Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: lfFPqtkR9qM+l/XsHfn/Ow8AdVas2YaXmO/NhyVAx1E=
Subject key identifier: 62:58:72:02:0E:4B:B6:3D:D3:5A:82:43:66:D6:AB:6C:95:92:D4:51
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 019E8EA4F7566CA5A62249BB6D62DB8B8AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: 0158
Signing time: Wed 03 Jun 2026 18:00:36 +0000
Manifest this update: Wed 03 Jun 2026 18:00:36 +0000
Manifest next update: Thu 04 Jun 2026 18:00:36 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: +lPw7rIHnpBA6idFGEMraQlBH8Iinr+sugkq8cdKCFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a4:f7:56:6c:a5:a6:22:49:bb:6d:62:db:8b:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Jun 3 18:00:36 2026 GMT
Not After : Jun 4 18:00:36 2026 GMT
Subject: CN=625872020e4bb63dd35a824366d6ab6c9592d451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:c0:1a:93:46:00:b2:a5:74:8c:fe:e8:1f:
b6:a3:2d:d0:77:10:67:56:e5:e9:95:fb:e2:d2:e1:
28:51:fe:21:49:92:6d:6b:8a:99:d7:0b:38:d7:5b:
0f:f9:df:70:3d:10:1d:19:fd:f1:7f:8c:34:6c:f5:
21:9b:d0:44:b5:81:b3:89:b2:3e:72:7d:fd:6c:a4:
45:70:de:aa:0f:b8:ed:48:d5:01:e3:09:5e:48:37:
d6:f4:44:a2:ad:b3:a3:99:c8:15:95:5b:63:46:95:
80:ef:93:0e:32:3a:ff:97:8e:b0:2e:d8:7c:4a:0b:
fb:06:89:9a:2b:81:5d:8f:87:00:a1:71:dc:24:a9:
c8:4e:a6:44:00:54:41:76:5d:98:53:bc:54:7c:5d:
5a:95:ef:58:66:5d:88:73:db:83:65:d3:32:ce:16:
c4:10:39:09:58:5e:ac:9f:6c:15:1a:80:51:27:f3:
99:e3:f1:66:c5:b6:e0:28:c6:1f:13:21:80:c8:b4:
06:8f:f5:f2:a2:bd:89:26:2b:bb:a8:a4:8a:c0:76:
17:d2:39:b7:bc:fd:52:22:a1:d6:0a:6c:54:46:65:
70:6d:c8:e9:28:45:95:e8:8f:1f:1f:fe:f7:93:39:
6b:dd:c7:ac:5a:e2:62:bc:64:66:bb:08:02:cc:4a:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:72:02:0E:4B:B6:3D:D3:5A:82:43:66:D6:AB:6C:95:92:D4:51
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b8:28:b6:03:c2:bc:e7:b6:d9:43:fa:cf:8a:d0:3e:2a:52:
1f:50:d1:8c:35:9b:48:5e:de:24:3f:32:45:5a:23:e8:1c:2c:
53:25:7e:9d:5b:70:7c:7d:ae:32:df:1c:3e:36:1e:ed:3a:67:
a5:82:96:f6:7a:a4:fd:2a:5b:90:d2:c3:2f:ab:44:b0:a9:31:
f4:da:7b:c4:fe:85:2b:52:aa:b2:be:cc:4b:19:24:c2:f8:8e:
89:28:68:06:6f:ec:6f:1c:34:1c:3a:72:aa:14:e4:e5:d0:33:
ce:80:c3:ac:95:c0:3a:0f:f9:22:38:b0:fc:46:6c:5f:9a:f1:
7b:d5:b8:31:c5:19:10:50:28:8c:80:d8:55:9b:37:47:8a:11:
4f:f2:77:ff:7c:36:c7:72:68:cd:e7:84:53:e8:60:5f:d1:f8:
f1:22:40:ad:2e:06:58:12:2f:a4:b4:be:0c:05:0b:27:b7:00:
59:43:da:51:a9:7d:62:53:26:9c:df:4d:60:28:52:41:8b:0c:
8b:38:cb:c7:48:e8:7b:02:e7:72:7e:b7:18:bc:ab:d9:54:35:
3a:27:8e:42:86:d8:da:59:38:cc:b5:dd:90:0e:38:49:f8:53:
37:e5:63:37:fa:cc:9c:d4:ce:de:d8:56:d1:f7:70:d7:c3:30:
8f:87:74:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6OpPdWbKWmIkm7bWLbi4q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzBjZjA0YTE0ZjZmZjc4YjE4ZjBjMDA3NTc4ODIyMGFm
NzM5MWMwHhcNMjYwNjAzMTgwMDM2WhcNMjYwNjA0MTgwMDM2WjAzMTEwLwYDVQQD
Eyg2MjU4NzIwMjBlNGJiNjNkZDM1YTgyNDM2NmQ2YWI2Yzk1OTJkNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbXAGpNGALKldIz+6B+2oy3QdxBn
VuXplfvi0uEoUf4hSZJta4qZ1ws411sP+d9wPRAdGf3xf4w0bPUhm9BEtYGzibI+
cn39bKRFcN6qD7jtSNUB4wleSDfW9ESirbOjmcgVlVtjRpWA75MOMjr/l46wLth8
Sgv7BomaK4Fdj4cAoXHcJKnITqZEAFRBdl2YU7xUfF1ale9YZl2Ic9uDZdMyzhbE
EDkJWF6sn2wVGoBRJ/OZ4/FmxbbgKMYfEyGAyLQGj/Xyor2JJiu7qKSKwHYX0jm3
vP1SIqHWCmxURmVwbcjpKEWV6I8fH/73kzlr3cesWuJivGRmuwgCzEpkbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJYcgIOS7Y901qCQ2bWq2yVktRRMB8GA1UdIwQY
MBaAFJLAzwShT2/3ixjwwAdXiCIK9zkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUt
NGNmNWRlZGE1YzRjLzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUtNGNmNWRlZGE1YzRj
LzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrgotgPC
vOe22UP6z4rQPipSH1DRjDWbSF7eJD8yRVoj6BwsUyV+nVtwfH2uMt8cPjYe7Tpn
pYKW9nqk/SpbkNLDL6tEsKkx9Np7xP6FK1Kqsr7MSxkkwviOiShoBm/sbxw0HDpy
qhTk5dAzzoDDrJXAOg/5Ijiw/EZsX5rxe9W4McUZEFAojIDYVZs3R4oRT/J3/3w2
x3JozeeEU+hgX9H48SJArS4GWBIvpLS+DAULJ7cAWUPaUal9YlMmnN9NYChSQYsM
izjLx0joewLncn63GLyr2VQ1OieOQobY2lk4zLXdkA44SfhTN+VjN/rMnNTO3thW
0fdw18Mwj4d08Q==
-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:01 2026 by rpki-client