Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
File: ksrhHed02u8FJ0JGPOlU9SHG0nI.mft (raw, json)
Hash identifier: UyrBoJh5su/U3MDNWlRfw3L8b0MTFkyri0p0ohLxhK8=
Subject key identifier: 4C:73:68:9D:54:A8:67:41:DC:0D:DC:5D:8E:1B:D2:3B:0A:03:21:72
Authority key identifier: 92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
Certificate issuer: /CN=92cae11de774daef052742463ce954f521c6d272
Certificate serial: 019DA48AAD7CC0D50A796BB52CB6335CADE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
Manifest number: 12BF
Signing time: Sun 19 Apr 2026 07:00:44 +0000
Manifest this update: Sun 19 Apr 2026 07:00:44 +0000
Manifest next update: Mon 20 Apr 2026 07:00:44 +0000
Files and hashes: 1: ksrhHed02u8FJ0JGPOlU9SHG0nI.crl (hash: ODp4F7w0MAN3Sv4UxG8uJzqb68F7yLzOr/TufamxjQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:ad:7c:c0:d5:0a:79:6b:b5:2c:b6:33:5c:ad:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cae11de774daef052742463ce954f521c6d272
Validity
Not Before: Apr 19 07:00:44 2026 GMT
Not After : Apr 20 07:00:44 2026 GMT
Subject: CN=4c73689d54a86741dc0ddc5d8e1bd23b0a032172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:66:71:5c:87:a5:e2:a4:63:78:50:41:bc:f4:
36:c2:0a:bc:83:2c:ce:7e:ae:7e:f1:cb:e4:93:45:
5d:b4:51:9e:d2:2f:8e:02:ed:46:5b:2a:2d:c4:42:
5f:aa:f9:43:ad:9d:9f:d9:b7:9b:f3:67:1e:56:8b:
45:e6:83:65:43:95:66:a2:9e:77:ff:70:86:13:36:
2d:d0:db:92:6a:58:32:58:f8:77:61:0d:a5:ff:ed:
58:33:9b:d6:9b:6a:53:de:84:1d:e8:9e:fc:f8:8e:
eb:5e:d4:05:da:0b:af:90:73:f2:d2:ac:12:f7:b5:
1d:c3:cf:51:f8:3e:11:87:9b:f6:d3:de:99:14:41:
83:60:5b:bb:f1:3d:08:e9:b1:3d:5e:09:9a:cd:2c:
0e:b4:c1:9a:5d:c4:8f:4a:56:df:3e:cf:d3:56:e1:
97:95:05:46:cc:dc:b4:3f:f3:40:71:bd:e9:fb:73:
ff:19:bd:39:6f:af:10:e9:a2:d3:6d:33:bd:16:f2:
c7:30:29:3f:b1:33:cb:67:33:4c:14:79:fa:a8:bc:
3f:97:65:28:42:8a:49:ae:05:3f:6f:5c:2e:89:11:
8d:81:fc:87:3c:d5:f8:79:b0:78:8a:8d:3d:dd:f3:
d7:44:97:b4:3d:15:7a:24:46:6e:52:79:fc:c4:3f:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:68:9D:54:A8:67:41:DC:0D:DC:5D:8E:1B:D2:3B:0A:03:21:72
X509v3 Authority Key Identifier:
keyid:92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:87:52:86:c9:c5:ef:72:6e:17:47:74:f3:d8:7d:1c:79:60:
54:0c:54:d9:36:54:66:b3:d9:a5:a6:b4:1e:50:3b:99:ca:29:
3c:ff:e4:ed:07:4f:f5:ae:f6:8f:1d:47:17:db:11:4a:3c:e0:
d0:20:78:41:77:df:ac:9d:57:87:7a:e4:27:69:59:56:71:34:
e3:28:90:ed:e9:e6:a0:dd:4c:ac:9f:09:71:59:b3:6d:db:09:
4b:8c:94:32:0d:63:65:de:1a:78:f1:96:26:5b:bf:7f:5c:d6:
29:1b:c3:d7:65:66:70:8b:e7:f1:e9:a3:9a:16:e6:bb:ca:f4:
28:43:32:22:bc:b3:68:69:d8:dd:07:af:59:ba:85:da:93:b8:
8f:a1:31:77:04:f0:02:47:09:6b:23:b2:fc:02:f6:85:c2:2e:
00:df:68:af:c9:37:9c:13:c6:48:50:7b:44:35:62:18:d7:2e:
06:31:52:74:25:55:c1:f9:a4:4c:ee:81:67:79:a8:ea:51:98:
49:11:69:d6:12:20:f0:c4:e0:83:79:ac:9d:0f:83:4f:9d:44:
a7:f0:35:89:32:4f:b6:b1:6a:90:21:3a:eb:54:6d:84:11:09:
c3:36:6e:99:4d:bb:26:a1:b3:06:4a:76:58:c2:97:d2:b4:9a:
24:a4:92:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiq18wNUKeWu1LLYzXK3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2FlMTFkZTc3NGRhZWYwNTI3NDI0NjNjZTk1NGY1MjFj
NmQyNzIwHhcNMjYwNDE5MDcwMDQ0WhcNMjYwNDIwMDcwMDQ0WjAzMTEwLwYDVQQD
Eyg0YzczNjg5ZDU0YTg2NzQxZGMwZGRjNWQ4ZTFiZDIzYjBhMDMyMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62ZxXIel4qRjeFBBvPQ2wgq8gyzO
fq5+8cvkk0VdtFGe0i+OAu1GWyotxEJfqvlDrZ2f2beb82ceVotF5oNlQ5Vmop53
/3CGEzYt0NuSalgyWPh3YQ2l/+1YM5vWm2pT3oQd6J78+I7rXtQF2guvkHPy0qwS
97Udw89R+D4Rh5v2096ZFEGDYFu78T0I6bE9XgmazSwOtMGaXcSPSlbfPs/TVuGX
lQVGzNy0P/NAcb3p+3P/Gb05b68Q6aLTbTO9FvLHMCk/sTPLZzNMFHn6qLw/l2Uo
QopJrgU/b1wuiRGNgfyHPNX4ebB4io093fPXRJe0PRV6JEZuUnn8xD8lPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExzaJ1UqGdB3A3cXY4b0jsKAyFyMB8GA1UdIwQY
MBaAFJLK4R3ndNrvBSdCRjzpVPUhxtJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NyaEhlZDAydThGSjBKR1BPbFU5U0hHMG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9lZGY0MzUtMWFiZi00NzBlLWJhNmQt
ZWZmNmZkN2QzYjI4LzEva3NyaEhlZDAydThGSjBKR1BPbFU5U0hHMG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9lZGY0MzUtMWFiZi00NzBlLWJhNmQtZWZmNmZkN2QzYjI4
LzEva3NyaEhlZDAydThGSjBKR1BPbFU5U0hHMG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIdShsnF
73JuF0d089h9HHlgVAxU2TZUZrPZpaa0HlA7mcopPP/k7QdP9a72jx1HF9sRSjzg
0CB4QXffrJ1Xh3rkJ2lZVnE04yiQ7enmoN1MrJ8JcVmzbdsJS4yUMg1jZd4aePGW
Jlu/f1zWKRvD12VmcIvn8emjmhbmu8r0KEMyIryzaGnY3QevWbqF2pO4j6ExdwTw
AkcJayOy/AL2hcIuAN9or8k3nBPGSFB7RDViGNcuBjFSdCVVwfmkTO6BZ3mo6lGY
SRFp1hIg8MTgg3msnQ+DT51Ep/A1iTJPtrFqkCE661RthBEJwzZumU27JqGzBkp2
WMKX0rSaJKSScQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:35 2026 by rpki-client