Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
File: kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json)
Hash identifier: +vvvax55W5m9ryMTjN2xzxIsfWqGgfiWf3e7vvYkDHY=
Subject key identifier: E0:54:02:9B:15:E1:0D:11:B2:FA:3B:37:EA:A2:21:35:6D:2F:56:6C
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Certificate issuer: /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial: 019D394174EA045E574F9D09BC979AB5C897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:24 +0000
Manifest this update: Sun 29 Mar 2026 11:01:24 +0000
Manifest next update: Mon 30 Mar 2026 11:01:24 +0000
Files and hashes: 1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: Qj8DXtBNhCIKvQ6mmbkLrknLeyzh3Hc7pKf0EbPrJcY=)
2: nHDzEWljU7MsVz78dLg5QpTrFFg.roa (hash: xbqDoLAsVsrweaY+Yx0dFP2C1Mp47CbJGV+7MwZaYi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:74:ea:04:5e:57:4f:9d:09:bc:97:9a:b5:c8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92479cae284765d628044119009880d28a7560b1
Validity
Not Before: Mar 29 11:01:24 2026 GMT
Not After : Mar 30 11:01:24 2026 GMT
Subject: CN=e054029b15e10d11b2fa3b37eaa221356d2f566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:45:5b:c1:c9:24:6c:7f:d4:91:27:8b:5a:
9d:03:5c:51:f6:d3:d3:4e:1a:52:d0:0a:d2:64:c9:
8a:54:c4:d5:b2:b2:b4:78:8e:e6:b2:e3:a6:57:38:
e3:f8:d9:21:1e:47:8e:21:06:9a:e6:a6:91:aa:57:
d1:c6:3e:72:f0:d5:78:4b:9f:08:d9:a0:8f:2e:34:
06:39:11:0b:28:1f:07:69:d8:0b:d4:24:a4:9d:cb:
a5:a4:8f:ee:0f:b5:26:b5:eb:df:0e:16:08:8f:97:
cd:9f:51:33:ef:8e:7f:2a:01:19:85:75:65:78:ca:
21:2c:4b:81:c9:22:3c:dd:22:3e:c7:ac:15:99:61:
4a:1e:db:09:d5:05:b2:ac:3a:9b:d3:8b:cb:3a:c7:
bf:85:08:3b:5e:d6:87:8f:72:86:b0:56:91:1f:7a:
95:52:b9:57:b7:6f:48:65:09:68:86:dc:28:a6:6d:
db:a2:c6:51:88:d0:ee:ca:63:8e:1f:85:03:cf:bb:
2f:37:d9:57:b1:91:98:aa:a2:75:8a:67:f0:00:58:
3c:95:45:f9:0e:c7:88:09:92:4f:7f:a5:4b:91:fc:
2b:6e:9a:8a:2f:b5:cc:d3:9f:5e:69:ad:7a:3c:e0:
3e:22:13:7a:90:2f:60:14:17:f7:0b:3b:4d:54:c0:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:54:02:9B:15:E1:0D:11:B2:FA:3B:37:EA:A2:21:35:6D:2F:56:6C
X509v3 Authority Key Identifier:
keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:98:9b:5e:01:b2:9a:79:72:96:46:f0:c2:f0:c7:fd:46:71:
f1:49:d8:b0:7b:23:14:c3:25:38:e2:63:1b:e7:85:8e:a5:4a:
07:32:db:13:47:be:73:7c:f0:0e:1d:15:8c:e4:b3:44:20:12:
ef:c9:2a:bf:6c:ce:91:da:95:d8:59:a7:b7:25:2b:c3:d3:13:
77:b1:4b:01:74:f2:1f:e7:86:23:db:85:95:23:02:2d:59:d3:
ba:96:fa:51:d4:0f:03:ea:aa:dd:03:fa:6f:2e:cd:3c:a3:03:
1f:10:f6:e2:14:87:47:73:94:c9:25:75:40:47:c0:2d:21:0e:
7b:05:d3:68:c0:8a:5a:47:95:9c:12:8c:ab:c0:b1:95:9c:f7:
a8:41:a8:ea:06:5a:23:bf:e9:36:c1:a9:dc:81:78:98:1b:1b:
87:b3:c1:b7:b5:11:41:9b:58:c5:d8:a4:d1:4d:84:f8:28:a7:
1c:b1:0b:02:df:17:77:b3:ff:23:a5:c5:6e:94:25:4c:9e:fc:
a4:2f:fe:4d:5f:ed:5e:b1:3f:69:7a:7e:ec:28:81:0d:c5:69:
a1:20:8b:89:10:3b:cb:32:3c:b3:f8:9f:c0:32:8d:6e:9f:3f:
62:ad:7d:ed:df:e7:a9:2b:d1:67:24:34:49:f0:91:cb:69:5e:
83:fe:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:36 2026 by rpki-client