
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json)
Hash identifier: H2FrTAYVKgl6+3pc4ltdegFOu1Qh/ABG5F+Lwd8bv6s=
Subject key identifier: B6:5D:DE:4E:98:F7:7C:EF:46:E7:B9:C0:E5:93:E2:47:04:94:E1:94
Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Certificate serial: 01A1DE710F9F27B0E02B2B7CBB16C33B43E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
Manifest number: 030F
Signing time: Sun 15 Nov 2026 09:01:53 +0000
Manifest this update: Sun 15 Nov 2026 09:01:53 +0000
Manifest next update: Mon 16 Nov 2026 09:01:53 +0000
Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=)
2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: 8urWIjLMgyQlJX+GM7OBXoGgvTb3uAHBp4VgE1VE2eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:0f:9f:27:b0:e0:2b:2b:7c:bb:16:c3:3b:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c
Validity
Not Before: Nov 15 09:01:53 2026 GMT
Not After : Nov 16 09:01:53 2026 GMT
Subject: CN=b65dde4e98f77cef46e7b9c0e593e2470494e194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:1f:0c:8c:30:77:cb:c4:44:55:eb:0b:20:
e8:33:51:b6:86:15:2e:ba:d5:6b:51:75:16:41:64:
09:f6:0f:bd:d5:ee:f1:79:a9:d4:e9:02:b0:1a:59:
67:0a:07:2f:fd:29:c4:c5:a7:f5:51:b3:f7:88:af:
17:ee:83:c3:27:a5:17:59:c7:89:9a:f3:63:bc:b3:
05:33:7b:bf:ae:c8:5c:1f:ff:74:03:d8:be:da:2d:
ad:c2:d1:06:ac:9a:66:b3:27:b8:3c:25:60:7f:16:
d7:a1:67:ef:93:4c:71:a6:00:6a:99:c9:c5:84:29:
19:92:8e:42:d0:3d:ab:b7:2e:d6:3a:f4:07:9f:b4:
f1:70:06:9c:cc:fc:73:3f:43:2e:82:30:f9:07:52:
52:7b:79:aa:a1:fc:9d:86:a4:9e:f8:77:7a:09:e0:
84:e3:9e:6e:e3:5c:f3:98:fa:fc:e2:5a:4e:52:4e:
a6:96:28:e3:58:b5:82:67:13:ea:13:f8:31:b0:3b:
36:eb:db:5a:ce:32:2e:26:ca:38:9d:36:b6:b3:55:
76:5d:f1:39:9c:82:c8:30:91:4e:5a:24:74:8e:c3:
82:2d:2e:cf:11:ec:c7:5f:c5:df:19:07:cd:bc:87:
63:16:97:c2:5d:2d:52:93:ce:22:f0:94:79:58:72:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:DE:4E:98:F7:7C:EF:46:E7:B9:C0:E5:93:E2:47:04:94:E1:94
X509v3 Authority Key Identifier:
keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:46:b2:f5:4c:4b:ab:14:d9:ec:81:44:50:8e:f6:f0:25:
ff:e4:3d:88:7e:64:24:b4:54:48:91:f6:e1:2d:af:f5:71:f6:
e8:f6:31:94:f9:45:79:9c:0f:e8:df:43:fe:4c:92:45:45:f8:
79:b5:bf:97:30:fd:a1:0b:e7:ec:d2:1f:f7:19:63:79:79:25:
42:f7:03:63:64:94:c4:bd:47:c3:39:d3:18:55:ea:85:8f:b2:
ec:63:8d:f2:8e:37:f9:2c:00:f3:3f:d8:17:ff:33:df:38:48:
05:65:60:e0:55:88:4f:60:9e:8d:b4:b9:10:71:ba:80:46:b0:
bd:39:3b:4c:0a:9d:64:fc:52:86:9b:2c:69:c2:9f:d9:0b:74:
a7:43:bf:2c:8b:f7:86:94:be:fa:22:65:1f:9a:8a:f0:1a:3d:
6d:71:2d:30:6f:0a:c4:54:73:cf:07:1b:73:d3:99:a1:aa:4a:
a1:bb:c2:41:15:56:1b:87:d7:b7:d1:bd:93:26:85:65:8f:92:
bb:00:2f:25:f9:b4:6b:19:e8:93:a6:c7:d6:9a:e6:07:fb:40:
78:d9:06:df:5b:e8:16:b9:8c:8a:22:68:a5:50:e4:b9:63:43:
70:e1:f1:90:9e:a0:57:8f:62:dc:65:53:43:31:3c:6d:a3:e2:
01:28:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:29:43 2026 by rpki-client