Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: ah6yVjBTWsOEiERTAZ46hAPKbCOVv46/rahhUdiI9Gw=
Subject key identifier: 34:67:80:B8:0E:9E:79:A9:AE:03:FF:77:A2:53:46:EF:42:77:36:BF
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019FACACCC601D2FD463AC2ECB20B290B713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 07:00:33 +0000
Manifest this update: Wed 29 Jul 2026 07:00:33 +0000
Manifest next update: Thu 30 Jul 2026 07:00:33 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: i43ZsVg+B+fG/tBLkYtyFNRZw2QiP41VtxpM4A4M+9E=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:cc:60:1d:2f:d4:63:ac:2e:cb:20:b2:90:b7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jul 29 07:00:33 2026 GMT
Not After : Jul 30 07:00:33 2026 GMT
Subject: CN=346780b80e9e79a9ae03ff77a25346ef427736bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:bf:2f:ee:2e:c9:ee:9f:59:4f:38:e4:6c:
0e:9b:54:21:53:a9:2d:84:ea:16:0b:b0:cd:e3:39:
4f:25:ee:09:47:2e:f2:f7:4e:cd:0e:d4:98:a9:2a:
12:53:ce:3e:a5:78:19:b3:6d:9f:26:8c:a9:43:42:
48:b5:be:71:90:5e:40:c5:04:03:f2:a2:b2:db:0f:
ab:b5:b7:23:02:0a:36:d6:70:af:2b:d4:43:8e:17:
65:7f:00:23:43:6c:cc:c1:34:df:67:a4:67:f3:dc:
11:36:26:f4:65:25:67:82:d6:c8:32:53:fb:d2:8c:
68:c9:d5:53:36:1a:f4:d6:90:7b:5d:57:cc:73:70:
95:88:78:85:39:64:df:2b:96:79:52:8e:67:5b:c5:
11:68:8c:0a:8b:cf:d3:6c:cd:fc:3f:ed:b8:4f:2a:
71:fd:c2:fe:16:21:5c:e7:7e:36:f7:ce:1a:87:3f:
a4:86:51:11:6c:d6:53:1b:14:66:53:07:9b:97:59:
08:57:f4:34:05:02:4f:a0:b3:f4:a6:c8:00:39:18:
00:c1:5a:53:fe:68:b9:0d:e3:a5:d7:08:6a:0e:af:
33:5d:1c:16:98:1b:c0:6d:b2:dd:0e:ad:62:f8:37:
a2:f5:12:c1:0a:93:8e:c0:87:39:64:be:1d:b2:27:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:67:80:B8:0E:9E:79:A9:AE:03:FF:77:A2:53:46:EF:42:77:36:BF
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7a:49:49:99:de:0b:8b:4f:7f:6c:f7:fb:73:7c:26:a7:8c:
e0:63:bf:64:7f:95:1e:ec:94:95:87:09:4c:33:18:5b:97:f2:
4c:db:52:63:18:c8:cf:5b:7d:9b:e8:c6:e7:d2:3c:d4:5c:e7:
71:67:b7:63:8a:51:e0:aa:a2:f2:f3:40:e8:e9:2e:77:92:d1:
82:1d:9c:9e:59:b0:89:d5:77:e7:19:6e:ba:3f:1e:d4:6c:9b:
df:31:6e:f8:29:fa:eb:c2:40:f0:72:53:39:01:b5:db:17:94:
76:46:e2:99:c8:67:69:c8:bb:cb:39:76:6b:9d:df:41:44:f9:
e1:46:00:da:df:5d:59:8e:b6:52:e7:5e:b1:8f:72:55:23:33:
c4:2d:01:af:89:40:34:70:ad:55:60:7f:c4:57:5b:2b:50:c3:
95:9f:59:f6:cc:27:42:71:22:bd:e7:9b:63:33:05:a1:07:78:
ac:fc:26:61:53:2a:3d:86:66:9d:b7:5b:b4:60:59:63:59:ad:
3c:27:b8:43:36:51:b5:44:1e:37:f3:48:09:3e:5e:a5:7a:12:
86:cc:c6:6c:10:f7:2b:37:1c:54:59:fe:d4:5c:4f:b3:32:79:
68:52:4e:50:18:05:66:e4:22:07:4b:8c:af:72:f5:e1:a5:f2:
9c:9f:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:53 2026 by rpki-client