Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: q+IzUalYqZ0SRj7Q2TLEXuzZCP304MFChRp1ETI39/k=
Subject key identifier: 50:D0:65:E4:64:FA:6A:CD:A0:63:6B:3B:3A:FF:CC:6E:F1:A1:DD:C5
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019F93922CD22096C9B2DA3B17E177D67F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 10:00:58 +0000
Manifest this update: Fri 24 Jul 2026 10:00:58 +0000
Manifest next update: Sat 25 Jul 2026 10:00:58 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: faVa47/deU+qi/RF+63knznz0efs8A8QYNVP8lP+zH8=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:2c:d2:20:96:c9:b2:da:3b:17:e1:77:d6:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jul 24 10:00:58 2026 GMT
Not After : Jul 25 10:00:58 2026 GMT
Subject: CN=50d065e464fa6acda0636b3b3affcc6ef1a1ddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:a6:6e:b2:0e:5b:f4:1f:64:01:f2:ce:14:
2a:56:61:d3:0f:e8:f8:ef:1b:52:a8:7b:01:1d:12:
62:b7:d6:2c:bf:e5:15:bf:bc:eb:f1:ff:2a:51:58:
b2:eb:9d:c5:87:cd:2b:58:c2:c0:82:70:b5:cd:84:
11:bc:3b:54:d9:50:8e:07:90:e5:ae:5d:70:1b:38:
0d:c1:75:d5:1d:d6:5b:da:4a:87:60:37:1a:62:2d:
6d:fd:d4:ae:d4:be:b5:55:33:1f:ff:f0:34:90:ff:
6e:f8:97:70:03:63:7b:ec:ab:de:2a:85:53:2f:90:
d9:ad:15:9f:9b:ac:f9:c3:e9:9b:1e:a9:8a:b3:65:
28:9d:2b:d2:7c:36:cc:47:86:98:fe:11:43:f9:c5:
bf:98:18:11:4a:dc:4a:23:2d:27:2a:da:97:0b:74:
6b:6e:5b:8c:bd:72:ba:7e:c9:bc:0c:ca:43:35:c7:
6c:96:12:d8:0f:96:bb:a5:c3:46:d7:16:66:ba:ab:
d9:2e:4e:58:16:7f:30:5c:98:d9:40:8b:59:44:70:
ae:e4:32:89:9a:7a:fd:e1:67:6c:67:92:07:98:1e:
6a:ce:ed:e0:6e:9a:69:ab:f5:3b:dd:81:31:6e:63:
01:09:6d:b6:1f:8a:75:97:05:ae:b4:27:dc:2d:cc:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D0:65:E4:64:FA:6A:CD:A0:63:6B:3B:3A:FF:CC:6E:F1:A1:DD:C5
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e2:85:74:92:f5:ce:1b:05:b9:ba:cc:5a:64:2e:46:72:b0:
c3:fe:86:aa:dc:20:b7:57:20:bf:43:8f:10:6f:36:61:c1:79:
0f:a9:9e:57:ca:03:f7:a6:da:98:0c:88:58:7d:98:e9:d2:13:
d3:67:b8:5f:99:45:44:49:83:5b:fb:49:39:cd:6e:06:e1:33:
f4:5b:47:de:7a:e3:0c:b1:8f:46:af:c4:cb:3a:7e:b3:71:45:
41:95:e6:de:ad:76:48:18:d7:d3:96:d8:1f:c9:48:43:35:96:
af:10:3d:a6:d6:8c:d5:b7:33:e0:7f:b5:1b:01:90:a3:6d:86:
eb:27:4c:f0:ec:53:76:ec:c8:d8:1a:ad:8a:93:da:91:f5:9a:
22:39:c8:e4:46:45:2c:30:79:f5:23:92:e6:97:48:da:48:29:
3e:3d:e4:3b:b7:f2:06:94:81:8a:75:64:bc:e0:16:6f:a2:86:
d4:ca:a9:6b:b6:f2:12:ba:73:3f:36:79:aa:1e:85:ae:35:a8:
6a:12:79:9a:5c:f2:73:1a:0b:19:a3:17:ec:04:89:d5:52:62:
31:1a:58:97:27:12:57:3a:cb:9d:a0:c2:85:a0:f6:40:ae:07:
ae:a2:25:89:3c:ab:9e:59:b1:e6:1c:c4:6c:5b:b4:47:86:d3:
78:a9:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:04 2026 by rpki-client