Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: AhBXQw2HouGjIPaok470dYHWv+M+ZWeC6ZvjP+i9Rrw=
Subject key identifier: 15:D5:BF:88:E3:7A:6D:5A:1B:21:9E:9F:70:C3:55:8B:85:AF:F1:4A
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019F216B5566F8A91C36A3CA77417C583A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 193C
Signing time: Thu 02 Jul 2026 06:01:50 +0000
Manifest this update: Thu 02 Jul 2026 06:01:50 +0000
Manifest next update: Fri 03 Jul 2026 06:01:50 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: 4bp6h+HLp6yxCllSia5CDrNo7OTFwoT55DEC48piulY=)
2: ezywn8EPx5ODLOytvX7dXsPm7gc.roa (hash: geqaFC8LHCTX2LcxH4kfFFCGPOyVbzF9N0haayABzHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:55:66:f8:a9:1c:36:a3:ca:77:41:7c:58:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Jul 2 06:01:50 2026 GMT
Not After : Jul 3 06:01:50 2026 GMT
Subject: CN=15d5bf88e37a6d5a1b219e9f70c3558b85aff14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:a6:f2:c7:09:83:f3:a8:d0:c9:01:47:ed:
46:f7:04:e9:96:e2:a4:3c:2a:46:29:83:47:59:25:
07:51:46:79:d9:e2:8c:a0:c7:8a:70:58:42:fd:66:
17:00:e8:6c:c4:7b:9f:93:65:84:07:47:7b:5d:e8:
be:a5:65:f8:31:5b:ab:c7:cc:4b:6c:1b:22:50:5b:
8b:85:a3:51:de:e4:32:03:f4:b0:96:81:28:d1:33:
a0:89:1d:ad:ad:42:ac:ca:56:fb:30:1b:4b:3c:da:
02:8e:d0:27:3b:9b:62:8b:bf:69:d6:fe:55:dc:b5:
6f:bd:d6:f2:63:64:4d:31:58:e7:4c:4d:c0:f2:f9:
d5:58:e2:7b:b3:56:31:7e:88:9d:da:0c:c2:8b:13:
70:f7:13:56:83:6b:1f:1a:99:2e:29:f7:03:7c:e7:
b8:da:c3:a3:a7:ae:cf:ae:bb:62:81:21:3c:02:96:
be:9e:dc:4b:d7:62:c8:72:5f:92:9d:65:58:56:e7:
45:d3:52:3b:b7:d6:d8:cb:0a:5a:cf:60:52:c6:0e:
c9:a9:c2:1e:80:27:8f:a1:3c:59:4f:6b:90:e4:81:
90:86:cf:b2:53:94:ce:5f:12:3d:51:35:bd:69:6c:
24:82:70:3a:31:3a:d4:0a:c2:eb:9a:27:77:2a:6b:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D5:BF:88:E3:7A:6D:5A:1B:21:9E:9F:70:C3:55:8B:85:AF:F1:4A
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2b:0d:1f:2e:31:5f:50:aa:04:cb:c8:6e:a0:2d:2a:01:3b:
c9:3d:ba:f7:50:aa:b8:52:ca:8b:a8:c4:b0:26:dd:e6:bd:ae:
7c:17:2d:9c:9e:44:db:02:0b:22:ed:b2:94:5b:62:50:48:d2:
21:ed:39:df:3b:93:e6:a5:70:f3:70:41:e2:9b:7b:b3:bd:f7:
b5:b7:7c:94:22:6d:78:52:85:dc:14:5e:31:ee:ec:8d:2b:bd:
77:38:d2:8c:d3:53:71:2a:de:a8:12:95:23:8c:57:b2:c2:3d:
44:14:2b:35:ec:3a:07:46:e3:49:84:38:8d:e8:ce:11:c5:02:
0f:3f:ae:6d:3b:ee:d9:e0:86:41:05:4a:66:59:7a:24:de:e5:
78:74:92:04:b8:40:2d:b6:1b:d3:d1:0d:3b:2c:42:be:17:e1:
c8:56:83:7a:bc:9b:07:ea:57:06:4b:1d:79:31:ce:d6:1e:b7:
72:82:73:91:ee:49:7a:f7:02:4a:ff:cf:22:62:d1:e2:4c:26:
90:65:8e:3e:3f:1a:73:1d:0a:f0:02:5a:5c:92:4e:71:d2:69:
08:60:36:1f:19:06:2b:cf:f9:b5:4e:4b:55:1b:5c:20:8c:62:
ab:66:7b:fe:9d:de:d5:06:cb:74:fd:24:cb:3c:f1:f9:28:a8:
27:cf:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 11:05:17 2026 by rpki-client