Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: /YZ7nK9zk2HAkKKAW0ON6z/MbeygW/0l8Wu4HjnzKTU=
Subject key identifier: F5:A3:64:41:55:9D:61:73:37:87:D9:7C:BB:AA:C8:87:24:F0:4D:7B
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019CAC1024919F734A021ABEA258E5F469BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:01:04 +0000
Manifest this update: Mon 02 Mar 2026 01:01:04 +0000
Manifest next update: Tue 03 Mar 2026 01:01:04 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: 9Mn5Kr40mne1vgFPjUhTWan84Qn/gbptqJ/f961Z+wE=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:24:91:9f:73:4a:02:1a:be:a2:58:e5:f4:69:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Mar 2 01:01:04 2026 GMT
Not After : Mar 3 01:01:04 2026 GMT
Subject: CN=f5a36441559d61733787d97cbbaac88724f04d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:c5:77:ab:49:9c:9a:79:a7:5a:bf:9b:d8:
61:39:65:24:17:e5:5a:b8:0f:be:2f:c9:8d:7b:8e:
65:c6:61:35:6e:e6:01:d3:76:6a:f1:4b:e4:ad:eb:
8c:ac:fc:72:b0:87:f8:c6:d8:ba:ab:b1:ae:4d:5a:
cf:01:00:9d:de:74:8b:44:50:ef:86:d2:91:cc:27:
b6:f6:86:72:2f:ba:80:39:00:e9:ef:07:04:52:76:
7e:98:e3:c1:94:ff:1e:f2:68:8a:be:c5:49:a7:19:
05:9e:a3:cf:2f:8d:5f:c0:0e:3f:4e:f8:8e:9a:b7:
2a:84:a4:3f:35:5a:9a:ce:4e:d1:13:b7:1b:15:53:
3b:9e:80:44:cf:44:a5:a3:16:85:07:d9:44:63:69:
bb:c3:a3:3b:9d:d2:fe:1f:91:56:bc:86:d8:3b:24:
67:30:61:fb:e0:49:b0:5d:22:fe:48:96:22:ff:21:
26:69:ab:01:9e:31:a5:d2:1b:b9:02:24:56:c9:24:
1e:52:41:37:2a:bc:05:20:cf:6f:04:97:af:71:80:
5c:9e:b3:a8:1d:b3:47:2c:52:9b:66:51:8f:d0:5e:
a8:a7:d7:1a:57:0c:9f:c5:96:2b:0c:a2:13:b5:88:
d9:8c:0a:83:e6:44:11:09:38:ac:09:cf:50:4e:ef:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:64:41:55:9D:61:73:37:87:D9:7C:BB:AA:C8:87:24:F0:4D:7B
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:93:8b:98:a4:32:35:00:ce:52:d2:09:90:bf:3d:1a:e8:1a:
25:5c:d5:e3:77:5d:83:2a:ef:8f:34:f1:0a:ac:a3:80:b8:7c:
82:e3:af:fd:ff:4b:e2:bb:cf:00:27:ad:eb:41:8d:da:36:dd:
3f:13:1c:11:e7:78:f9:9f:14:6b:6e:18:c5:93:ed:3a:ab:3b:
b9:62:dd:7c:af:57:46:9f:51:ef:96:d0:c8:a7:5e:9e:c1:d8:
70:ea:d7:c6:44:f5:e0:b9:87:24:ca:84:6b:e2:68:40:dc:49:
d5:c3:9d:c3:5d:69:06:b8:79:49:98:2d:ae:11:09:d0:5b:87:
42:ca:d2:bd:8f:26:a7:02:6b:91:2c:52:8d:94:33:1c:26:0d:
91:6d:18:6f:45:d1:52:f5:3e:bf:ea:f6:cc:35:74:a8:b2:8b:
b3:7c:8f:f9:99:80:a2:fc:70:ff:cd:5b:1d:0d:60:5a:d0:07:
32:f3:3a:fd:7b:b5:d0:cd:63:dc:51:93:79:4a:82:cc:a1:be:
9b:de:72:09:62:aa:55:0f:6f:fd:2a:e7:9b:72:6d:9f:9b:42:
4f:ec:6f:09:d9:e6:9b:e8:4a:c0:9c:a1:18:f6:1f:57:da:31:
0d:0c:87:2d:c8:22:e2:72:48:f9:63:cc:36:19:cb:f9:a2:09:
43:e2:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:23 2026 by rpki-client