Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: Bb9fnlqY+hR64qKrxhhBD9TTwItBKBiW00Jvm6kJdpY=
Subject key identifier: 26:90:30:A2:E7:E0:2C:7B:DF:BC:DE:E7:A2:EE:EC:98:43:A5:62:E9
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 019D25BA82CFC7D68766695BF361FF1E341F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:13 +0000
Manifest this update: Wed 25 Mar 2026 16:01:13 +0000
Manifest next update: Thu 26 Mar 2026 16:01:13 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: R9ECdi3FrrT0O8a/eoVPj013qxjvwjIPEmjo2okqd30=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:82:cf:c7:d6:87:66:69:5b:f3:61:ff:1e:34:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Mar 25 16:01:13 2026 GMT
Not After : Mar 26 16:01:13 2026 GMT
Subject: CN=269030a2e7e02c7bdfbcdee7a2eeec9843a562e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:64:87:24:ce:16:04:a5:a0:d3:9a:e2:9b:
62:08:17:60:7c:36:20:9f:1b:39:7f:c1:99:fe:db:
04:56:ea:98:60:66:b7:34:93:76:9f:f7:94:c0:d9:
c5:ba:d8:36:fc:27:76:49:8b:32:aa:0f:89:53:fc:
68:02:a3:3f:dc:71:90:20:5e:8e:37:cf:a7:a4:65:
f9:f7:4a:b8:06:5f:65:38:ff:c4:e9:1d:e9:76:36:
9a:f4:52:c4:66:ab:58:1d:bd:1a:b9:5a:09:33:c4:
3e:7d:40:ac:94:37:99:48:ca:fd:2d:37:f5:80:ce:
c7:df:b3:17:d1:30:8a:f8:22:29:3b:83:05:61:a8:
8f:ca:22:24:fc:4d:f1:c1:ea:d2:b8:d1:71:e3:dd:
39:c6:76:83:c1:e1:c4:14:2f:bc:64:98:21:34:1c:
e5:2b:59:c7:37:83:a6:42:7a:5f:c8:b1:34:3d:cb:
a8:9b:05:a3:a5:7b:6f:b5:a1:b0:2c:5b:2e:68:bf:
ea:2a:7f:a7:f3:a5:df:cc:fb:15:9b:4e:70:af:70:
64:1a:63:23:43:3d:3d:61:a5:4a:e6:c5:0f:ae:7b:
5a:3d:33:5f:6c:24:1a:b8:7c:b4:cb:0f:c9:b8:21:
3f:62:fa:ae:ce:7d:f8:f5:9f:6c:34:80:8c:35:15:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:90:30:A2:E7:E0:2C:7B:DF:BC:DE:E7:A2:EE:EC:98:43:A5:62:E9
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:1a:4a:72:bb:2e:0e:f4:27:08:21:6d:3c:96:94:49:aa:
51:04:be:15:4a:12:e8:a6:d4:15:d7:f3:ba:fe:2f:d9:44:b0:
44:68:40:30:82:ac:53:93:e8:a8:6f:8d:6a:46:47:9a:18:b1:
65:38:50:45:f4:07:e8:9a:40:b6:e9:b7:75:77:81:7b:83:cd:
0d:06:85:99:51:96:8f:33:fc:13:3d:cc:20:69:e2:f5:01:13:
60:21:62:2e:df:b3:b3:67:2f:b9:a3:5d:18:7b:82:99:f8:82:
8d:a5:ad:43:7f:86:09:e4:95:6d:cb:fd:87:00:cd:99:34:a1:
85:d1:c8:6d:01:cd:c9:16:cb:94:a1:5a:b6:0b:31:55:db:f9:
a6:12:b7:54:06:67:58:9e:87:e3:bf:db:b6:4e:3d:98:ed:e6:
66:90:b2:bd:ab:53:2f:cf:5b:0c:93:1c:41:f4:e5:41:d1:e4:
75:21:e8:2d:30:d2:8f:95:2d:03:2e:87:17:c6:a0:71:2a:d4:
ec:57:f1:69:82:84:d0:49:0f:80:21:b4:12:53:31:2f:09:6e:
db:39:3f:34:bb:4b:fa:ed:96:f6:36:3e:c6:00:be:45:e5:ca:
20:dd:0a:d8:70:bb:6e:63:2d:b2:ca:d6:cc:2b:e9:71:66:71:
2a:6f:97:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:46 2026 by rpki-client