Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: /qmxfIfjLapgVFSrSDgcZS+vy9yCp1cVONqB+ibm1ww=
Subject key identifier: 38:CB:07:45:7A:F7:D1:65:AB:5F:5B:0C:F3:69:F1:54:13:42:4D:5F
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 01A0BEB05415F3487318C7E62C479F22F5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: 027A
Signing time: Sun 20 Sep 2026 12:00:21 +0000
Manifest this update: Sun 20 Sep 2026 12:00:21 +0000
Manifest next update: Mon 21 Sep 2026 12:00:21 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: Hg8hkt6kPpdyMNLUuzWe7Jb5J04X2F9o8DRxkBGteNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:54:15:f3:48:73:18:c7:e6:2c:47:9f:22:f5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Sep 20 12:00:21 2026 GMT
Not After : Sep 21 12:00:21 2026 GMT
Subject: CN=38cb07457af7d165ab5f5b0cf369f15413424d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:32:68:24:b4:44:47:19:2e:cb:cf:70:e5:
05:79:6e:a5:99:34:92:ee:25:77:51:52:81:43:f9:
24:ec:46:05:cd:99:a2:ea:f4:17:df:5d:0b:49:c6:
a6:51:f5:d4:06:78:84:64:d7:7f:27:35:5f:45:20:
e6:a7:41:04:7b:74:e4:7c:a6:6b:e9:eb:d9:55:58:
55:3d:ce:a2:53:35:f6:de:98:cc:a6:b9:1e:52:e9:
d1:f7:2d:78:b8:5d:81:d1:3b:02:1c:59:06:77:b1:
42:54:78:9d:ae:05:bc:f4:99:1e:be:a1:69:10:4a:
69:be:76:9b:ee:a1:ae:b8:c6:8e:3c:4f:0b:d1:e4:
ee:de:5e:77:d6:f4:7b:8a:7a:4f:ea:7d:54:80:08:
d7:6e:cf:3c:ce:2b:22:48:45:41:04:02:7c:f7:15:
d8:9f:50:a1:ff:92:c4:e2:07:31:3f:c8:f7:71:21:
6c:8e:03:da:8a:b5:a7:d4:6b:bd:bf:51:23:bf:17:
8b:37:37:08:f9:17:af:4d:12:82:ba:1e:f2:1e:fe:
25:3b:0c:1f:cc:af:71:2e:cc:1a:81:ae:fb:fc:ad:
9d:de:26:d8:4d:da:c1:f6:52:f2:f6:21:36:d2:c9:
07:0f:ed:8a:5a:a8:51:37:4a:9f:ba:4f:55:e7:c7:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:07:45:7A:F7:D1:65:AB:5F:5B:0C:F3:69:F1:54:13:42:4D:5F
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a7:b7:8c:6f:36:77:7a:a7:71:fc:a0:6e:93:80:86:ba:2a:
09:0e:10:72:6b:b1:d9:c0:25:33:dc:6f:5b:b7:3a:29:ac:79:
2f:55:1b:e6:4e:30:94:a1:cd:54:af:bd:19:e1:4b:4f:8b:53:
7a:70:83:ec:e2:ff:98:af:89:15:27:06:b6:f0:55:fe:e9:ec:
4b:04:8d:8a:a7:7e:36:28:57:b2:35:21:e0:8a:30:da:6d:c8:
8d:f3:69:45:84:6b:b9:74:a7:ea:79:bd:66:6e:fd:b0:7b:52:
f7:8b:86:75:39:de:0e:53:46:03:31:1a:92:af:95:a9:4f:38:
60:6c:a8:dc:e3:6d:71:fc:14:9f:cc:9d:b0:aa:e5:22:e7:74:
a8:90:fa:df:5a:18:03:52:7d:75:33:f9:cc:d4:de:79:ae:64:
93:3a:d7:19:8c:4b:a3:86:9c:0d:1c:cb:7c:bc:c3:85:15:a6:
6e:14:7c:90:b3:6d:b2:7d:60:ca:7f:0b:1a:ef:ef:ef:75:38:
53:ec:7b:4c:97:bf:f1:38:16:1d:f6:3f:d5:e0:52:ff:a2:f2:
f5:0d:80:e4:05:7d:9a:6c:31:94:c0:90:b7:70:7f:c7:83:d8:
8a:9a:e1:ef:fc:0f:aa:07:0a:77:76:ce:b5:9c:10:8c:e8:20:
11:7f:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:46:11 2026 by rpki-client