Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: NuuD5Uii8Z9bYYhTbxcHKyhTV3rpk1KLy/ycBfqz4t4=
Subject key identifier: AA:64:66:27:09:88:61:82:2C:FF:25:D9:A2:3E:76:BB:95:88:41:F8
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01A0F8D7C786BC05C48B80429D10CADB0A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1A83
Signing time: Thu 01 Oct 2026 19:01:25 +0000
Manifest this update: Thu 01 Oct 2026 19:01:25 +0000
Manifest next update: Fri 02 Oct 2026 19:01:25 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: Jn4js1qAy61JgmYCnFKNf4eLewTCGrBEzBGM3tEmMhU=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:d7:c7:86:bc:05:c4:8b:80:42:9d:10:ca:db:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Oct 1 19:01:25 2026 GMT
Not After : Oct 2 19:01:25 2026 GMT
Subject: CN=aa646627098861822cff25d9a23e76bb958841f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:2f:03:f1:40:ab:40:83:ac:37:85:ac:68:
1a:2f:3f:9a:75:85:5f:b9:9c:04:06:8a:2e:1b:ab:
8c:50:03:67:f1:1c:59:05:c6:83:e0:40:76:4b:a9:
e0:9c:87:a9:79:bb:58:5a:f6:ce:f7:ff:71:41:5d:
29:06:2f:8b:2c:0d:c1:47:64:3c:ee:b5:d8:f6:ee:
29:a4:b7:2b:b8:d7:53:d7:1c:c9:13:3f:f8:1d:f5:
ff:cc:ba:43:03:36:da:15:5e:22:7a:79:0f:d9:27:
07:85:e8:de:76:2a:d3:5c:17:51:22:6a:42:7a:83:
6a:81:15:17:7e:88:54:49:0e:37:6e:28:b7:97:53:
bc:17:3b:6c:ac:be:55:67:75:61:46:f7:cc:dc:03:
dd:c4:2b:e6:77:cd:6f:28:1f:8f:3b:44:05:84:0c:
11:fd:0e:95:2e:1b:78:3e:47:ea:1c:5c:05:31:04:
4b:76:29:30:d8:fb:11:80:57:7e:75:30:bc:4e:c3:
33:e5:86:73:27:33:4d:41:8b:12:51:73:ba:bb:db:
a7:be:8c:0f:c6:65:f4:9f:8d:62:21:df:88:45:d9:
b9:58:bb:9c:d0:e9:32:5b:5a:c5:bd:9a:d0:0c:95:
3d:47:98:54:f1:17:5f:79:f6:98:e9:e2:1b:3e:7f:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:66:27:09:88:61:82:2C:FF:25:D9:A2:3E:76:BB:95:88:41:F8
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:40:26:31:27:ee:4c:d1:d0:a8:bf:1b:16:70:04:07:54:76:
89:47:ca:e6:02:52:43:49:51:2f:55:a7:1c:08:5f:43:96:7c:
30:3d:8a:9a:2a:c3:2f:08:8c:f4:eb:6a:82:2c:d6:61:24:af:
75:3f:12:22:ad:e9:8f:a2:16:c2:47:7b:f9:ee:5e:30:9b:7b:
7d:bd:8b:d6:98:af:96:15:5d:97:ab:95:c4:cd:fa:3b:67:20:
68:09:ff:6c:de:d9:bf:c2:70:9d:c0:ff:71:27:e8:34:47:3f:
a8:76:13:2b:88:81:47:05:f8:4a:f1:4d:ae:9f:23:17:08:18:
95:84:c7:93:03:90:a7:3b:e5:fe:51:24:2f:8c:44:13:2e:93:
0b:a0:6d:2b:5a:86:95:95:de:f5:98:1f:25:75:60:a2:e7:24:
04:53:bc:6b:1b:01:e5:f1:3c:3e:a4:81:d1:12:45:f9:7f:cd:
a0:ef:6e:76:c9:28:ed:fa:8b:a9:fd:2e:22:ad:93:67:6a:00:
c3:1b:3d:2b:a1:ed:cb:4a:c4:19:10:37:0e:6d:06:8f:93:1c:
1c:f2:b2:a5:12:f5:aa:9a:73:13:b5:73:b3:a4:9a:e6:7f:c4:
a8:29:65:13:3c:89:ee:e2:c9:9f:ea:db:e1:57:92:f8:20:c6:
be:af:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 05:47:33 2026 by rpki-client