Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: mv4nsXyCi+ZNLULwC0WEbUY54gO39Kutlm7OjLAPV6g=
Subject key identifier: D4:81:53:7A:6C:90:CA:08:20:71:AF:3D:7E:35:DD:67:9F:22:27:87
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019F94368301672C66F848170A8CD1CC4DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0985
Signing time: Fri 24 Jul 2026 13:00:28 +0000
Manifest this update: Fri 24 Jul 2026 13:00:28 +0000
Manifest next update: Sat 25 Jul 2026 13:00:28 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: Le8QXPEEu1Sy3nuSIkdwg1dhNyDDfqI6SCi2nw7ZMbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:83:01:67:2c:66:f8:48:17:0a:8c:d1:cc:4d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Jul 24 13:00:28 2026 GMT
Not After : Jul 25 13:00:28 2026 GMT
Subject: CN=d481537a6c90ca082071af3d7e35dd679f222787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b1:61:25:08:dc:5d:bc:a9:7c:2c:f3:be:2d:
10:65:14:47:95:5a:88:01:95:48:26:f5:5b:30:c5:
d0:5c:68:fb:ff:91:ed:55:67:35:2d:40:d7:d4:48:
d4:a9:3c:fd:cd:83:67:36:1e:ac:f5:2d:6e:eb:b1:
66:c4:e9:8a:71:c4:9c:ac:c4:56:66:87:37:41:66:
c4:0b:af:9d:ce:83:55:8b:84:76:20:ff:4d:23:6a:
80:71:73:6f:88:e0:e1:34:d9:35:0a:df:c3:ca:d6:
71:13:d6:ca:95:76:4f:78:55:e6:30:3f:ea:44:69:
06:e4:6a:21:bb:2c:c8:a7:da:e9:0f:52:ea:dd:11:
d8:b1:32:de:fd:6d:9f:d5:a2:62:e0:43:40:dc:cb:
19:1f:73:d7:3b:6f:10:f3:f9:e4:56:ee:cb:97:9a:
84:57:54:48:37:12:19:dc:c6:77:33:a8:a3:49:3c:
a0:13:da:5f:80:97:37:a9:a4:ab:e8:27:78:15:85:
68:dc:64:74:26:c0:b4:23:e6:be:c1:a7:62:9a:54:
80:6a:ad:d1:ea:6f:d2:b0:9d:1d:ab:a9:ec:91:26:
7d:d8:58:16:b4:35:6d:0d:db:21:0c:01:b1:9b:8e:
59:39:2a:55:3f:6b:46:26:5a:5e:66:e8:22:d6:6f:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:53:7A:6C:90:CA:08:20:71:AF:3D:7E:35:DD:67:9F:22:27:87
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7e:c6:a7:dc:5c:df:4b:e7:ff:7b:bd:dc:1a:fb:0b:2a:b8:
25:dd:b7:05:5e:f3:70:cd:08:19:0e:07:25:93:8e:3a:ae:75:
bb:31:98:26:42:8e:66:a8:aa:47:f2:11:30:99:02:89:5f:86:
5d:0d:dc:84:c2:87:cf:35:56:6e:b3:e1:c9:b5:7b:61:34:75:
3c:08:21:b6:f9:2b:09:56:4c:f7:45:ba:57:38:06:f1:8d:57:
d8:eb:7c:d4:be:cd:6b:de:18:27:7a:1d:c2:4a:93:ed:2d:64:
f3:da:3a:ac:77:20:37:c5:2c:1b:a8:09:bd:a2:d5:e1:72:34:
e7:3b:81:6a:3d:4d:83:98:20:d0:93:91:88:da:ed:f5:fe:a9:
4a:72:94:27:c8:d1:bf:e8:7d:fb:b4:78:c3:e0:90:43:e5:58:
11:ce:36:7a:a8:fc:c5:6f:b7:8f:04:04:5e:36:98:71:5d:a7:
96:08:7c:10:a5:6c:6c:3f:cd:eb:04:50:90:2e:be:09:7a:57:
ba:6b:18:d8:ef:55:7f:7d:87:a5:84:0a:36:53:d8:3c:90:96:
8c:27:5d:2e:75:ad:eb:4f:e9:e5:50:6c:b0:20:60:48:ad:fc:
39:ea:83:f5:65:09:d6:79:43:cd:91:77:71:c3:22:b6:7d:c3:
f5:26:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:30:32 2026 by rpki-client