Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: 9mqCxb3prbY6kGoSGFAvpQmAt0JQZmSFFC8PDwC2Kps=
Subject key identifier: F6:B2:3D:38:FF:D5:56:3B:55:FE:F0:CA:23:84:75:39:CA:12:77:70
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 019EBEEC52B8D2E8E3ABC481BD3FFC77F249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: 0171
Signing time: Sat 13 Jun 2026 03:00:19 +0000
Manifest this update: Sat 13 Jun 2026 03:00:19 +0000
Manifest next update: Sun 14 Jun 2026 03:00:19 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: B/jKfyfE4uIclU3S2ejKrrzQOHQplBHqG1R9zF8+tn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:52:b8:d2:e8:e3:ab:c4:81:bd:3f:fc:77:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Jun 13 03:00:19 2026 GMT
Not After : Jun 14 03:00:19 2026 GMT
Subject: CN=f6b23d38ffd5563b55fef0ca23847539ca127770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:be:a6:df:b6:a7:da:22:f1:0f:c8:b2:50:
ba:68:b1:51:ef:fd:5b:ab:5a:4b:71:d9:6a:18:76:
f2:3e:61:b6:81:79:22:78:d2:f0:db:96:ff:6b:bf:
3f:71:71:0e:c4:2e:cd:f5:d2:90:a8:23:28:7f:ab:
0a:e7:98:92:fe:12:e0:5b:62:3a:cb:2d:99:86:c6:
df:be:a3:f8:3e:2c:ec:f3:61:2b:b4:64:a4:10:8b:
13:18:4e:19:29:7f:24:e4:7c:5a:1f:05:33:cb:41:
0c:fc:77:c9:33:fc:30:bd:29:03:7b:e5:32:f5:b4:
a4:29:69:79:30:7c:7c:ca:31:b2:b3:24:4e:18:3d:
8d:d3:dc:90:9b:af:09:0d:f4:27:94:0f:81:04:e3:
16:6f:3c:16:a3:90:6d:b2:90:d9:80:fd:a0:a0:74:
84:b1:25:93:a9:cb:72:6b:ce:e4:f4:a4:5f:4f:cd:
ad:e0:c6:4b:c1:e4:f6:3f:92:63:2e:73:37:dc:54:
be:5c:bc:11:1e:ba:a2:41:86:b0:2f:e3:96:cd:b9:
0b:22:d7:fb:36:32:4e:87:e9:03:90:c3:c3:9d:53:
e0:ae:5e:a1:6a:a2:0d:c7:a0:47:4a:97:82:c1:64:
02:0f:f1:8c:09:69:b8:9d:80:1f:d9:04:b8:74:10:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B2:3D:38:FF:D5:56:3B:55:FE:F0:CA:23:84:75:39:CA:12:77:70
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:62:c2:73:3d:c9:28:27:77:47:db:10:55:b3:1f:47:f5:b5:
17:87:5f:94:1c:7a:2d:3a:d6:2e:05:5b:e5:8c:5b:ec:e0:71:
3d:ba:b2:50:3c:29:20:8d:c3:1a:ee:31:bc:9b:8a:ba:ed:41:
2a:99:06:8a:e1:1c:1b:d6:0e:36:c0:87:6e:e9:c4:99:fb:5d:
00:1f:16:a3:47:8c:a8:d3:4d:93:a5:e5:af:3a:f5:2a:79:de:
65:4a:41:8d:98:ed:62:c0:3c:36:a1:c6:46:f5:9b:9e:06:39:
4c:71:52:32:74:2d:16:8c:70:58:b5:be:a6:01:21:46:62:fd:
32:b4:78:e7:92:1d:ff:01:5f:9c:f6:5f:38:68:ae:83:ae:23:
40:87:1b:6d:ca:2a:59:98:c0:86:55:40:1d:0a:73:0f:06:d7:
be:b2:b0:28:bf:27:5b:ac:f4:13:1d:60:a7:f4:fc:ce:07:7f:
9c:3b:df:83:b3:a2:52:50:77:fb:dc:38:03:a3:a3:d9:d6:fc:
4b:d4:cb:c8:f0:91:05:47:c0:d4:7e:0c:0f:3f:9c:6b:b8:f8:
8e:62:04:12:a5:25:e6:e1:1c:0e:4d:f2:2d:5e:8d:77:f4:7b:
88:4b:c9:aa:4a:a1:6d:b1:8e:46:68:d7:2a:ee:e5:9a:43:d7:
cc:79:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:24 2026 by rpki-client