Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: qdYwaAPBfqrwfEyz1BMmB0g5NuHtZdcPruDtTbX2eJQ=
Subject key identifier: 22:3E:C3:7D:08:1B:BD:54:79:7C:4A:01:A0:A7:1F:F2:F1:76:77:18
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01A0FCB44F16CC2E2A19168A8E96335E8D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1A85
Signing time: Fri 02 Oct 2026 13:01:10 +0000
Manifest this update: Fri 02 Oct 2026 13:01:10 +0000
Manifest next update: Sat 03 Oct 2026 13:01:10 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: detNzN1UAnWNrr7hbASwCzfQ1dr/h3xs0UwQI6G0H7M=)
2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:b4:4f:16:cc:2e:2a:19:16:8a:8e:96:33:5e:8d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Oct 2 13:01:10 2026 GMT
Not After : Oct 3 13:01:10 2026 GMT
Subject: CN=223ec37d081bbd54797c4a01a0a71ff2f1767718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:92:9e:46:16:06:59:1b:a0:1f:d4:20:14:
77:ef:21:12:b3:9e:22:c1:39:7d:93:b7:be:c9:36:
96:0d:bf:82:bc:2d:3a:9c:44:e1:21:3a:f0:56:e7:
d4:fd:76:25:f1:79:d8:10:97:7b:83:dd:00:8f:54:
2a:3f:b5:87:dc:10:55:ac:16:5f:0a:ee:4a:8f:9e:
92:88:61:95:5d:e1:06:dc:f3:34:5b:68:86:ba:c8:
08:46:e7:d3:42:17:78:67:6e:33:2e:af:5e:26:13:
66:5c:68:4d:71:96:b3:5a:1b:fb:37:46:7c:8b:47:
6d:97:c6:a1:c4:d2:06:f6:c1:46:97:9e:97:40:11:
b2:e2:34:e7:ac:b5:6b:9a:e5:76:ad:1f:37:40:c3:
87:d5:ec:1d:d6:18:bc:4f:ac:c8:f3:8c:81:84:74:
f6:9c:0e:55:a1:eb:8f:be:54:9a:3a:c9:c4:bb:06:
0f:eb:0a:68:7e:f1:da:0b:5c:1f:41:5d:bc:98:f7:
08:b6:71:c0:e0:19:1b:40:82:67:da:cf:b7:0f:ca:
1d:eb:2d:5d:9f:97:92:25:99:09:74:d9:ce:9c:fa:
aa:f7:34:60:4a:55:3f:d7:79:54:fb:ee:3c:fc:47:
70:88:1d:5c:d6:a0:0a:b2:ec:a6:07:0c:ad:99:bc:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:C3:7D:08:1B:BD:54:79:7C:4A:01:A0:A7:1F:F2:F1:76:77:18
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:92:5f:ff:ac:50:14:c5:83:c6:3d:53:ae:68:22:5f:5c:
fe:2c:ca:e1:33:d8:10:46:82:7b:42:a3:6f:d4:64:2b:d8:36:
b8:18:06:63:50:65:a4:08:39:b2:e2:57:ba:90:c6:75:09:3a:
67:01:23:31:f1:76:46:c8:41:ac:9e:50:e6:e2:08:05:ae:f4:
97:f5:c8:63:36:91:23:1e:c4:54:9f:f7:bc:85:1a:6d:52:38:
c1:d7:52:01:5d:91:c3:4a:d9:7d:62:21:32:5f:9f:1d:87:cd:
78:4c:71:a5:55:8d:c6:f0:10:b4:e9:89:53:2d:0b:11:0b:00:
de:56:e3:44:c6:07:42:ce:47:11:01:85:f1:39:d0:8d:1b:17:
b8:3e:0c:b3:81:40:2a:d7:39:99:dc:d3:91:75:de:ca:b4:01:
66:e4:ae:55:a2:97:dd:4e:34:ff:31:58:db:48:d5:9f:43:1b:
57:3e:91:c6:9d:c9:89:45:6f:aa:9e:58:ee:4c:80:ad:b1:68:
81:4c:a3:63:83:79:10:c6:77:ea:c5:56:7d:ce:34:ee:54:16:
ae:ea:04:45:4f:84:93:f8:6c:f5:7a:a6:f0:e0:57:c4:69:cd:
52:a8:c4:f2:59:9c:63:e7:da:11:f7:39:c6:7b:30:a2:39:17:
b0:c0:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:24:08 2026 by rpki-client