Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: FfTnLpQel3NhDcAZqEH7NRiHxygUlsLopGT+RLzXrsE=
Subject key identifier: 67:19:A2:88:91:E9:64:A4:44:9F:0A:21:4A:42:FC:5D:D8:DD:15:45
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019CACB47130F8CB0BE0D0BDEAAA1A8CC8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0804
Signing time: Mon 02 Mar 2026 04:00:32 +0000
Manifest this update: Mon 02 Mar 2026 04:00:32 +0000
Manifest next update: Tue 03 Mar 2026 04:00:32 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: GNOsxZbLMlH0AX4aU0q+pIN5ou/D/YuLF78rt5txwE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:71:30:f8:cb:0b:e0:d0:bd:ea:aa:1a:8c:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Mar 2 04:00:32 2026 GMT
Not After : Mar 3 04:00:32 2026 GMT
Subject: CN=6719a28891e964a4449f0a214a42fc5dd8dd1545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:49:64:4d:2b:8e:1e:06:59:fc:d8:8e:84:
d8:2f:d8:a1:30:7f:23:fb:11:68:18:cc:32:84:43:
65:11:e1:11:83:4b:bc:1f:ef:74:f0:64:54:f5:9c:
0d:76:5d:f0:d8:09:e5:35:7b:a3:c4:ab:9d:3d:a9:
d4:08:6a:aa:98:a4:08:aa:89:7c:d4:10:2b:ea:e4:
05:e5:f4:21:a3:35:24:bc:13:b8:2f:73:83:2a:7f:
b0:ef:ef:36:1b:30:51:ee:aa:18:83:32:3b:2b:61:
04:82:1d:1b:19:37:32:b3:06:5f:41:a6:3a:c8:ab:
ea:4a:4b:2c:a3:63:0d:e4:e4:cd:cf:96:14:9e:7a:
b8:95:1e:53:48:cc:e0:dd:be:67:e1:6d:ba:ec:45:
35:64:eb:a5:75:a6:c8:de:28:49:1a:fe:4c:43:cd:
67:05:37:85:a6:c2:0c:d9:98:6e:a9:17:13:86:0a:
2c:8f:f8:e5:d9:f5:42:16:02:45:65:58:8d:9f:0a:
9b:f8:89:3a:d5:8c:db:1b:ba:4f:13:06:e4:b6:49:
c9:06:dd:3f:06:1f:92:22:4f:47:5f:e3:c7:e5:bb:
cc:77:ba:08:67:d2:8d:3b:2c:27:7a:2f:f2:7d:50:
0b:e5:52:9d:a3:28:9e:b4:64:fe:2c:54:df:68:58:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:A2:88:91:E9:64:A4:44:9F:0A:21:4A:42:FC:5D:D8:DD:15:45
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d5:dd:74:0b:9f:b4:94:27:7c:20:75:41:7a:db:ff:01:46:
19:5b:ee:52:a9:74:1e:16:b5:0b:de:a4:68:c0:3b:71:54:80:
14:97:d1:22:0e:28:2f:de:5c:d0:b8:c4:e6:c0:ad:4e:20:8c:
55:63:be:70:e5:c4:87:f7:a3:2d:c1:40:c0:ba:20:b3:3d:16:
a7:2b:db:0d:f3:9f:ef:4b:0b:c0:fc:e2:79:26:7d:9d:7f:52:
c0:65:b6:0a:ba:12:e5:e7:ca:e6:a5:fd:e2:ff:35:a4:14:22:
4c:0e:e6:0a:22:b4:39:9e:55:3e:40:34:49:f5:ce:cc:e2:a1:
b0:13:b8:b1:57:0d:a0:71:b8:51:f9:73:7e:6e:13:05:6c:c5:
12:50:58:92:78:bf:b8:49:49:67:86:03:a3:40:73:1e:af:49:
f6:1c:ae:6f:ac:62:f4:fb:1b:05:4d:71:2a:5f:90:91:1e:68:
d4:fb:01:6f:50:62:a7:21:25:62:47:5c:80:d6:16:a2:98:0b:
b4:22:08:87:74:5d:50:1a:cd:9b:bf:6c:cf:bb:1f:97:c8:84:
ce:4d:83:65:4f:b9:75:9f:7f:e4:a8:c8:9f:67:fa:fc:62:e4:
52:03:5d:7f:6a:ec:aa:f6:aa:d6:44:7b:eb:36:36:fd:cb:03:
80:03:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:43 2026 by rpki-client