Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
File: KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft (raw, json)
Hash identifier: XQWHn4XoZvfrsNsE8qbR9+FvUcN4faP7qxqfY5zHtr8=
Subject key identifier: A2:C1:99:FF:41:F0:48:8B:92:BE:04:D7:7D:59:5F:AF:3E:14:08:89
Authority key identifier: 28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
Certificate issuer: /CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Certificate serial: 019E2BF12A1B1D39BF2F310AFEFF74661E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
Manifest number: 188A
Signing time: Fri 15 May 2026 14:01:25 +0000
Manifest this update: Fri 15 May 2026 14:01:25 +0000
Manifest next update: Sat 16 May 2026 14:01:25 +0000
Files and hashes: 1: KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl (hash: yuBPV8CRqfMUvbjuHH8l//Ksn2JzPDb2VmviK7iIc/s=)
2: ubLK8V8AN7yzYWZ8GjbAC2BzmVk.roa (hash: soBVeg6Yikd3nUzcvoeLHOcCe6rQjh4SHsU1xYr91hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:f1:2a:1b:1d:39:bf:2f:31:0a:fe:ff:74:66:1e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Validity
Not Before: May 15 14:01:25 2026 GMT
Not After : May 16 14:01:25 2026 GMT
Subject: CN=a2c199ff41f0488b92be04d77d595faf3e140889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:0f:e7:5e:9f:73:cc:e3:52:f1:93:4c:20:
61:ca:2a:e5:20:a1:0f:51:a5:25:80:90:17:88:ac:
e5:01:bb:db:e9:8e:5d:d3:3b:12:ea:11:c6:69:9b:
24:a1:8c:ea:f7:5f:e1:de:a1:e2:5a:c2:fc:d5:e6:
15:57:90:52:30:94:e8:49:97:1f:ee:2f:70:a0:20:
4f:d1:bb:8e:14:c1:76:0a:77:03:10:99:10:4e:02:
6c:bf:54:de:5d:96:8f:01:ff:57:87:64:85:85:bd:
fb:15:5f:46:0a:4a:0f:a5:8c:1e:45:9d:fb:c4:5a:
e9:21:3c:6a:c9:b4:e1:f5:a9:0e:7e:99:85:f3:a0:
dd:5b:1a:bb:a2:23:3a:21:93:a6:10:e6:17:ef:43:
ec:1f:eb:c8:46:3b:e6:ed:82:ca:45:8a:16:f6:f5:
e1:2b:9c:f0:70:02:06:a6:cf:bd:45:69:69:e8:90:
28:4f:de:eb:03:8f:6f:fa:58:41:bb:5a:1c:e6:72:
8d:40:0a:88:f3:9c:75:2d:02:7c:6c:29:b6:7a:1f:
22:2a:23:82:a0:4e:64:27:ab:e1:57:8c:d3:ef:aa:
58:c5:c8:23:de:c8:3f:53:e4:2d:38:7e:32:29:ec:
a1:b8:48:8d:8d:03:ef:dd:a3:b0:3c:5e:b2:0b:83:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C1:99:FF:41:F0:48:8B:92:BE:04:D7:7D:59:5F:AF:3E:14:08:89
X509v3 Authority Key Identifier:
keyid:28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:86:30:0c:70:ca:5c:85:c5:e3:1f:8a:d8:70:f3:16:69:
17:89:30:2b:11:68:e2:d3:bc:8d:c3:39:d7:ac:09:8b:33:13:
b4:ee:88:46:64:c0:78:15:a0:8f:9a:16:cf:73:d3:2a:55:3a:
93:ed:d5:7f:c5:b9:e9:24:43:eb:ac:f7:dd:5d:08:c6:79:cf:
b2:e1:9c:f6:5f:70:3d:15:c4:f4:d5:61:77:92:3a:3d:8e:48:
bd:fa:8b:3b:6e:27:6b:0f:5b:eb:01:59:99:28:ec:a0:9d:63:
7b:7c:f7:e0:51:58:0e:0d:91:3d:e4:f5:5b:c3:55:51:51:c3:
3c:e9:12:ca:e6:f0:f4:1b:31:ec:50:bf:34:88:4f:9c:d1:58:
8b:ea:0a:53:49:a6:19:da:ad:8b:a3:92:3e:4a:8d:a4:c8:8c:
02:90:77:4c:29:06:d4:82:8c:9f:22:ac:cf:07:88:2a:6f:9b:
47:43:59:a2:a1:a4:0b:39:d6:dc:b1:7a:c0:15:1b:ef:25:fc:
44:11:00:55:f7:d8:55:2d:19:cb:f9:8d:7e:9a:27:28:68:95:
1f:67:cc:7e:b5:1d:78:0f:3b:6d:ce:71:46:c2:04:6a:95:b9:
44:b4:ef:c1:8a:30:cb:12:df:21:bf:b3:54:27:15:85:61:bb:
81:ca:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:11:10 2026 by rpki-client