Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: hmcgkY9sYREvxLi7RIcIvXd4f3E5Ey+EYViVBDgwQbk=
Subject key identifier: 85:1B:D9:D7:34:CD:74:0B:57:22:EB:38:19:C7:E9:3C:37:4D:1E:E7
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 019D29617EA3417F3A499E07AFCFCEED52E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: 9F
Signing time: Thu 26 Mar 2026 09:02:28 +0000
Manifest this update: Thu 26 Mar 2026 09:02:28 +0000
Manifest next update: Fri 27 Mar 2026 09:02:28 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: SiBqGiE5xBMDznMpI5CTi2W/IojwDFAXDhI4KrswzII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:7e:a3:41:7f:3a:49:9e:07:af:cf:ce:ed:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Mar 26 09:02:28 2026 GMT
Not After : Mar 27 09:02:28 2026 GMT
Subject: CN=851bd9d734cd740b5722eb3819c7e93c374d1ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:66:49:4e:5a:b6:a5:8f:41:47:1a:1b:47:
fa:a6:16:15:92:42:67:84:89:e7:c5:66:6d:ab:1a:
bb:47:47:b6:3e:af:ce:fc:22:65:48:d9:e8:ae:24:
f0:8c:e4:4f:9c:12:04:1a:65:61:14:41:5b:66:ea:
5e:66:12:6e:0b:5e:d4:4e:c2:95:a1:a9:f7:62:b4:
1c:9b:e1:c9:60:fc:62:9c:ed:3d:13:76:e2:a7:48:
90:ce:cc:b6:dd:8c:b2:29:97:e9:a4:0f:bf:b6:e0:
46:57:a3:20:67:44:ca:f8:90:d2:b5:de:61:49:be:
e1:d4:14:1a:93:11:a8:7f:a3:5a:9b:6f:4c:4e:41:
bf:2e:24:99:8b:f6:28:79:e6:0d:40:97:34:e0:66:
73:11:72:22:6e:12:c2:8c:1f:ff:33:6e:f7:a3:a8:
88:24:71:b8:fa:2b:f7:b7:cb:4e:cd:6e:40:aa:47:
fa:a5:8f:66:1b:2d:67:a2:e2:b6:d6:6b:d7:1b:39:
c8:d2:29:5c:8f:ae:db:85:59:cb:bf:15:41:82:46:
b3:a8:f3:a7:02:13:95:e7:7b:4b:14:49:a7:0c:69:
4d:d1:c1:8e:b2:8b:bc:1b:75:ae:1e:83:fa:36:89:
e9:11:e5:90:d4:0b:55:8d:f8:0a:ee:f6:e2:a1:e9:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:D9:D7:34:CD:74:0B:57:22:EB:38:19:C7:E9:3C:37:4D:1E:E7
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fe:9d:fe:df:33:56:10:ca:2c:92:cb:ea:76:a6:7d:b4:bc:
2e:69:4e:ef:9d:58:4a:4d:e2:7a:8a:c8:a3:bc:cc:01:09:14:
64:f8:b4:6b:7b:4a:5e:a2:53:c9:2d:a6:f0:bb:86:a3:ad:4b:
a7:ac:f2:32:60:54:cf:30:84:fe:27:e7:e6:27:28:75:d5:16:
5c:6e:1a:75:8f:22:c2:9b:7b:8b:f6:5f:df:9b:25:43:81:cc:
6f:f2:d1:27:07:5f:e2:ae:3d:fa:cd:8e:f0:16:8f:a2:15:b1:
73:32:04:6d:3c:54:88:6e:6a:bb:5f:ff:ca:cc:ca:b8:cd:32:
9f:90:6b:6c:97:ec:16:ef:7a:63:77:e9:e8:99:1b:c1:75:16:
8a:6a:12:8b:04:8d:e6:34:a6:e1:f7:2f:df:5f:eb:37:92:99:
fb:96:93:4a:6f:89:1f:51:5f:02:4b:2a:fd:73:0c:18:e3:d3:
83:0a:01:f5:f5:f2:2e:dd:8c:b1:9c:4f:43:9b:e7:0f:9e:ec:
d4:ad:71:c8:01:f8:64:7e:00:87:e8:fe:99:5b:18:3c:cb:a9:
6f:63:aa:51:fd:ff:72:13:ce:01:ee:e3:41:23:d1:64:20:8c:
e4:40:52:22:f1:db:e6:9b:71:37:7d:cf:8c:ca:2c:a5:2e:73:
cb:a2:bb:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYX6jQX86SZ4Hr8/O7VLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzBjZjA0YTE0ZjZmZjc4YjE4ZjBjMDA3NTc4ODIyMGFm
NzM5MWMwHhcNMjYwMzI2MDkwMjI4WhcNMjYwMzI3MDkwMjI4WjAzMTEwLwYDVQQD
Eyg4NTFiZDlkNzM0Y2Q3NDBiNTcyMmViMzgxOWM3ZTkzYzM3NGQxZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5ZmSU5atqWPQUcaG0f6phYVkkJn
hInnxWZtqxq7R0e2Pq/O/CJlSNnoriTwjORPnBIEGmVhFEFbZupeZhJuC17UTsKV
oan3YrQcm+HJYPxinO09E3bip0iQzsy23YyyKZfppA+/tuBGV6MgZ0TK+JDStd5h
Sb7h1BQakxGof6Nam29MTkG/LiSZi/YoeeYNQJc04GZzEXIibhLCjB//M273o6iI
JHG4+iv3t8tOzW5Aqkf6pY9mGy1nouK21mvXGznI0ilcj67bhVnLvxVBgkazqPOn
AhOV53tLFEmnDGlN0cGOsou8G3WuHoP6NonpEeWQ1AtVjfgK7vbioelPYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUb2dc0zXQLVyLrOBnH6Tw3TR7nMB8GA1UdIwQY
MBaAFJLAzwShT2/3ixjwwAdXiCIK9zkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUt
NGNmNWRlZGE1YzRjLzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUtNGNmNWRlZGE1YzRj
LzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP6d/t8z
VhDKLJLL6namfbS8LmlO751YSk3ieorIo7zMAQkUZPi0a3tKXqJTyS2m8LuGo61L
p6zyMmBUzzCE/ifn5icoddUWXG4adY8iwpt7i/Zf35slQ4HMb/LRJwdf4q49+s2O
8BaPohWxczIEbTxUiG5qu1//yszKuM0yn5BrbJfsFu96Y3fp6JkbwXUWimoSiwSN
5jSm4fcv31/rN5KZ+5aTSm+JH1FfAksq/XMMGOPTgwoB9fXyLt2MsZxPQ5vnD57s
1K1xyAH4ZH4Ah+j+mVsYPMupb2OqUf3/chPOAe7jQSPRZCCM5EBSIvHb5ptxN33P
jMospS5zy6K7bQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:32 2026 by rpki-client