Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: VP8JxMGIlyaTrIVIF+nPVSiXOrXkvotrgRNKtBrSboY=
Subject key identifier: 94:B1:E2:01:55:45:C2:99:98:A8:72:4A:2E:09:DF:FC:71:3E:1B:99
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 01A13748BED68BEAAEE0C47F8991580B81C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0A5E
Signing time: Tue 13 Oct 2026 22:01:16 +0000
Manifest this update: Tue 13 Oct 2026 22:01:16 +0000
Manifest next update: Wed 14 Oct 2026 22:01:16 +0000
Files and hashes: 1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: pbeHJZ4DqowPR7zu53Wp1UV+eBBGuCT7LsXzEQ55XNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:be:d6:8b:ea:ae:e0:c4:7f:89:91:58:0b:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Oct 13 22:01:16 2026 GMT
Not After : Oct 14 22:01:16 2026 GMT
Subject: CN=94b1e2015545c29998a8724a2e09dffc713e1b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:28:c6:fb:91:87:93:75:4b:f0:e6:77:8d:
88:40:e9:6d:86:61:0c:1b:8f:40:ce:77:af:8c:82:
37:5f:ab:ab:d8:af:d6:4c:0b:b0:18:5c:44:32:75:
3f:e7:92:88:90:45:27:20:72:fc:81:e9:d7:51:9c:
58:4f:f1:40:ba:22:9b:41:1f:28:7b:aa:47:90:bf:
f3:23:4b:e9:77:bb:b1:33:30:09:2b:d5:5d:02:47:
50:ee:fe:3c:d0:02:22:dd:88:49:e5:b6:99:08:b4:
3c:e8:16:d0:ef:a0:77:c7:77:95:7c:3f:55:c4:68:
85:c5:00:a6:fc:88:c0:d5:bc:2b:8a:bd:0e:d2:9a:
6f:db:46:12:57:b6:54:00:9d:36:f4:5a:a3:66:f3:
59:44:b5:73:f9:09:aa:26:33:b5:67:78:72:a9:c7:
25:1e:84:1d:2a:d0:d6:86:b1:b0:8e:22:02:e9:a8:
64:c8:4e:4c:be:f7:42:a0:b5:8f:a7:66:de:a3:4e:
93:a8:0b:02:95:ba:77:40:cb:2a:39:49:d7:8f:ce:
c6:df:f4:c1:f9:7e:67:c2:e9:29:f8:be:76:b8:cc:
79:ba:a1:eb:ac:9c:59:19:22:c8:c4:86:be:6a:e5:
2b:40:9a:22:24:50:8a:7d:de:d6:dd:18:82:88:80:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B1:E2:01:55:45:C2:99:98:A8:72:4A:2E:09:DF:FC:71:3E:1B:99
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1e:9b:2e:23:ac:cc:d4:98:f0:01:11:ba:7b:64:bf:67:ea:
b3:f8:ff:56:cb:fb:bc:88:2b:f6:a0:57:4e:73:78:08:dd:9d:
19:a3:59:60:80:29:9a:57:80:9b:ef:91:9c:63:35:c5:23:64:
cb:5d:e8:97:55:47:e8:c5:c8:09:6e:32:d3:d2:8d:ea:ef:7f:
87:4e:c4:e2:1b:c6:aa:c0:1f:97:9e:1e:4e:30:9f:8b:83:96:
2c:ae:f0:b5:c5:33:57:84:b7:91:96:cd:dc:58:1a:6e:db:ad:
9f:e4:3f:9c:d6:55:f3:15:a5:48:89:1c:91:52:39:d2:aa:e1:
bf:dc:29:78:bc:a3:b9:f2:0a:7a:b0:25:03:b9:cc:df:e1:96:
bf:e7:03:dc:5f:f3:bc:9b:5b:df:7e:ec:85:54:bf:49:d6:3c:
41:0a:04:5c:83:42:c2:3f:47:2d:83:c0:34:84:86:1f:54:bd:
8b:18:6b:2f:c8:60:a4:74:3d:30:5e:3a:14:40:62:97:8c:8c:
46:db:32:70:b8:ef:7e:06:d3:15:81:c0:26:0c:78:f4:98:30:
1d:a9:65:5a:b5:09:9d:5f:be:51:35:80:c2:a3:cc:a9:c8:b2:
6d:8f:86:3d:21:41:6f:f6:5d:3a:01:8c:33:68:52:b7:81:5c:
30:7c:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:52:30 2026 by rpki-client