Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: 7gCMMJ75vyzS7HakSYv69ZHszVEuA1rDOEPhTMyA/Fg=
Subject key identifier: 6B:F4:AA:0A:E6:BA:57:2F:6C:3A:3B:9D:E9:2C:05:A0:A5:86:9F:EF
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 01A15B1E9D5848348F33344D63C23B433C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: 02CB
Signing time: Tue 20 Oct 2026 21:01:35 +0000
Manifest this update: Tue 20 Oct 2026 21:01:35 +0000
Manifest next update: Wed 21 Oct 2026 21:01:35 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: GYxNVe0TE01I3B3C0Ya1m/BY9Z6/xDW7+SygFVudDF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:9d:58:48:34:8f:33:34:4d:63:c2:3b:43:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Oct 20 21:01:35 2026 GMT
Not After : Oct 21 21:01:35 2026 GMT
Subject: CN=6bf4aa0ae6ba572f6c3a3b9de92c05a0a5869fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:8b:c1:f4:4b:e3:c5:45:1c:98:bb:ff:a4:
74:d5:e1:42:03:ea:5d:54:f3:1e:f4:17:70:81:e6:
2f:d2:53:d3:61:8d:3c:7f:62:ff:ba:10:87:16:94:
bb:a5:dd:59:1a:d9:ad:37:63:0e:af:86:a9:87:92:
86:e8:10:6d:72:12:04:51:21:5d:90:3b:6c:b9:d4:
2d:a1:75:d5:51:f8:dc:a4:53:97:13:da:15:58:52:
a8:76:ff:e3:8f:0f:6d:75:b7:63:76:91:ac:ba:a4:
39:61:3f:38:65:03:20:23:8b:09:c2:8b:b2:21:53:
b2:9e:54:b2:5b:5d:b6:af:3c:6d:bb:12:e9:9c:31:
2f:73:03:6a:ad:f4:68:40:b5:51:e5:b7:fb:b6:48:
4d:72:03:ec:ce:eb:3b:79:6c:21:19:48:28:b9:d8:
da:ee:27:46:aa:7e:ea:03:7f:98:74:0c:d9:24:d7:
e2:26:c1:26:6b:fa:1a:2b:63:79:0f:15:1c:eb:6d:
0e:ab:f4:b8:fe:4d:08:f1:ef:d3:8c:a5:15:7d:bf:
36:ae:8a:77:0e:ed:4e:0f:af:a9:68:25:6a:15:a8:
30:5c:01:a9:06:06:94:30:4a:a1:9c:66:c8:c5:42:
c1:5c:71:3c:36:38:ae:3d:ec:cb:bd:56:4d:ed:95:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:AA:0A:E6:BA:57:2F:6C:3A:3B:9D:E9:2C:05:A0:A5:86:9F:EF
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:52:0e:4e:87:e6:04:c2:85:d2:26:88:53:5d:8d:d9:dc:
9c:43:a7:27:ce:d2:5a:f5:21:4a:52:67:c5:7c:78:cb:0c:d8:
c9:eb:ff:28:bf:8e:03:e1:ad:71:aa:d9:c3:ed:65:29:14:eb:
81:41:25:5b:51:2e:c6:3e:b9:59:79:7f:b2:5c:e7:56:01:ed:
bb:f5:2f:1f:d0:9a:1d:eb:17:3c:63:45:50:83:5b:b6:cf:15:
53:6a:8a:89:0a:83:db:fa:fe:1f:96:c3:0b:57:54:e7:1b:18:
0e:59:ae:11:8f:12:6a:fb:2f:80:49:e6:ee:a0:c2:7b:a3:9f:
02:63:f0:a6:6d:d3:56:bf:db:5f:a6:42:e0:e2:e4:ec:27:b6:
46:e1:25:a2:38:e2:83:e1:f7:f8:93:d3:16:d6:73:46:09:7f:
55:7b:96:32:6a:be:67:0f:21:0e:1e:17:b4:b0:63:12:90:06:
8f:b9:86:f6:a5:54:26:7a:36:f7:bf:2f:4f:2f:af:ec:b0:32:
2f:2b:e8:ff:40:a4:87:a3:76:e7:d2:55:2c:ac:a5:98:85:c4:
bf:2d:3a:8b:75:ea:5d:ac:ca:a7:57:f3:3a:cd:14:c9:1a:ac:
e8:33:41:d6:ad:9d:96:8a:2f:b1:c7:67:d5:38:59:a7:0c:ff:
9d:25:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:19:14 2026 by rpki-client