Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: kg+5EuJ08jLOkB3v2Fu+S0DFNTSNGLMMEXAis5k8IYM=
Subject key identifier: 7B:6E:89:24:AF:6A:91:29:58:C9:B6:5E:8A:BC:20:FC:F7:08:C6:68
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 019D39E5617F3984CAB7CEE8451564A57E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 15E3
Signing time: Sun 29 Mar 2026 14:00:27 +0000
Manifest this update: Sun 29 Mar 2026 14:00:27 +0000
Manifest next update: Mon 30 Mar 2026 14:00:27 +0000
Files and hashes: 1: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: e+hZI0dpdQTZ+D2Vdm4cv3eEhP1cwzoVGq5JLM1fZDM=)
2: qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa (hash: rirbnyAccpPKWOcuInuVk5mCK3dHmlXm6puqdnxTn/s=)
3: vG177J2dohuE08wHX2-c78lEhcw.roa (hash: 3JSqj0nOnGoEw7PHeM+wBIAwqea4bnBMwwfIgvqc52Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:61:7f:39:84:ca:b7:ce:e8:45:15:64:a5:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Mar 29 14:00:27 2026 GMT
Not After : Mar 30 14:00:27 2026 GMT
Subject: CN=7b6e8924af6a912958c9b65e8abc20fcf708c668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:03:25:f9:a8:80:69:f8:14:00:35:df:e7:ed:
83:e8:9c:03:19:70:ad:33:14:43:4f:e6:70:13:cc:
f7:66:64:ff:d6:02:8d:db:78:89:54:05:92:67:89:
98:d9:75:83:06:79:cb:30:62:02:27:7d:9a:6f:6c:
c8:11:18:01:11:ca:d0:fa:26:d6:3c:2f:fe:1f:d5:
7f:b1:38:7b:c5:97:51:3f:40:fb:1b:63:46:1f:95:
d8:f7:cb:93:97:a5:6e:48:b2:02:26:ff:7a:06:3f:
18:71:91:a0:0d:a0:57:8c:57:a7:74:61:5c:23:d4:
a4:4f:a8:3e:ee:4b:9f:45:9e:c2:84:08:7c:21:6b:
07:84:d0:fc:2f:6e:29:17:5f:6c:75:cc:01:a7:50:
c3:f4:b0:f5:5d:c6:95:be:7e:ee:26:dc:e4:9c:89:
57:7c:f0:fa:4e:cd:85:31:3b:78:fc:55:e1:a1:47:
72:51:3b:0d:03:46:18:a2:7d:bd:ce:dc:e2:39:86:
e2:24:9d:cd:29:61:f4:c0:26:11:f8:59:23:3e:6a:
ad:86:38:e0:57:d3:67:81:39:02:62:b8:f9:4f:83:
6a:1a:1f:b6:57:d1:6c:e1:0e:6b:a3:3d:fd:5a:1b:
52:fe:80:36:6a:f9:64:cb:be:bf:73:fd:2a:d0:4b:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:89:24:AF:6A:91:29:58:C9:B6:5E:8A:BC:20:FC:F7:08:C6:68
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8d:0c:cc:53:cf:26:e6:95:90:e3:25:e2:03:4d:e2:11:3f:
d5:54:99:80:22:2a:45:55:0a:78:92:fb:9a:99:ad:39:1e:e2:
99:55:47:69:00:5d:8d:98:40:ec:f4:87:03:f7:85:96:1d:81:
a2:8d:ca:2e:c9:4b:78:ff:2c:8c:ac:39:47:2b:81:d7:f7:b4:
12:0e:0e:93:63:70:28:c5:2e:cf:96:46:de:6a:65:59:d5:3c:
d1:58:db:e5:a0:23:7d:15:0e:cb:17:56:7b:a1:f7:13:17:3c:
d2:a4:07:f3:7c:e2:39:1d:eb:29:14:c9:34:6d:78:88:d3:df:
6c:45:56:44:89:67:38:29:3d:2b:ba:d2:9e:52:81:e5:74:78:
b7:61:e9:b6:22:dc:72:93:32:a8:73:74:d3:1b:5e:2b:46:e3:
31:03:b6:52:c9:af:4f:19:66:69:11:24:54:dd:17:5e:49:f5:
2b:be:a6:10:db:8f:97:7f:60:95:57:9e:ae:e8:2b:e4:4d:5e:
92:e6:8e:5f:65:d3:b7:c1:ac:82:c9:94:84:3f:d5:29:0a:c3:
27:a9:13:b5:9b:24:69:09:b3:3b:a6:22:a1:5b:fe:6b:46:da:
e8:ba:7b:c3:79:16:82:40:f7:cf:69:cb:1b:59:71:73:e8:56:
2f:07:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:01 2026 by rpki-client