Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: qqALGZ3/snkGzIljq2rUJyfWlZZ6lKsWdv7B14fbpiQ=
Subject key identifier: 4B:EA:E8:E0:EA:D9:5D:C7:5A:69:00:F7:0D:6C:9A:53:FC:1D:B6:77
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019D9C2C953598CF8277840A272F245F2580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0880
Signing time: Fri 17 Apr 2026 16:01:00 +0000
Manifest this update: Fri 17 Apr 2026 16:01:00 +0000
Manifest next update: Sat 18 Apr 2026 16:01:00 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: idaHEYZMejgC6Sxq506zyx3q4HZ/9+iJPoIUbULWTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:95:35:98:cf:82:77:84:0a:27:2f:24:5f:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Apr 17 16:01:00 2026 GMT
Not After : Apr 18 16:01:00 2026 GMT
Subject: CN=4beae8e0ead95dc75a6900f70d6c9a53fc1db677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:bc:af:b7:91:30:ae:bb:d7:3f:12:86:7e:
e6:2c:9b:13:65:f4:74:d6:c9:61:81:fd:c9:d3:1c:
47:58:96:fb:50:38:1c:9a:98:23:d5:2f:01:58:16:
ba:04:e1:54:00:f3:d0:69:bb:33:ae:cc:69:aa:54:
73:7e:11:5b:4a:fd:63:a1:72:53:98:c5:fa:c4:70:
1f:cf:4b:15:e7:95:de:5e:ca:6f:62:d3:19:13:62:
c0:08:9b:e1:b8:6c:a9:e5:fc:33:21:ff:b9:e5:fd:
6a:f4:1e:c9:8b:91:dc:30:29:68:00:2c:03:ad:a8:
6d:20:fe:d1:ba:9f:0c:ba:3e:9a:7e:2c:2d:ae:86:
18:be:d9:ed:1d:dd:d2:d5:7a:d0:b0:b2:48:80:26:
58:b4:b9:c0:b3:f2:c4:d2:a9:46:7a:5d:b5:7e:82:
dc:cb:ef:05:83:cf:3a:4d:4d:6f:8a:f6:3d:a7:44:
a0:fe:74:a4:db:b3:30:89:c5:9d:36:83:37:ae:31:
73:db:bc:ff:86:56:f4:46:9b:dc:3c:65:6a:1b:4f:
a1:83:a8:ff:36:11:fa:42:3b:b3:53:7e:dc:5d:18:
17:85:da:34:ef:ea:e7:11:1e:f5:8c:b8:4e:54:f4:
f5:51:cc:4d:a7:f1:f8:68:31:d7:2f:d8:06:a3:8f:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EA:E8:E0:EA:D9:5D:C7:5A:69:00:F7:0D:6C:9A:53:FC:1D:B6:77
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:48:39:90:0b:7c:01:a9:3f:ab:ea:d5:f9:5d:d8:8a:2a:
2e:fa:f7:52:f5:6e:f5:0f:83:7f:3f:16:a1:5f:d1:ec:b6:6e:
71:52:b9:47:f5:05:0e:a3:a0:03:11:32:02:1a:7d:64:ce:8e:
58:a0:3a:f3:6c:99:c0:a8:00:29:68:c9:86:ff:69:05:e1:a6:
bc:9f:93:2d:2b:9c:1f:99:2d:67:25:c6:d5:1f:60:35:9b:06:
dd:65:5b:a1:de:2c:0d:83:13:00:fe:1d:19:ee:47:0d:db:33:
1f:bb:c1:c7:4b:e0:a4:9f:69:7d:88:48:31:21:8c:a3:f6:e4:
fa:15:c1:ea:e0:8d:fd:1f:02:42:92:94:f8:de:9c:18:d7:30:
82:92:1d:45:c5:59:c8:ce:3b:b9:31:84:6f:be:ba:fb:a8:0f:
81:a4:44:c6:20:65:93:fa:d7:5d:a2:56:71:ae:47:e3:fd:35:
17:57:2c:d6:f0:8d:c1:40:3d:f4:93:7c:b7:b8:34:05:ae:c1:
2f:64:7a:9b:23:c6:b5:38:c7:80:5c:69:13:40:8d:21:af:47:
5c:ab:9e:7f:3a:f8:90:b3:58:06:61:50:bf:c1:85:02:f4:be:
29:ae:53:6d:05:c6:61:12:3c:a1:0f:6d:5d:30:08:bf:e0:47:
fe:68:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:55 2026 by rpki-client