Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: 74ApMUEzPIx2hcrUAstTT76YOJXsJrX/nWKTwIwKti4=
Subject key identifier: 11:77:8F:06:E2:10:C9:95:98:93:BB:67:C7:3E:76:5C:FB:CE:5D:B5
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 019D38D2E31C75AB479ACA795CE993CF6D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: 0lARuBO1WZyDYGe6BNgwoL+fExhBp+XbIQiFghzwEk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e3:1c:75:ab:47:9a:ca:79:5c:e9:93:cf:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=11778f06e210c9959893bb67c73e765cfbce5db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:35:a5:84:39:fe:bb:b9:0d:fb:27:4b:dd:
d0:93:57:3c:66:4b:a5:a8:94:c5:15:cf:2a:a4:32:
f1:27:47:27:73:cc:5c:d2:f8:8e:80:22:82:19:6f:
37:5a:76:f0:83:4e:2e:99:b3:6b:18:f7:bf:a4:ba:
af:72:90:3f:eb:00:27:bb:21:41:7b:68:8f:3c:3d:
62:fa:7c:73:81:97:f9:82:e8:c9:c5:2e:09:78:7b:
23:5c:1e:b0:57:07:b8:3d:c7:45:e9:f0:cb:3c:a6:
e7:e1:4e:b3:6d:7e:86:ba:ca:c2:02:34:c3:ec:4a:
8d:7f:e9:0e:e7:0e:a9:59:06:6d:3b:1d:ea:29:b7:
87:c3:ee:b2:b2:2d:9c:d8:e4:0a:44:84:fa:b4:46:
1b:95:cd:30:71:c7:15:6c:09:fd:31:ed:27:11:ff:
f2:33:7c:bc:cf:38:06:c3:b8:0c:5e:b4:67:02:52:
fc:b2:56:34:dc:df:22:24:bc:87:52:69:27:88:e0:
ee:7c:7d:44:5a:db:0c:be:30:13:3f:4a:f4:e5:7f:
18:98:0f:b3:34:0b:29:84:96:ae:38:be:46:0e:43:
fd:b1:0d:49:91:ad:3a:bd:14:07:9a:e1:b0:3b:99:
9e:02:0b:0e:68:e4:2f:c3:57:fb:ef:1e:ad:f2:a9:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:8F:06:E2:10:C9:95:98:93:BB:67:C7:3E:76:5C:FB:CE:5D:B5
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:64:75:a8:17:c6:0f:2d:52:b7:82:c1:75:b7:33:c2:dd:6e:
d8:2f:ca:6e:f4:c5:a2:9c:44:86:0e:c2:bf:d4:0b:23:69:fb:
23:c8:71:0c:d9:7b:47:9d:f5:9b:42:5f:cc:1d:f1:9f:07:4a:
2d:fe:a8:af:2a:d3:1a:6a:42:fe:df:2a:51:45:52:98:f6:4c:
27:1d:4e:6d:5f:c4:c1:ed:b5:1e:dd:9b:c8:3f:3a:29:31:94:
bb:59:9a:70:6f:4f:b7:11:9d:1f:db:cf:7e:65:87:1f:e9:9d:
cb:c4:7f:b4:33:01:64:35:e3:b2:cb:bb:a9:73:53:33:aa:52:
9e:e4:b5:2e:80:5e:35:65:59:26:5d:f6:c1:5d:90:69:9c:5b:
5b:77:f8:d1:bb:f7:d1:60:a1:26:3b:c1:45:a9:22:5b:7d:2a:
e3:90:76:65:6b:c9:92:cf:27:c8:91:64:52:dc:e2:69:48:b0:
ea:08:3e:b8:c3:fd:1f:8a:1c:87:de:4d:88:03:8c:e9:25:ee:
92:bd:ba:69:00:9e:0e:8d:23:60:29:e8:8e:ff:71:a4:dc:34:
60:fb:3e:b4:d1:74:09:f4:5e:96:48:6d:c1:c5:1d:f6:82:76:
8f:d4:b6:34:b9:af:22:62:ac:ab:5a:7d:af:5a:10:65:6b:7f:
9a:66:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:57 2026 by rpki-client