
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
File: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft (raw, json)
Hash identifier: lLLynXKgtL46gqHhOuSIsjT8W/Vl0NpW+6Ix5H/6LJE=
Subject key identifier: 09:14:14:C7:A3:37:7A:08:9D:CB:75:2B:9B:D2:63:72:83:8E:42:D9
Authority key identifier: 2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
Certificate issuer: /CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Certificate serial: 01A181501CCB521F41AB351EA045FB32D767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
Manifest number: 137C
Signing time: Wed 28 Oct 2026 07:01:13 +0000
Manifest this update: Wed 28 Oct 2026 07:01:13 +0000
Manifest next update: Thu 29 Oct 2026 07:01:13 +0000
Files and hashes: 1: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl (hash: Ocb2M2Me+Qq5nGYx4ZSsEPl56dhy8Z5CWvJiQJJSeZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:1c:cb:52:1f:41:ab:35:1e:a0:45:fb:32:d7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Validity
Not Before: Oct 28 07:01:13 2026 GMT
Not After : Oct 29 07:01:13 2026 GMT
Subject: CN=091414c7a3377a089dcb752b9bd26372838e42d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:61:56:c7:ae:a0:1e:15:48:cb:b4:59:09:
68:3f:8a:1f:1d:b5:cb:50:e2:39:9e:e8:06:49:6d:
f2:40:60:0a:38:7f:ab:eb:0a:38:7b:1e:1b:8d:f8:
94:ce:82:68:af:ab:a1:0b:f6:b2:18:4c:77:5e:a3:
1f:08:54:10:c1:ab:c8:96:4e:bb:25:51:02:fc:0b:
12:c2:b9:f1:24:10:68:1b:5f:26:31:08:98:fe:94:
0e:bb:e1:c7:1b:e5:1a:55:76:e5:14:03:33:bf:7c:
41:4c:8e:ad:1f:4f:f2:e9:cd:0c:a1:39:9f:e8:71:
36:26:ae:f4:93:2e:7a:93:f9:a3:fe:b1:87:4a:97:
49:53:dc:6d:ec:ae:ae:c1:a5:bc:f5:f2:f1:53:ab:
7a:b6:2a:15:3a:99:e0:08:02:0a:fd:f3:b4:c2:c9:
bb:67:fe:b0:0b:dd:f0:e7:1d:f6:3c:f8:fa:ea:58:
58:ad:8e:75:65:71:08:39:14:3a:a6:10:b3:fa:4b:
37:32:a2:91:3c:b0:85:a6:12:3a:a6:f0:4e:66:e6:
67:59:09:b1:96:a9:7a:e0:15:99:9b:fa:94:a4:fe:
7c:df:e0:d6:8e:db:0c:11:c7:f6:2a:78:b5:b6:0f:
cd:c4:04:88:ed:e4:74:9f:72:d0:9d:da:cc:34:5b:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:14:14:C7:A3:37:7A:08:9D:CB:75:2B:9B:D2:63:72:83:8E:42:D9
X509v3 Authority Key Identifier:
keyid:2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a5:e8:a3:b0:7a:f1:5f:54:dd:c5:4b:1b:81:21:a4:a5:2d:
71:4b:9f:e9:09:2c:22:70:c8:b8:e6:6e:58:91:4b:52:50:a5:
22:6b:8f:0f:bc:2e:f3:c3:03:e3:34:6d:84:78:1d:2f:75:a8:
d0:d7:63:e7:5e:c9:e3:95:d2:2b:7e:3d:7e:c3:1e:bd:52:cd:
39:5b:95:c1:14:7e:b8:e8:26:aa:cf:d3:1e:1b:60:c5:bb:6f:
fa:21:b7:65:77:c2:48:d7:0f:a4:e7:64:ac:52:bd:20:48:61:
34:d1:26:8e:ca:d5:ed:c5:76:a3:97:6e:e0:b2:68:44:a8:02:
f5:dd:06:f0:5a:dd:76:e1:4f:a4:91:87:bc:4f:96:88:7e:3c:
bc:56:3f:7b:26:de:4f:92:18:73:c3:22:1d:e8:e7:f4:50:9c:
f8:86:34:3f:af:ae:23:04:72:06:72:6a:3b:fa:08:41:30:a3:
61:fe:59:6c:90:a0:cf:d5:3c:42:20:4e:14:e4:67:a6:66:b9:
8e:4e:86:d7:cd:01:ec:c3:9a:bc:67:58:02:16:21:48:5d:88:
63:83:68:d0:67:ee:78:50:ec:0a:2f:65:92:85:b6:c2:8a:46:
ee:b0:f8:af:d3:41:33:91:64:b0:d4:18:8d:26:6f:d4:63:36:
e7:b7:aa:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBUBzLUh9BqzUeoEX7MtdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNGYyYWY4NDM3ZTcxOTNkNTc4ODVmYjYzYmRiMDNjMDNi
YTE5YmMwHhcNMjYxMDI4MDcwMTEzWhcNMjYxMDI5MDcwMTEzWjAzMTEwLwYDVQQD
EygwOTE0MTRjN2EzMzc3YTA4OWRjYjc1MmI5YmQyNjM3MjgzOGU0MmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JNhVseuoB4VSMu0WQloP4ofHbXL
UOI5nugGSW3yQGAKOH+r6wo4ex4bjfiUzoJor6uhC/ayGEx3XqMfCFQQwavIlk67
JVEC/AsSwrnxJBBoG18mMQiY/pQOu+HHG+UaVXblFAMzv3xBTI6tH0/y6c0MoTmf
6HE2Jq70ky56k/mj/rGHSpdJU9xt7K6uwaW89fLxU6t6tioVOpngCAIK/fO0wsm7
Z/6wC93w5x32PPj66lhYrY51ZXEIORQ6phCz+ks3MqKRPLCFphI6pvBOZuZnWQmx
lql64BWZm/qUpP583+DWjtsMEcf2Kni1tg/NxASI7eR0n3LQndrMNFsAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkUFMejN3oInct1K5vSY3KDjkLZMB8GA1UdIwQY
MBaAFCpPKvhDfnGT1XiF+2O9sDwDuhm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2s4cS1FTi1jWlBWZUlYN1k3MndQQU82R2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lNzE4ZGItMmU0NS00YzBjLTk3M2Yt
ZGZhNTM4NDI4ZThmLzEvS2s4cS1FTi1jWlBWZUlYN1k3MndQQU82R2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lNzE4ZGItMmU0NS00YzBjLTk3M2YtZGZhNTM4NDI4ZThm
LzEvS2s4cS1FTi1jWlBWZUlYN1k3MndQQU82R2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKXoo7B6
8V9U3cVLG4EhpKUtcUuf6QksInDIuOZuWJFLUlClImuPD7wu88MD4zRthHgdL3Wo
0Ndj517J45XSK349fsMevVLNOVuVwRR+uOgmqs/THhtgxbtv+iG3ZXfCSNcPpOdk
rFK9IEhhNNEmjsrV7cV2o5du4LJoRKgC9d0G8FrdduFPpJGHvE+WiH48vFY/eybe
T5IYc8MiHejn9FCc+IY0P6+uIwRyBnJqO/oIQTCjYf5ZbJCgz9U8QiBOFORnpma5
jk6G180B7MOavGdYAhYhSF2IY4No0GfueFDsCi9lkoW2wopG7rD4r9NBM5FksNQY
jSZv1GM257eqpA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:49:59 2026 by rpki-client