Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier: B8uxLYIJxcKr3KrTEEKIi65ulCB47Xm4YQm9PMVPpuo=
Subject key identifier: 82:2D:0C:2A:9A:9C:0F:20:38:3D:FB:49:AA:E6:50:A4:98:CA:22:95
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 019D37C0E6B47F4F2433C5BBD2E900871E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 04:01:21 +0000
Manifest this update: Sun 29 Mar 2026 04:01:21 +0000
Manifest next update: Mon 30 Mar 2026 04:01:21 +0000
Files and hashes: 1: EGeXD8B0vr0bu-ghfGdkYui_6lA.roa (hash: gPUVhthzwyALXJfc203Rfoe0hmjn8DnicOu690skbKo=)
2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: cYstGe0oFme4xvlWRWQgJqQ3es798u38PSXIhLfviWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e6:b4:7f:4f:24:33:c5:bb:d2:e9:00:87:1e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Mar 29 04:01:21 2026 GMT
Not After : Mar 30 04:01:21 2026 GMT
Subject: CN=822d0c2a9a9c0f20383dfb49aae650a498ca2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:b8:0c:39:56:4c:39:7b:be:0d:d7:62:52:
5d:55:f4:ad:d1:2e:bb:5b:f9:57:ba:2e:cf:bd:11:
26:ab:af:46:26:e2:5a:e7:29:94:e1:af:80:b6:e9:
bc:cf:0d:c3:eb:96:20:7d:eb:a4:e2:9e:bd:6e:9d:
21:93:f6:40:85:20:06:e7:78:65:31:23:19:48:01:
30:4f:15:14:dc:b2:38:d3:17:e1:cb:b8:ab:4f:22:
ac:a9:94:1a:5f:2c:99:75:0e:05:3d:d2:18:89:bb:
67:ba:9e:dc:4b:d1:7f:42:32:f6:b9:dc:fc:ea:33:
96:d1:31:a0:fb:f8:ca:9d:c8:ab:84:c4:14:24:96:
1e:1c:cb:ef:06:48:7f:f3:9d:fd:02:0c:59:71:cc:
fc:21:14:a4:4c:e7:63:95:c2:5f:63:87:93:1d:9b:
50:33:35:4b:64:85:56:10:b7:88:aa:d0:08:6d:b3:
2d:09:35:74:c3:75:81:46:75:13:49:eb:2c:03:69:
2a:c9:07:89:75:49:72:8d:3c:d8:75:dc:df:ec:a0:
c1:0c:7f:f8:06:a1:1b:d8:45:b3:0e:70:fb:49:11:
69:d4:c5:dc:ac:4b:2a:a8:3a:5e:ea:10:45:6b:80:
c5:19:39:df:f2:10:11:6e:1a:3d:e6:d6:2a:5b:19:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2D:0C:2A:9A:9C:0F:20:38:3D:FB:49:AA:E6:50:A4:98:CA:22:95
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:55:a4:63:ba:fc:cc:0a:c6:ca:13:96:6c:5c:26:ee:ee:a5:
22:c5:d6:50:42:66:5e:62:f9:7d:a2:72:46:ed:ee:5a:0f:88:
f0:9b:21:09:f4:9b:8d:52:14:46:5e:1e:29:7b:2e:e8:42:85:
7e:eb:6f:d7:97:34:54:a6:a2:89:4a:ee:20:c1:6d:54:ba:87:
21:a3:bb:99:7f:26:6d:5a:c1:87:88:e6:87:0a:58:df:74:21:
c8:f0:e7:db:15:90:8a:aa:4c:81:c4:94:21:6a:95:a1:88:ac:
54:73:3e:eb:55:d5:3a:2c:96:f2:01:b8:a4:bf:85:d1:7b:12:
81:9e:e8:d7:03:7a:fe:13:67:2a:c8:84:87:dd:15:83:37:8f:
62:03:42:83:09:47:ce:10:26:77:63:7b:3a:66:7f:14:e8:10:
1e:77:40:36:3d:fc:f5:17:61:ef:89:1e:a4:75:20:b8:bd:63:
d2:53:b9:19:02:bb:38:18:a5:24:fa:e6:04:a6:9a:4c:77:68:
55:33:72:57:25:9e:82:eb:6c:db:62:7c:bc:a6:57:c3:08:e2:
72:c9:ef:cb:6e:7b:46:17:ee:16:55:91:05:9c:f9:11:26:91:
4a:c5:53:dc:b7:e2:05:59:1e:9c:15:07:4c:78:82:9a:30:b1:
bd:7f:d2:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wOa0f08kM8W70ukAhx43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz
ZWM2ZjkwHhcNMjYwMzI5MDQwMTIxWhcNMjYwMzMwMDQwMTIxWjAzMTEwLwYDVQQD
Eyg4MjJkMGMyYTlhOWMwZjIwMzgzZGZiNDlhYWU2NTBhNDk4Y2EyMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZm4DDlWTDl7vg3XYlJdVfSt0S67
W/lXui7PvREmq69GJuJa5ymU4a+Atum8zw3D65Ygfeuk4p69bp0hk/ZAhSAG53hl
MSMZSAEwTxUU3LI40xfhy7irTyKsqZQaXyyZdQ4FPdIYibtnup7cS9F/QjL2udz8
6jOW0TGg+/jKncirhMQUJJYeHMvvBkh/8539AgxZccz8IRSkTOdjlcJfY4eTHZtQ
MzVLZIVWELeIqtAIbbMtCTV0w3WBRnUTSessA2kqyQeJdUlyjTzYddzf7KDBDH/4
BqEb2EWzDnD7SRFp1MXcrEsqqDpe6hBFa4DFGTnf8hARbho95tYqWxkBRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIItDCqanA8gOD37SarmUKSYyiKVMB8GA1UdIwQY
MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt
NmNiY2I3ZTNkOGQyLzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy
LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyFWkY7r8
zArGyhOWbFwm7u6lIsXWUEJmXmL5faJyRu3uWg+I8JshCfSbjVIURl4eKXsu6EKF
futv15c0VKaiiUruIMFtVLqHIaO7mX8mbVrBh4jmhwpY33QhyPDn2xWQiqpMgcSU
IWqVoYisVHM+61XVOiyW8gG4pL+F0XsSgZ7o1wN6/hNnKsiEh90VgzePYgNCgwlH
zhAmd2N7OmZ/FOgQHndANj389Rdh74kepHUguL1j0lO5GQK7OBilJPrmBKaaTHdo
VTNyVyWeguts22J8vKZXwwjicsnvy257RhfuFlWRBZz5ESaRSsVT3LfiBVkenBUH
THiCmjCxvX/SZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:08 2026 by rpki-client