Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: FP9M2tQc2mNl8IwulJ6vEimXQU572WQAJfkZrLSs96g=
Subject key identifier: A2:AE:BF:93:24:E5:92:36:FC:7C:74:75:1C:8C:E2:CE:FC:3E:2D:CC
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 01A110A8EBA20F123158A18F7C2617A58545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 161B
Signing time: Tue 06 Oct 2026 10:01:08 +0000
Manifest this update: Tue 06 Oct 2026 10:01:08 +0000
Manifest next update: Wed 07 Oct 2026 10:01:08 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: Il8p0W068mHbsic2RCg97OpFvKW/zYtUUix/uoRk7Qk=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:eb:a2:0f:12:31:58:a1:8f:7c:26:17:a5:85:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Oct 6 10:01:08 2026 GMT
Not After : Oct 7 10:01:08 2026 GMT
Subject: CN=a2aebf9324e59236fc7c74751c8ce2cefc3e2dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5d:28:31:80:55:39:3c:7c:b2:b1:80:9f:30:
25:ff:6c:38:8a:78:7e:f6:66:d1:d1:70:ee:7f:78:
60:de:d7:a8:7a:ae:82:35:b5:61:e2:21:9f:6e:bc:
da:25:d0:31:b2:77:12:8f:80:24:6e:32:10:09:6d:
40:aa:c6:36:a9:42:6a:8a:52:74:c3:35:b2:1b:84:
3a:1b:82:4a:ad:ed:54:d5:e6:8f:fa:f8:4a:a4:8c:
c0:3a:2f:16:60:05:b0:3e:d3:77:27:85:1d:63:5c:
20:e5:2e:08:6c:82:1c:0e:ff:a4:6d:b0:c3:d4:23:
a2:9e:21:dc:85:d5:66:99:40:8b:c0:63:fc:c4:f1:
fa:f2:fd:c3:74:f6:c6:00:17:83:1b:de:eb:88:27:
ad:e1:fc:ef:48:4e:57:71:4f:af:5d:dd:69:ac:08:
68:4b:78:4d:06:69:f0:75:4d:33:d2:5e:c8:b0:22:
d2:bd:cd:9c:db:d7:bf:26:59:91:0e:a3:a1:28:5f:
ab:db:1c:89:55:16:99:45:c2:8e:49:e7:c2:62:2f:
f3:73:73:87:76:dd:06:ec:0a:6d:cf:46:fc:57:b9:
08:81:41:b4:b3:2f:b4:6c:2f:74:38:5e:fe:c3:43:
4e:4d:84:2c:c8:51:71:e4:c2:98:fe:f5:18:a5:85:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:BF:93:24:E5:92:36:FC:7C:74:75:1C:8C:E2:CE:FC:3E:2D:CC
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:96:78:f1:df:69:1f:2e:bc:41:a0:5e:f4:d3:89:e1:d8:
7f:6a:8a:ea:9d:53:15:99:16:de:8f:64:44:2b:1a:8e:1d:69:
98:09:dd:b8:f5:e3:61:50:57:6b:73:f1:d8:a4:ae:b4:08:23:
23:ad:78:ef:21:34:45:54:9a:7d:28:90:b4:8f:36:6d:c9:f7:
88:c3:f0:9f:72:c3:f6:62:af:3a:36:cc:3d:75:35:a9:a9:01:
a6:5c:25:98:9b:79:24:3f:91:ec:eb:b8:29:76:25:ce:3d:93:
94:68:c9:78:b2:6b:79:fe:61:e1:ff:c2:5a:87:6e:7d:0e:11:
9c:0c:f6:67:c7:18:6d:5d:d9:96:ae:97:56:8c:ad:5d:22:52:
e9:19:06:0e:70:69:a7:eb:9b:cc:21:60:f3:44:cf:1f:09:82:
6c:f0:77:db:07:b6:1f:7c:e3:1e:5b:34:2f:00:ce:33:bc:19:
d6:e7:4c:b8:a6:7a:f3:3d:5c:ca:b4:a9:0a:5d:c8:ef:71:5f:
2a:33:38:b9:c8:9a:f1:67:56:7a:c3:33:c7:38:33:43:38:f2:
80:bf:f8:b4:b1:12:28:bc:48:87:fc:8f:99:0c:51:71:a2:93:
e7:9e:15:c2:69:dc:ca:43:80:bb:ea:6c:31:33:21:92:34:9f:
d3:bb:e2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:06:40 2026 by rpki-client