Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: /wvmNQi0zbWr6nOR8NpGHpDbQcaNE/1Lg39ejbKQmro=
Subject key identifier: 84:5A:1A:70:A9:16:33:72:B0:0F:19:55:B5:B0:38:A0:4E:36:89:A6
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019ED318D7722E92A5F8FE6F8977653A963E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0921
Signing time: Wed 17 Jun 2026 01:01:20 +0000
Manifest this update: Wed 17 Jun 2026 01:01:20 +0000
Manifest next update: Thu 18 Jun 2026 01:01:20 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: IRRs6eqnMOqbSJ7rhUYuJ6tbuTHpql7IIbjv9ZpDM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:d7:72:2e:92:a5:f8:fe:6f:89:77:65:3a:96:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Jun 17 01:01:20 2026 GMT
Not After : Jun 18 01:01:20 2026 GMT
Subject: CN=845a1a70a9163372b00f1955b5b038a04e3689a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:b5:94:e1:9a:b8:23:fa:58:22:58:27:82:
44:3f:1a:18:f7:52:71:23:83:1d:2c:65:8e:3e:df:
14:2a:ea:f7:e0:9d:45:3a:b5:6e:a1:48:ec:1b:d4:
da:3a:dd:3a:8a:74:61:a0:19:13:0b:a6:44:a6:7e:
13:39:e3:1d:67:33:91:f0:14:89:0a:05:aa:65:b2:
fb:b1:9c:7c:84:ad:a3:e6:cc:a3:cd:9f:2c:78:09:
c4:1c:b7:d3:2e:07:41:66:83:10:63:45:b5:66:5d:
43:ec:6b:96:b9:49:31:d2:56:ac:e3:08:33:df:cc:
35:92:b7:76:11:af:c8:d0:9e:80:15:ff:e6:dd:27:
ae:8e:4f:27:4b:74:3e:f7:1b:00:ad:16:6c:10:24:
55:94:a9:33:43:3b:fb:a4:89:03:84:e6:10:3e:38:
1c:12:6e:49:c2:b2:01:63:22:96:69:06:64:0b:08:
9a:f9:2c:6b:ca:b9:9b:9d:20:76:c4:aa:c3:ed:0c:
9b:61:26:5a:0b:b8:71:ff:09:91:72:10:eb:19:2c:
0a:f1:91:f7:1d:cd:6b:35:79:c1:49:6c:48:07:26:
a4:1e:73:b7:17:65:3e:8a:e9:71:29:ea:97:36:bc:
6e:d3:71:9e:0b:d6:a8:a9:2b:c9:cd:83:70:59:d1:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:1A:70:A9:16:33:72:B0:0F:19:55:B5:B0:38:A0:4E:36:89:A6
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3f:6c:8a:31:04:72:a7:e0:8c:d4:4c:4e:70:bf:79:72:65:
80:d8:ce:06:5e:75:89:f0:11:f5:6e:ae:67:92:6f:1d:b8:20:
16:23:a7:c8:66:57:5f:24:8c:2e:de:b8:00:5d:a7:81:7b:5b:
47:9e:53:13:16:f0:27:8f:d8:1a:c3:2d:30:84:e0:4a:44:5e:
50:89:39:80:ad:87:b9:0c:43:e9:7d:a8:e7:73:6a:6f:2c:91:
1f:a1:e6:b9:d9:23:2e:89:bd:96:ce:84:2e:8a:d9:47:53:33:
cb:60:ea:e4:6f:11:82:27:97:ed:ab:6b:42:7d:d1:d9:87:d3:
9a:74:46:01:d1:db:c1:3b:a3:9f:e4:97:cb:ea:94:cc:12:d9:
18:54:47:bc:9f:b2:c3:97:4c:e8:75:b0:51:f1:9e:3e:23:d0:
28:1d:5d:6c:07:47:ab:aa:67:85:21:04:2d:d2:fd:b2:fa:31:
aa:90:89:a3:87:b3:11:aa:34:01:1a:52:22:e7:a3:bf:a8:63:
5f:99:5e:5c:33:f8:f8:a4:0b:0d:41:e4:c3:dd:23:4d:6a:0c:
de:5c:5c:56:0c:56:54:12:68:fb:6a:dc:6f:f4:ac:63:c1:ff:
e3:1a:11:a9:23:d1:89:ce:f7:2d:b2:fe:38:22:b0:09:e9:07:
86:e0:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:18 2026 by rpki-client