Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: TyM+1xp1ajkMnXA2Td+d0KBH7EVeWzBVbYDUyqZ6/xk=
Subject key identifier: 22:D3:71:1D:FC:2F:26:33:47:50:36:0C:27:52:C4:4F:5B:42:4E:05
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 019CABD944941B0CB7D6577974C775571604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: 5E
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: whLa3Vv7zd+p2KwhtA9+kxG+uw2p8IxcQAiBoqu6oaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:44:94:1b:0c:b7:d6:57:79:74:c7:75:57:16:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=22d3711dfc2f26334750360c2752c44f5b424e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:54:66:27:5e:df:ca:1d:53:8b:ff:80:0c:
47:0a:cb:d8:a4:76:82:81:29:cc:c5:a6:f5:c8:b0:
74:88:c1:0c:2a:cd:24:37:8c:df:6d:57:3f:d0:c3:
09:f2:05:0b:d1:e6:fc:d8:11:fc:fc:29:be:5b:4c:
11:fc:0f:a1:98:2d:bb:72:4b:13:4d:7b:37:55:f3:
f2:4c:df:3d:9b:e7:95:e2:4f:fe:4a:9b:08:df:53:
60:8a:37:6a:d6:cf:b4:c8:82:46:90:01:7b:fc:9b:
58:fa:c2:b8:de:8c:34:44:33:24:c5:27:c9:b5:21:
1f:ad:c2:e6:03:56:53:06:2e:7a:d8:83:16:62:d0:
64:82:38:07:16:35:69:0e:6d:a6:c7:be:a1:42:a9:
86:db:8d:18:85:08:05:d1:40:20:a8:fc:80:6c:04:
53:2d:fc:25:e5:db:cc:5d:01:f2:f7:ea:51:b4:8f:
cc:a8:65:38:21:fa:45:e2:c5:00:fb:39:83:ca:ba:
d0:a9:47:46:22:da:5a:63:d1:54:0d:22:7b:c5:a3:
4f:81:7f:3b:5d:c0:06:4a:25:d1:62:bf:9c:fd:3e:
ab:d3:f4:be:f3:29:8a:4f:8e:df:7c:22:0e:47:32:
85:f0:78:6c:ca:c6:41:68:f6:7a:bf:5e:5b:11:53:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D3:71:1D:FC:2F:26:33:47:50:36:0C:27:52:C4:4F:5B:42:4E:05
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:2a:b0:93:2f:19:06:e4:17:e5:df:f3:e4:03:6b:56:29:
b6:73:06:e2:a6:90:17:71:f8:b1:82:8b:31:7c:09:45:6b:ef:
9d:80:d5:57:06:3c:1d:12:ab:5f:7a:dc:5a:bb:fd:1c:fa:43:
47:17:49:25:88:98:26:aa:23:18:8e:26:05:25:78:7d:e1:e4:
b7:72:a7:31:78:e5:be:db:9f:25:c9:25:f9:35:a2:ce:75:18:
f6:3c:ca:31:49:47:7b:01:92:d8:07:4e:78:a3:de:f9:8f:0d:
de:95:9f:bf:bf:9c:1a:33:7d:cf:51:7e:41:2b:f9:4e:59:ca:
ea:62:15:ff:d9:07:b3:c3:4a:54:02:55:96:3e:28:d5:c8:cc:
73:73:64:66:4a:f5:7a:fa:5b:c7:6a:fe:5a:00:e1:45:5a:0f:
b9:65:47:71:6b:d2:f5:f4:a0:d4:70:9b:87:bb:c1:7f:ca:31:
41:8b:f5:e0:26:9b:1a:3f:54:50:d0:cf:07:12:a1:39:52:19:
a7:d2:df:01:78:aa:9c:ba:ad:7a:5f:5b:f5:9f:42:16:84:9e:
15:fd:07:be:b5:19:54:0f:2b:de:04:6e:af:af:8e:e2:74:b0:
3e:93:77:80:17:cf:3e:2d:8c:bf:58:45:c4:8b:0d:38:f4:3d:
84:9c:ba:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2USUGwy31ld5dMd1VxYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzBjZjA0YTE0ZjZmZjc4YjE4ZjBjMDA3NTc4ODIyMGFm
NzM5MWMwHhcNMjYwMzAyMDAwMTA4WhcNMjYwMzAzMDAwMTA4WjAzMTEwLwYDVQQD
EygyMmQzNzExZGZjMmYyNjMzNDc1MDM2MGMyNzUyYzQ0ZjViNDI0ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3JUZide38odU4v/gAxHCsvYpHaC
gSnMxab1yLB0iMEMKs0kN4zfbVc/0MMJ8gUL0eb82BH8/Cm+W0wR/A+hmC27cksT
TXs3VfPyTN89m+eV4k/+SpsI31Ngijdq1s+0yIJGkAF7/JtY+sK43ow0RDMkxSfJ
tSEfrcLmA1ZTBi562IMWYtBkgjgHFjVpDm2mx76hQqmG240YhQgF0UAgqPyAbART
Lfwl5dvMXQHy9+pRtI/MqGU4IfpF4sUA+zmDyrrQqUdGItpaY9FUDSJ7xaNPgX87
XcAGSiXRYr+c/T6r0/S+8ymKT47ffCIORzKF8HhsysZBaPZ6v15bEVMuTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLTcR38LyYzR1A2DCdSxE9bQk4FMB8GA1UdIwQY
MBaAFJLAzwShT2/3ixjwwAdXiCIK9zkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUt
NGNmNWRlZGE1YzRjLzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUtNGNmNWRlZGE1YzRj
LzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcYqsJMv
GQbkF+Xf8+QDa1YptnMG4qaQF3H4sYKLMXwJRWvvnYDVVwY8HRKrX3rcWrv9HPpD
RxdJJYiYJqojGI4mBSV4feHkt3KnMXjlvtufJckl+TWiznUY9jzKMUlHewGS2AdO
eKPe+Y8N3pWfv7+cGjN9z1F+QSv5TlnK6mIV/9kHs8NKVAJVlj4o1cjMc3NkZkr1
evpbx2r+WgDhRVoPuWVHcWvS9fSg1HCbh7vBf8oxQYv14CabGj9UUNDPBxKhOVIZ
p9LfAXiqnLqtel9b9Z9CFoSeFf0HvrUZVA8r3gRur6+O4nSwPpN3gBfPPi2Mv1hF
xIsNOPQ9hJy6ew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:45 2026 by rpki-client