Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: m+t3oH7fhkp8FBTteftJZU0AR/NSs1mCkDLD0Tb0AS4=
Subject key identifier: 54:8C:A6:CB:C8:24:A6:B7:46:F8:50:F6:55:C3:0D:CD:1B:F5:08:56
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019DED48AD49841D9531F87DE9ACB3407DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 147B
Signing time: Sun 03 May 2026 10:00:56 +0000
Manifest this update: Sun 03 May 2026 10:00:56 +0000
Manifest next update: Mon 04 May 2026 10:00:56 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: /NWRE7kT+SSkq3j1kYpP+mu8rZ2fJEWui22I0YikC8Y=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:48:ad:49:84:1d:95:31:f8:7d:e9:ac:b3:40:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: May 3 10:00:56 2026 GMT
Not After : May 4 10:00:56 2026 GMT
Subject: CN=548ca6cbc824a6b746f850f655c30dcd1bf50856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:2b:26:e5:cd:51:7b:bf:cd:93:5d:ea:a5:
d6:30:3d:4a:41:c8:dc:4d:04:a6:28:e8:d5:c8:19:
c7:20:2f:b0:b8:ee:91:c4:30:5d:f9:43:d8:a0:b0:
43:07:5c:c1:a4:09:89:2f:eb:4a:1b:81:36:fd:2a:
3b:51:98:f7:b7:af:aa:82:81:28:5e:81:cc:43:82:
af:a4:88:13:a0:95:3d:6e:c1:b9:d1:9f:d7:5a:b2:
f5:35:47:6d:80:21:8e:f3:3a:20:b7:4b:fd:d2:eb:
13:65:79:16:18:bf:cd:1c:b4:b8:0f:29:8f:db:e0:
7f:62:5a:20:39:4e:ea:fb:8a:ee:64:33:f5:6c:63:
72:ad:42:35:02:07:5b:f0:38:0c:b3:c4:6f:d2:bc:
43:ad:fb:3f:ac:ec:dd:21:37:6a:f5:66:2d:f2:87:
60:14:ec:5c:be:44:95:63:5e:a8:a5:48:a0:21:ea:
b8:b4:41:f9:f8:19:7e:24:61:30:ee:53:41:cd:af:
35:cf:b9:da:a9:9d:0e:10:c7:df:52:1e:3b:c4:1c:
39:90:54:aa:6f:49:0c:cd:a9:4e:6e:1a:ed:62:18:
13:21:15:06:38:e7:28:01:80:a8:46:7d:bf:07:68:
41:78:e0:2b:7a:1a:e0:56:01:df:fb:21:7d:79:e1:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8C:A6:CB:C8:24:A6:B7:46:F8:50:F6:55:C3:0D:CD:1B:F5:08:56
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e7:cc:cd:f1:90:bd:9e:15:ac:50:82:50:4e:f1:01:35:c6:
da:1a:13:ee:0b:9a:16:80:4e:9e:5e:17:bb:b6:f3:2e:29:72:
56:5e:64:4a:6a:4c:ea:79:4f:8d:5f:7f:e2:49:7f:1d:a7:3c:
80:2e:b6:0b:06:0d:04:c9:79:e5:16:61:6e:d5:8e:5f:f3:1f:
8b:2e:79:9e:a3:f8:bb:69:7c:0d:6c:b9:0d:6a:4f:87:7d:06:
a9:21:cb:66:33:29:05:de:83:b9:72:8f:f3:f7:d8:e7:3d:cb:
8f:73:11:2a:59:cf:5a:46:8f:53:b2:5f:ce:c3:f0:8e:6f:01:
05:eb:bf:a6:cd:df:2b:9a:57:d0:91:0d:39:67:4d:73:ef:29:
b9:67:e3:e4:f4:63:6b:49:74:f1:31:51:a8:f6:e0:12:46:ea:
61:4c:8c:8a:f1:4b:4d:ee:31:49:0d:8c:0e:be:ff:8c:20:d6:
cd:2e:d0:40:c1:b1:94:26:ef:32:c8:f4:1a:8e:ff:0f:11:ff:
e2:b8:06:0c:9a:a8:4f:11:5e:8d:fb:68:c2:9d:db:29:1e:ff:
49:0b:22:2d:21:ad:d0:9e:9f:65:f0:a7:d3:81:7c:06:0f:3e:
e8:82:6d:74:a7:56:20:2e:21:94:c1:1d:40:0b:9b:8c:90:2c:
0d:ce:8e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:14:17 2026 by rpki-client