Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: EgIKSSAnxILxDYmwX8FZC/7LH7hfM07tNGgqA0VNTYE=
Subject key identifier: 3A:69:8E:DB:3F:69:D3:36:98:43:4B:FF:28:11:4E:E5:18:77:8F:A1
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019D058B23E6E7CCB48603A5DA86441D17A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 1403
Signing time: Thu 19 Mar 2026 10:01:37 +0000
Manifest this update: Thu 19 Mar 2026 10:01:37 +0000
Manifest next update: Fri 20 Mar 2026 10:01:37 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: ncNMpzI5YnEUuN9mjqfVIvgBIKsELLtl9eYmTEn3oMk=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:8b:23:e6:e7:cc:b4:86:03:a5:da:86:44:1d:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Mar 19 10:01:37 2026 GMT
Not After : Mar 20 10:01:37 2026 GMT
Subject: CN=3a698edb3f69d33698434bff28114ee518778fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:42:e6:7a:b6:7d:5f:e8:28:91:a2:1d:d8:
a4:7d:3a:73:42:d0:2f:d1:fd:09:7e:62:4e:6a:31:
c9:41:bb:86:73:83:31:c9:9c:95:f9:b9:86:e8:db:
8f:69:8b:92:a7:52:fc:a3:d4:0c:8f:be:3d:b6:01:
de:43:36:f8:e6:c9:77:1c:16:4d:4c:be:2c:17:47:
f3:cc:66:ce:a3:3e:ad:00:f3:33:4a:e4:80:d9:13:
65:c0:80:27:0c:b8:f0:7d:60:d6:6c:48:45:e8:9d:
d2:2c:ad:2d:96:f8:2f:44:b0:79:b5:61:de:40:b9:
d6:e6:01:4b:c1:3b:6f:6d:76:a5:94:ec:ea:31:3b:
51:1f:a1:6d:46:16:97:76:c4:4f:f9:71:a7:13:61:
7a:3b:77:d4:9f:85:3e:c3:db:a0:6d:23:0c:85:38:
7b:3f:35:9d:60:79:24:ac:d6:3b:21:62:07:41:a7:
a7:82:a2:87:bc:70:96:f2:4b:53:de:52:88:31:bd:
95:d2:97:a0:4e:d1:41:b9:de:14:e9:a6:02:71:20:
4b:40:70:0e:28:55:d4:ff:90:11:9f:c8:fb:b1:17:
f8:43:8b:ff:83:fa:47:8b:49:3b:8e:a3:ef:d6:5f:
48:9f:77:c6:88:66:52:0f:e8:3b:5d:1d:4c:cb:2e:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:8E:DB:3F:69:D3:36:98:43:4B:FF:28:11:4E:E5:18:77:8F:A1
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:29:86:03:7c:d9:ad:61:f4:ad:df:f3:eb:54:82:3f:cc:d6:
50:eb:a7:6d:3e:b9:fa:1e:74:65:b9:b5:fe:fc:2c:93:96:2c:
28:31:bd:8f:73:ba:c2:e8:08:32:1d:cb:d0:e1:89:2d:89:20:
5c:04:cf:bd:d9:0a:69:b4:92:a7:b0:ae:fc:71:3d:2e:fb:aa:
61:ff:14:b8:1e:2f:85:56:11:44:33:d2:f7:68:c4:8d:90:28:
9f:0f:61:ec:6b:80:d9:7e:dc:7d:26:f1:b1:17:4a:d6:38:47:
1f:6f:17:1d:f0:4a:1f:45:f6:7e:1b:55:f0:ce:6a:d3:12:3e:
01:fc:46:72:4f:1e:76:ba:a8:5b:f5:38:b6:dd:85:c3:07:81:
f6:21:9e:9c:ad:88:8c:0d:e7:02:d8:40:e2:59:ca:21:8a:9e:
9f:6e:2e:45:c9:85:81:d2:7d:e1:97:d3:dd:f5:18:63:5d:09:
05:cb:54:7a:19:c8:77:6e:fc:c9:6f:87:1b:05:77:53:47:db:
05:d9:2e:c3:0d:3b:e4:d9:71:ff:1c:00:3e:20:6f:5b:77:ff:
d8:43:b4:08:d0:f9:75:00:57:d5:f5:24:f8:18:36:aa:80:67:
c2:b7:a1:1b:30:03:9a:3b:90:f6:e2:e0:80:0b:8f:95:68:ff:
32:08:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:31:16 2026 by rpki-client