Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: Q0hcXWAmc/ejACFPqJzsaM7cEcsOQQv0SMOxKdt3908=
Subject key identifier: 25:64:BC:01:C1:4F:A9:26:AA:DC:18:FB:25:A9:7B:5D:89:1C:3C:E5
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019D2A3B74DC0F24B6D48F2898194A2D9A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0845
Signing time: Thu 26 Mar 2026 13:00:32 +0000
Manifest this update: Thu 26 Mar 2026 13:00:32 +0000
Manifest next update: Fri 27 Mar 2026 13:00:32 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: 6HnL2O0fWFRybmJ/Ep6qhbrCbnpOeOsOQcsLEC4yh2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:74:dc:0f:24:b6:d4:8f:28:98:19:4a:2d:9a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Mar 26 13:00:32 2026 GMT
Not After : Mar 27 13:00:32 2026 GMT
Subject: CN=2564bc01c14fa926aadc18fb25a97b5d891c3ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:ab:94:5d:75:c7:ec:e3:bb:5a:97:bc:1b:
5d:31:ff:e4:f3:02:68:36:5e:42:56:82:4e:bb:ba:
44:54:91:78:33:d2:74:2d:60:d8:97:fd:ef:9e:28:
b0:22:48:0c:a5:19:a2:b7:26:dd:bd:d3:42:02:46:
ed:ba:a4:23:18:f8:13:8b:b8:c4:96:cf:fb:22:bd:
a2:63:ec:1a:67:de:b2:d7:15:6d:1f:9e:1e:fb:3b:
50:fe:d6:d9:30:f0:73:f6:1b:65:58:cb:d0:d0:1e:
76:f4:1a:3b:81:95:7f:a0:09:f1:dc:e8:69:bd:96:
ed:28:4b:1a:58:1b:b3:93:5b:69:55:5a:a0:ac:72:
38:0e:1c:e0:67:23:a0:d4:cd:5c:d5:7d:b1:40:63:
ff:52:67:dd:b6:0c:0b:f5:d6:ed:88:d7:84:d8:dd:
e7:4c:a4:43:2a:51:a6:fe:78:03:da:8a:41:34:dd:
10:62:7e:7b:23:65:ef:c7:00:08:c5:ba:75:4f:7d:
75:42:f0:4f:86:91:d6:eb:1d:19:4d:c3:2d:38:e6:
c6:ae:49:9c:9d:3b:07:7d:bc:ea:70:a8:98:8e:c3:
4c:d3:52:d7:4e:6d:3e:90:f2:6a:c3:21:d5:7c:d3:
2e:4f:3f:e7:80:ee:2f:a4:ed:8e:b1:22:bb:65:c5:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:64:BC:01:C1:4F:A9:26:AA:DC:18:FB:25:A9:7B:5D:89:1C:3C:E5
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:63:80:4e:ca:9c:6d:46:7c:25:98:a1:db:4f:cc:04:2b:9b:
e0:2b:60:84:79:76:c7:5a:a6:e3:6a:c3:16:e1:39:b7:96:53:
a5:d3:ba:e0:fd:13:7a:a9:cb:8a:51:5a:45:f6:0a:07:0b:c4:
ef:fc:12:c7:14:a4:62:75:e3:0f:c6:80:e6:93:16:75:e8:91:
fd:da:44:12:d4:5a:46:1e:e5:0b:1e:a9:52:10:f8:37:cd:c7:
a5:75:79:a6:0c:bd:8e:c4:3f:96:ff:32:4d:15:c4:1f:28:13:
e9:9e:bf:51:77:cf:4f:45:4b:4b:a9:68:bb:1f:4f:bd:ee:e9:
44:f7:9f:b8:1e:7c:31:c2:98:95:46:e2:80:5c:e7:22:ab:e0:
8f:67:48:d0:ab:5f:ee:2e:b5:a8:41:0e:22:a3:77:68:fb:df:
a5:2a:53:1d:59:a7:89:d8:2b:04:d3:71:29:ec:2a:ab:f6:1f:
12:6d:69:df:22:c9:34:52:c8:ab:d5:7d:07:82:66:9f:5a:35:
c3:5f:82:25:dc:94:55:15:a3:2e:7d:a4:7a:ab:cd:65:34:10:
57:b8:47:58:02:f5:7b:c3:49:3f:57:af:90:7e:f0:74:d3:ba:
d6:53:d0:97:ac:3d:2c:35:9b:c0:5a:a6:40:e5:c4:88:bc:6d:
a9:37:b0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO3TcDyS21I8omBlKLZpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzU3MGZjYWE2ODg0NGE1ZmE3OWRlMmNhMmU3YmMxYmVj
OTExOTEwHhcNMjYwMzI2MTMwMDMyWhcNMjYwMzI3MTMwMDMyWjAzMTEwLwYDVQQD
EygyNTY0YmMwMWMxNGZhOTI2YWFkYzE4ZmIyNWE5N2I1ZDg5MWMzY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MGrlF11x+zju1qXvBtdMf/k8wJo
Nl5CVoJOu7pEVJF4M9J0LWDYl/3vniiwIkgMpRmitybdvdNCAkbtuqQjGPgTi7jE
ls/7Ir2iY+waZ96y1xVtH54e+ztQ/tbZMPBz9htlWMvQ0B529Bo7gZV/oAnx3Ohp
vZbtKEsaWBuzk1tpVVqgrHI4DhzgZyOg1M1c1X2xQGP/UmfdtgwL9dbtiNeE2N3n
TKRDKlGm/ngD2opBNN0QYn57I2XvxwAIxbp1T311QvBPhpHW6x0ZTcMtOObGrkmc
nTsHfbzqcKiYjsNM01LXTm0+kPJqwyHVfNMuTz/ngO4vpO2OsSK7ZcWESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVkvAHBT6kmqtwY+yWpe12JHDzlMB8GA1UdIwQY
MBaAFJLFcPyqaIRKX6ed4soue8G+yRGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mNDI3Y2MtMzI2Ny00NTgxLWJmOGIt
YTMwNTJmNTZmM2M3LzEva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mNDI3Y2MtMzI2Ny00NTgxLWJmOGItYTMwNTJmNTZmM2M3
LzEva3NWd19LcG9oRXBmcDUzaXlpNTd3YjdKRVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWOATsqc
bUZ8JZih20/MBCub4CtghHl2x1qm42rDFuE5t5ZTpdO64P0TeqnLilFaRfYKBwvE
7/wSxxSkYnXjD8aA5pMWdeiR/dpEEtRaRh7lCx6pUhD4N83HpXV5pgy9jsQ/lv8y
TRXEHygT6Z6/UXfPT0VLS6loux9Pve7pRPefuB58McKYlUbigFznIqvgj2dI0Ktf
7i61qEEOIqN3aPvfpSpTHVmnidgrBNNxKewqq/YfEm1p3yLJNFLIq9V9B4Jmn1o1
w1+CJdyUVRWjLn2keqvNZTQQV7hHWAL1e8NJP1evkH7wdNO61lPQl6w9LDWbwFqm
QOXEiLxtqTewmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:42 2026 by rpki-client