Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: +0r9F/vWVzXRF34AEgS4Hfkd7TKH4NP48/8xfZJRi7Q=
Subject key identifier: 1E:FF:B9:3B:05:AC:8B:36:99:47:8C:FA:E6:1D:4C:10:A2:9E:85:ED
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 019D9B506B20FAEF6EB98563CC16797E02B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: DA
Signing time: Fri 17 Apr 2026 12:00:31 +0000
Manifest this update: Fri 17 Apr 2026 12:00:31 +0000
Manifest next update: Sat 18 Apr 2026 12:00:31 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: ZlbCWz1/Deei8cFfjgl2Ry9H9y5jhsUp9Yl1H+MYK7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:6b:20:fa:ef:6e:b9:85:63:cc:16:79:7e:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Apr 17 12:00:31 2026 GMT
Not After : Apr 18 12:00:31 2026 GMT
Subject: CN=1effb93b05ac8b3699478cfae61d4c10a29e85ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:e1:8c:5e:1f:19:9f:50:f4:03:3b:fe:13:
f5:e6:69:0b:86:db:a7:ad:67:aa:54:da:52:8a:34:
14:47:48:37:7b:4b:09:d2:da:93:b6:ec:34:6d:a5:
52:e5:af:df:73:f5:3d:8e:a7:4f:8d:13:67:8f:cf:
33:39:4a:3e:5d:f4:80:ee:a1:cf:57:b0:9f:04:1f:
d4:9c:d8:1f:67:5d:01:7c:fb:09:54:68:8a:a0:fa:
57:b5:58:ec:70:2e:97:42:cd:b9:ea:ad:33:9d:f6:
cf:39:cc:31:b1:fb:1f:78:48:56:90:9e:23:a5:7c:
60:af:cd:62:0c:fc:95:dc:06:27:ea:bf:d1:d3:34:
36:6e:e5:c8:b1:b0:c5:2e:4d:d3:5e:0b:15:dc:a9:
dc:c2:d5:e0:e8:55:ca:58:27:a6:bf:0b:ad:c3:ff:
df:81:59:fe:49:b5:38:0c:83:cf:a9:bb:33:d3:aa:
d1:1b:2a:44:fd:0b:6f:50:f3:88:d8:f7:fd:bc:d2:
cb:03:b4:f2:16:cd:d3:bb:41:be:5c:e8:a5:7e:d4:
ac:c6:28:24:68:19:b2:bd:ad:9f:4b:6e:ac:f6:ce:
a3:32:1b:70:16:fb:ed:6d:ef:fd:c2:4e:13:ca:a0:
f0:a5:5d:a5:4c:15:d7:47:68:10:02:8f:47:01:55:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:B9:3B:05:AC:8B:36:99:47:8C:FA:E6:1D:4C:10:A2:9E:85:ED
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:58:29:5b:05:7c:30:9c:5f:0c:56:ed:f1:7a:c1:97:40:
a8:bb:61:a0:66:d4:9e:cb:67:25:65:c4:7a:e9:9f:47:74:db:
f0:3c:05:89:8c:6e:13:3b:a6:60:cc:6d:45:f2:31:77:6c:cd:
78:6b:42:d3:99:97:19:7f:75:d5:75:37:ec:ce:dd:b5:57:e8:
b9:f3:12:01:e3:fb:fc:ab:8a:ec:c1:30:21:6d:2f:64:65:49:
26:a5:a9:d5:1b:81:27:79:63:f5:8d:70:23:b3:05:bb:11:43:
13:6b:f6:a3:c7:88:46:b4:27:28:76:5c:2b:3e:c8:01:80:d1:
90:05:e7:ac:7a:86:68:74:44:27:1c:d5:fc:27:be:b6:21:f0:
42:90:bc:d3:14:b1:a2:a2:ea:1e:c1:b6:44:23:cb:8e:fa:51:
aa:70:52:6f:06:6f:60:df:79:a4:a1:68:0d:f1:ef:0d:41:25:
c6:7c:9f:fd:f1:5f:c7:f3:eb:ec:bc:a2:59:dc:26:79:34:7d:
d0:2a:33:67:41:2a:ae:b0:f1:9c:2d:93:ef:10:89:a0:5f:27:
ee:20:c6:4c:33:a2:ae:6c:90:41:cf:a1:3c:47:ea:6c:cf:21:
3a:73:46:29:2f:24:ec:b9:e8:86:bd:7d:2a:a4:1c:58:6a:d7:
07:fd:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:53 2026 by rpki-client