Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: Pu6voQSG6kQMXJDf6gI5vMopjzLm7iOevfQvskBQmsg=
Subject key identifier: B1:82:1E:1A:AC:11:42:4B:8C:25:10:D4:DC:A6:0B:95:FB:6B:06:82
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019EC111AB72AA285E83027B473C6F4568F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 13:00:21 +0000
Manifest this update: Sat 13 Jun 2026 13:00:21 +0000
Manifest next update: Sun 14 Jun 2026 13:00:21 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: l5Mvi0rui2zNV/Msg67HAnlWhN9rHWo4ipy2kdOGcbI=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:ab:72:aa:28:5e:83:02:7b:47:3c:6f:45:68:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jun 13 13:00:21 2026 GMT
Not After : Jun 14 13:00:21 2026 GMT
Subject: CN=b1821e1aac11424b8c2510d4dca60b95fb6b0682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:5b:32:a9:2a:07:e1:69:1d:1b:3c:4b:a4:
2b:d5:22:a2:92:f3:15:84:b6:bc:08:66:d2:8e:77:
80:8c:9f:01:91:08:38:12:53:d7:08:3c:bd:0d:4f:
9e:a1:95:f5:82:b9:2b:58:d5:5c:62:81:cb:48:4e:
a9:f3:e0:24:5e:38:c2:a9:2d:81:52:85:54:c2:7f:
5a:15:cb:e1:5d:9b:c6:78:ee:d6:c2:4f:5d:05:a3:
a7:ff:82:aa:6b:b4:9c:15:b5:dc:58:91:70:14:12:
df:23:ab:4d:6b:bb:2f:7e:e6:48:56:dd:b4:fb:a2:
e9:c7:03:87:f2:51:89:af:17:e9:a4:b7:4d:29:6b:
19:d2:64:73:72:b5:60:8e:ba:6a:82:66:e0:be:82:
66:d1:20:5c:0a:93:ba:65:bc:13:89:25:a3:29:fb:
7a:43:97:c8:08:c5:df:c3:58:58:69:23:38:f6:39:
11:f7:97:55:57:09:76:3e:d8:19:d6:eb:79:6f:9f:
2a:4a:31:e2:b1:72:2a:f7:a1:ac:7a:d2:d2:85:c1:
35:f2:cb:c9:fc:5c:8d:0f:0a:68:64:69:8e:3f:1d:
ca:e8:09:b3:3f:2f:69:75:7b:b0:5f:ed:4f:e8:af:
a9:77:71:0d:52:05:8a:78:fd:bf:75:e8:41:1e:36:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:1E:1A:AC:11:42:4B:8C:25:10:D4:DC:A6:0B:95:FB:6B:06:82
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:41:41:88:83:cc:6f:86:e9:f1:6f:ea:73:b2:0d:4a:71:28:
52:ba:0a:7d:49:f8:5e:09:45:14:fd:ea:f3:a7:0f:9d:04:c0:
5c:39:6d:2a:60:e8:2e:52:dd:9f:4b:7f:05:9c:aa:6a:d0:5c:
e1:c6:d0:9f:34:72:d4:69:a5:0f:cc:e5:02:d9:d1:d9:a4:5a:
d5:4c:c7:66:a9:bf:80:f6:e8:c2:14:06:05:a3:47:57:89:fb:
9b:fd:8f:cc:9b:83:dc:51:00:16:5e:34:3c:e4:e2:43:24:53:
23:00:fd:7d:66:7a:ce:37:85:68:43:92:fc:c8:4e:af:0e:65:
64:c4:63:28:d1:5b:0a:cb:d6:bb:bf:e3:21:ca:06:44:f3:51:
4b:52:20:3c:a0:46:82:75:61:8c:e5:ba:b3:50:6c:ca:e2:36:
c7:04:ef:12:ca:42:00:52:68:6c:2a:da:1d:ea:2e:89:96:70:
a9:9f:fd:e7:af:a6:81:fc:c5:06:c7:24:85:84:06:fa:45:76:
b5:67:7c:9a:d4:d3:aa:5e:8e:b2:c0:e0:f6:23:80:14:50:e0:
6c:f9:f0:a9:fd:16:87:64:c4:d9:07:80:38:cd:4a:e7:c5:8d:
fa:9b:fa:ed:e3:e1:24:0b:a9:79:e7:ad:ae:5e:33:7a:8c:48:
38:3a:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:12 2026 by rpki-client