Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: hi+LrSDksulGo8O+GHUVOacpW8Quf6+zt3ifbkAfWSE=
Subject key identifier: 79:EF:3A:51:3B:B0:ED:B3:FC:88:C5:AE:70:BA:2B:D1:14:6E:A2:FF
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 01A01F423E16BF897EAE9477ACBD2B617B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 159E
Signing time: Thu 20 Aug 2026 13:00:29 +0000
Manifest this update: Thu 20 Aug 2026 13:00:29 +0000
Manifest next update: Fri 21 Aug 2026 13:00:29 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: V0BX3zNnWZN70rKRlY9ThYtfpuIOWkWXBAHx67VtVTg=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:42:3e:16:bf:89:7e:ae:94:77:ac:bd:2b:61:7b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Aug 20 13:00:29 2026 GMT
Not After : Aug 21 13:00:29 2026 GMT
Subject: CN=79ef3a513bb0edb3fc88c5ae70ba2bd1146ea2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:13:e5:12:2b:dd:24:53:20:b2:38:0e:21:3b:
f2:46:37:04:0c:3a:3e:ac:f4:9a:91:55:17:84:6a:
58:31:7e:aa:5e:b5:97:31:92:5e:b2:c8:98:8e:ea:
cd:63:28:ea:71:f2:74:fa:f2:f5:9f:d1:91:a5:25:
5e:fb:99:4a:63:11:85:dd:62:28:34:dd:a1:72:36:
b4:9c:15:bf:dc:5b:06:cf:0a:9d:ae:2d:7e:57:5d:
21:a2:6e:f4:de:ef:78:8a:98:ad:5b:72:09:44:77:
74:72:88:47:8e:ac:9c:11:bc:23:68:f2:56:dd:b2:
fb:ae:27:82:de:d1:ee:b9:68:cf:4c:9b:3b:69:5f:
98:84:f3:b8:a0:79:69:28:3a:e6:a3:9f:e9:c7:8b:
6a:44:09:72:90:ba:11:f4:a8:e6:90:f5:88:3f:ca:
01:0e:47:92:00:f3:ac:23:22:76:00:a3:1b:5c:3e:
5e:50:39:9c:21:61:30:f5:d5:66:78:ff:9b:8f:9d:
54:e3:8b:c8:8a:de:1a:0b:a4:34:26:bd:d3:ec:f6:
31:69:0e:cb:05:4c:4c:39:6b:dd:a2:9a:db:fa:ce:
e5:32:0e:23:01:61:6a:0b:9d:85:57:d3:68:af:be:
07:2c:14:6f:e9:5f:11:47:69:86:75:80:44:b1:e0:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:3A:51:3B:B0:ED:B3:FC:88:C5:AE:70:BA:2B:D1:14:6E:A2:FF
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:85:07:1b:72:23:14:d0:06:b0:c5:62:f0:0a:5a:b8:bb:1b:
f2:ef:f6:24:06:6a:44:94:26:9e:d4:54:9f:9b:85:1a:0c:dc:
7b:b1:53:07:f2:72:e1:9a:40:6f:e4:2e:a2:f5:d4:9b:11:64:
18:d0:16:ed:f1:1a:ef:49:45:aa:14:32:52:7f:1f:69:e3:2d:
18:65:d3:5f:f6:7c:f6:e0:f5:4d:9e:a4:c3:00:b1:dc:2f:75:
c3:c6:44:98:df:16:b9:45:ba:b5:64:33:af:57:d5:a3:17:12:
ca:83:7f:00:b1:97:1b:bd:fc:4d:ba:d1:b0:5f:7d:8f:35:10:
99:70:5c:8e:0b:2e:0b:b9:a9:5e:a3:6c:ba:1b:f6:ba:5b:11:
cd:a1:28:c2:e0:c4:fb:c6:85:bb:bc:6c:5c:eb:c9:47:e8:af:
a6:38:97:e2:a2:db:bb:cf:dd:37:ab:aa:ab:c5:df:8c:a1:a4:
6b:28:d7:9d:92:50:39:a7:0a:3f:14:69:11:ea:d3:27:7d:32:
be:21:b9:07:f7:b6:6d:3e:a1:1b:e6:45:a4:7f:a3:2b:ac:cc:
68:e0:76:91:19:c2:65:86:f9:74:e8:2b:6c:7f:90:6d:28:70:
ec:ad:b8:8d:91:15:c3:f9:b9:42:25:85:82:83:01:af:f3:fc:
62:c9:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:13 2026 by rpki-client