be:de:5e:7d:27:27:ca:
b5:5a:56:5a:10:a4:88:42:6c:ad:ae:c1:00:46:ef:
a4:03:9a:e8:ea:bf:33:e3:65:97:50:f0:2c:14:3e:
38:69:96:70:f7:70:b4:82:e2:34:25:a0:70:02:2e:
b9:6b:63:0d:62:37:70:1d:ae:9e:7d:80:a5:11:73:
ef:db:be:83:46:3a:de:bc:b7:ec:a8:ad:ec:38:d2:
b6:e5:f2:f6:d0:6b:3c:e1:7d:d8:46:4f:ad:9b:94:
0f:0f:5e:02:e4:3b:85:bc:0c:62:c7:ca:44:f5:d3:
09:f3:3f:ea:86:e8:46:84:bc:6d:bc:ab:0e:8a:93:
09:49:6a:ea:ee:27:c1:41:51:c7:76:c0:0a:c1:b2:
bf:2d:d9:29:14:6a:65:93:e6:9b:26:a4:f4:54:f4:
a3:a8:87:ef:51:16:e7:4b:5a:38:e4:82:e4:28:3d:
ab:94:5d:88:7e:0c:d7:0e:b4:c8:93:df:f1:45:10:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:80:AC:08:DF:26:FC:36:6E:2A:E9:46:E3:70:42:AB:51:1D:B3
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4f:66:7d:2c:52:a9:96:61:52:fa:12:3b:cd:7e:46:da:ca:
8a:d8:65:7f:6d:c5:68:04:72:1e:b4:6b:55:e4:5a:51:a4:71:
76:f7:05:1f:98:66:f5:7d:49:03:57:33:32:61:e3:1b:78:63:
ea:db:f3:97:87:a8:54:64:d2:3e:35:4a:3d:9b:02:36:02:7e:
0b:ff:1a:15:8e:14:90:90:cb:9e:1e:37:f3:6b:7e:77:0b:19:
6b:3d:93:e1:57:34:0e:ec:83:a2:ed:cd:48:5b:d0:f0:b1:a2:
76:72:a7:77:0e:a5:01:a9:a3:76:7d:b9:98:32:b5:d2:b7:66:
46:e5:5b:5a:52:34:f4:e9:9e:9b:15:fc:8b:4a:8b:51:c4:fd:
9a:b4:c5:e0:6d:c4:1c:99:47:b7:71:7c:61:e2:e0:ed:3c:3c:
ba:1e:01:a4:3d:c4:39:ab:dc:03:78:c4:14:d9:b6:1e:96:d3:
be:c3:07:29:6e:69:27:01:53:bb:1a:93:7d:bc:93:c4:3a:89:
0a:5a:da:33:8d:f9:3e:12:d1:58:b0:37:c0:b2:2f:e5:e9:93:
90:9c:9f:36:0e:bf:35:cf:fe:32:16:8c:4e:43:eb:cf:65:f3:
97:29:81:af:7b:d3:28:fa:d4:16:e4:2e:a7:2e:8c:cf:ea:16:
d1:26:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:29:49 2026 by rpki-client