Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
File: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft (raw, json)
Hash identifier: gzG81eVKSBxPY4zolQr4exhpA27iS3AXEvWljumVgQE=
Subject key identifier: 5F:50:72:07:E1:E3:12:E9:62:68:22:A9:7C:CA:5C:96:0A:08:05:E9
Authority key identifier: 2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
Certificate issuer: /CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Certificate serial: 01A08A1F20CC0231F98801CCB9796CD208BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
Manifest number: 12FC
Signing time: Thu 10 Sep 2026 07:01:30 +0000
Manifest this update: Thu 10 Sep 2026 07:01:30 +0000
Manifest next update: Fri 11 Sep 2026 07:01:30 +0000
Files and hashes: 1: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl (hash: v5v2ALKqzpC+IL4q/nUbPIssbqIvn6JNI83y9tN06Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:20:cc:02:31:f9:88:01:cc:b9:79:6c:d2:08:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Validity
Not Before: Sep 10 07:01:30 2026 GMT
Not After : Sep 11 07:01:30 2026 GMT
Subject: CN=5f507207e1e312e9626822a97cca5c960a0805e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:cb:00:bf:c6:8f:95:4a:17:db:85:e4:08:
e4:3d:1c:33:8d:a0:d5:d5:09:8f:9a:ac:27:d5:38:
2c:63:31:81:7b:ee:e7:4b:4c:83:68:66:1c:90:80:
3a:03:90:d7:7a:96:14:d1:2d:31:d6:de:bc:cb:13:
f4:61:fb:57:3a:c4:f5:22:4e:cb:c3:71:32:72:06:
ae:60:8a:07:0d:26:f9:d5:42:ba:8f:a9:63:8e:8d:
16:0f:c5:12:50:48:85:9b:6e:f8:f1:54:64:98:20:
86:1d:3c:ad:bc:78:fa:12:3c:d3:50:70:09:94:bd:
ab:be:b4:a6:50:08:ff:e3:1b:c0:b0:56:c9:19:94:
b2:de:65:3f:ba:91:8b:98:a6:89:cb:82:7b:6b:25:
5c:46:8a:f8:19:93:91:91:95:31:fc:2f:3a:df:0e:
8a:e8:1b:29:1c:b4:0e:13:be:21:a2:c9:37:fe:d3:
06:d0:25:74:ff:fb:b2:1e:45:9f:18:96:c8:e8:f1:
0e:9a:5e:5f:95:2c:ac:98:21:bc:87:dc:bb:b9:ec:
32:71:9e:bf:af:51:dc:d4:cb:c1:21:0f:d0:77:cc:
64:5d:84:84:4e:73:5b:82:ed:da:d0:68:eb:b0:0d:
8e:b5:c4:03:87:3b:cf:27:be:e0:e9:d2:8c:95:b3:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:72:07:E1:E3:12:E9:62:68:22:A9:7C:CA:5C:96:0A:08:05:E9
X509v3 Authority Key Identifier:
keyid:2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:97:6a:41:53:51:20:78:a2:7f:43:22:90:09:a3:78:76:
01:3d:47:61:6d:75:de:f4:cc:67:c9:d2:77:a4:f3:9e:44:23:
2c:e5:29:6d:c0:54:22:d2:74:03:9d:c8:75:a5:37:05:48:e7:
74:1e:d5:c0:bc:d1:fe:d9:37:f7:8e:03:b7:ac:34:6d:a7:01:
4d:22:c5:01:1b:31:b4:86:6c:4d:90:2b:a8:46:86:d5:cb:7c:
bb:f3:26:92:0a:62:73:f8:c3:2e:fa:b8:7a:1e:63:57:8f:2f:
c1:e1:6a:96:ed:2e:3b:d9:f0:19:f1:80:d2:ee:1c:25:7e:99:
37:7f:4b:af:55:41:7e:eb:12:3b:44:b9:4e:1b:a7:50:29:1f:
12:c2:73:f8:1c:96:49:21:ea:b6:64:3b:8c:32:26:69:25:48:
8d:05:fe:56:30:93:34:86:f5:23:9d:82:60:8b:27:91:f0:46:
2d:33:76:df:6d:c1:4e:90:cc:a4:28:f2:8f:ae:3b:7d:d9:80:
c4:98:37:75:cd:1b:30:a3:d1:75:9c:73:7f:fa:4f:6f:a9:27:
f8:a3:a0:92:a2:7e:dc:93:13:7b:bd:2e:57:47:f2:c4:70:a6:
31:5f:8c:1e:d7:f0:c4:ce:10:0b:bd:ee:0e:e6:38:20:d0:5d:
cb:ec:4d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKHyDMAjH5iAHMuXls0gi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNGYyYWY4NDM3ZTcxOTNkNTc4ODVmYjYzYmRiMDNjMDNi
YTE5YmMwHhcNMjYwOTEwMDcwMTMwWhcNMjYwOTExMDcwMTMwWjAzMTEwLwYDVQQD
Eyg1ZjUwNzIwN2UxZTMxMmU5NjI2ODIyYTk3Y2NhNWM5NjBhMDgwNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwufLAL/Gj5VKF9uF5AjkPRwzjaDV
1QmPmqwn1TgsYzGBe+7nS0yDaGYckIA6A5DXepYU0S0x1t68yxP0YftXOsT1Ik7L
w3EycgauYIoHDSb51UK6j6ljjo0WD8USUEiFm2748VRkmCCGHTytvHj6EjzTUHAJ
lL2rvrSmUAj/4xvAsFbJGZSy3mU/upGLmKaJy4J7ayVcRor4GZORkZUx/C863w6K
6BspHLQOE74hosk3/tMG0CV0//uyHkWfGJbI6PEOml5flSysmCG8h9y7uewycZ6/
r1Hc1MvBIQ/Qd8xkXYSETnNbgu3a0GjrsA2OtcQDhzvPJ77g6dKMlbMKYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9Qcgfh4xLpYmgiqXzKXJYKCAXpMB8GA1UdIwQY
MBaAFCpPKvhDfnGT1XiF+2O9sDwDuhm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2s4cS1FTi1jWlBWZUlYN1k3MndQQU82R2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lNzE4ZGItMmU0NS00YzBjLTk3M2Yt
ZGZhNTM4NDI4ZThmLzEvS2s4cS1FTi1jWlBWZUlYN1k3MndQQU82R2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lNzE4ZGItMmU0NS00YzBjLTk3M2YtZGZhNTM4NDI4ZThm
LzEvS2s4cS1FTi1jWlBWZUlYN1k3MndQQU82R2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi+XakFT
USB4on9DIpAJo3h2AT1HYW113vTMZ8nSd6TznkQjLOUpbcBUItJ0A53IdaU3BUjn
dB7VwLzR/tk3944Dt6w0bacBTSLFARsxtIZsTZArqEaG1ct8u/Mmkgpic/jDLvq4
eh5jV48vweFqlu0uO9nwGfGA0u4cJX6ZN39Lr1VBfusSO0S5ThunUCkfEsJz+ByW
SSHqtmQ7jDImaSVIjQX+VjCTNIb1I52CYIsnkfBGLTN2323BTpDMpCjyj647fdmA
xJg3dc0bMKPRdZxzf/pPb6kn+KOgkqJ+3JMTe70uV0fyxHCmMV+MHtfwxM4QC73u
DuY4INBdy+xNRQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:01:51 2026 by rpki-client