Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: SZibV2S4xDaMzHBvy6iV1nUKsdRWGP1ZA2LKp8fZyww=
Subject key identifier: 6E:73:5E:4B:A3:22:6A:F1:CE:71:30:DA:EC:C1:F5:5B:78:E3:2E:32
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 01A129C43EC976FC4FDD6AB794F32763B8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0A57
Signing time: Sun 11 Oct 2026 07:01:29 +0000
Manifest this update: Sun 11 Oct 2026 07:01:29 +0000
Manifest next update: Mon 12 Oct 2026 07:01:29 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: IhEzGuVtUIjc5HqQ0izAOry5TqlPhJwJnU8SOW+hjuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:3e:c9:76:fc:4f:dd:6a:b7:94:f3:27:63:b8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Oct 11 07:01:29 2026 GMT
Not After : Oct 12 07:01:29 2026 GMT
Subject: CN=6e735e4ba3226af1ce7130daecc1f55b78e32e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e2:d9:0f:eb:be:08:ba:da:f7:c6:ae:19:9f:
55:78:0a:1e:32:56:85:04:9b:5b:66:a9:f8:7f:78:
4f:90:fe:52:c3:a1:5c:f4:26:bc:e9:d7:ac:50:8f:
68:42:73:3c:41:6c:8b:f6:63:8a:70:03:f0:89:29:
0e:9c:59:ce:9e:3b:4c:7d:87:d5:a4:c7:8a:a9:7f:
ed:c9:60:3a:60:9a:e4:20:e3:08:ce:4e:07:79:1a:
8b:a8:be:3d:e0:a0:9f:1d:86:24:be:bb:98:7b:1e:
8b:5c:d4:66:51:ee:11:17:dc:15:a8:9a:3d:fe:14:
fe:57:52:7a:e4:ab:a9:fb:93:64:ba:22:cb:26:c5:
b1:de:87:e4:3e:a7:6d:f5:f2:3e:1a:0c:34:e9:f7:
66:11:cb:95:3a:07:0a:70:7a:a2:ee:7d:b4:f2:52:
f3:02:c2:60:2c:0b:bc:07:ab:4e:de:26:b9:33:3c:
74:87:ca:52:43:6f:46:65:12:9b:3d:ef:4c:78:5a:
bf:fb:fd:cf:11:d5:26:ce:65:a8:a0:4e:1d:f7:77:
ec:3c:1a:4d:3a:9c:86:a0:9e:62:04:d2:29:cc:cd:
93:75:e4:24:d0:6e:d3:6f:cc:ab:9e:45:48:3b:32:
71:93:c2:1e:48:c7:05:8d:37:06:6b:c0:48:d3:95:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:5E:4B:A3:22:6A:F1:CE:71:30:DA:EC:C1:F5:5B:78:E3:2E:32
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6e:08:8e:56:23:07:9a:a0:7a:01:07:33:c3:ba:1b:b4:de:
f1:64:a6:f8:4f:f4:ec:34:31:45:1e:6d:ab:9a:7a:7f:92:66:
51:21:48:54:b0:19:a8:77:45:97:bb:4a:89:ec:82:fa:75:59:
30:1d:c8:8d:eb:71:ff:35:33:cf:9f:58:bf:2e:7e:0f:e3:f0:
9c:91:ad:ea:99:d7:78:67:1c:0c:01:a3:37:6a:ac:f8:fc:9d:
9c:77:c8:20:54:54:27:3e:89:a0:bd:71:ce:b5:e4:8d:25:76:
17:d6:f4:b8:31:40:64:ce:4a:2a:ca:2d:b8:ff:5c:4b:29:d5:
62:10:b8:47:9a:a3:15:10:8d:e9:7a:e4:21:d6:2a:47:1e:55:
10:3b:1d:fc:0d:c2:7f:58:f0:43:7b:93:d1:5d:72:b9:3e:11:
20:b7:3e:76:00:5f:e7:91:f9:4b:47:55:d3:14:83:b9:66:1d:
56:6f:3a:56:0b:db:0e:90:cb:2e:7c:79:c0:cb:09:c8:77:c9:
b7:31:a1:aa:61:92:ce:a0:be:6f:c1:7e:50:51:55:72:0a:3d:
50:32:8d:37:2c:97:0f:00:18:48:11:9c:c1:96:23:01:cf:32:
88:93:75:3e:ad:78:1a:4c:ca:27:9a:dd:c6:5b:41:2b:ce:18:
53:8e:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:25:39 2026 by rpki-client