
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier: zuyQQrLN51iNjCElaN77oeyw2a1JCRZpTzBpyiH3/C8=
Subject key identifier: B5:39:00:60:84:A5:57:D6:14:BE:13:5B:54:9C:2A:17:97:9C:4B:43
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 019D386564C2D8D9040286B8C907A0D0AAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number: 15BB
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: LM_fwTOY3bWKU86K5V8-3VaJ5xo.roa (hash: gJ+6292a/zmiB+7Lg48nmQHbNWGgX6ni2+hF6SfxqDs=)
2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: sc3YY8XzZ9J+I9o2lOqEM28RQgbucnzyNNMr/Y2ZA+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:64:c2:d8:d9:04:02:86:b8:c9:07:a0:d0:aa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=b539006084a557d614be135b549c2a17979c4b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:06:07:b6:8b:8d:cd:c2:79:ee:00:99:c4:
1f:51:f8:71:ce:7d:b6:8f:66:8d:42:a1:1b:8d:7a:
6f:6d:87:d7:9d:08:fb:c6:02:f8:70:4e:1f:7f:3b:
e4:36:1c:2a:7f:57:f0:98:aa:61:a8:50:a3:91:04:
9f:9e:03:bd:61:b3:60:30:12:d0:65:52:d0:75:8d:
6d:f3:8b:87:7e:f6:f7:b2:9c:a8:48:7c:b9:e5:6f:
3c:8d:22:6f:78:63:63:f9:9f:0d:3a:3e:2c:47:96:
37:63:68:8e:55:ed:66:d6:9e:4e:40:05:94:59:00:
ef:c5:23:9b:05:72:99:c6:1e:c5:2a:3e:3b:fc:4a:
2d:69:be:00:4c:d9:93:0a:56:6b:74:a2:a3:d9:30:
94:25:4e:6f:b7:31:57:05:2d:8a:a7:58:8b:d9:3d:
6c:8b:1e:2b:8c:4e:63:31:74:29:d8:08:de:52:1b:
f4:8c:ad:ff:55:cf:9f:92:e2:45:1a:43:23:63:b9:
33:89:c0:8d:54:ed:fe:7c:09:87:dd:62:38:b6:35:
0c:90:2f:d5:0a:48:5c:22:39:fe:92:75:64:f3:cc:
bd:d8:77:af:d1:f3:2c:9b:7c:be:7d:b8:e7:7e:66:
c2:3c:58:b3:58:9c:21:24:c7:8e:91:9a:5a:e0:ec:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:39:00:60:84:A5:57:D6:14:BE:13:5B:54:9C:2A:17:97:9C:4B:43
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:21:b8:00:2e:97:63:1b:79:75:b4:a4:fd:68:31:90:2d:bc:
6f:de:00:7e:b1:3c:ce:ac:5b:7e:d3:7f:f2:cd:56:f3:80:35:
07:fa:38:e5:70:d9:4f:ac:da:18:18:9f:13:7f:20:8e:5a:60:
bb:5c:88:1d:4c:9a:6e:ed:cd:b5:e9:c7:73:a8:8a:5f:33:06:
cd:20:6c:a1:ba:96:41:a0:60:60:f9:3e:a5:4c:da:c1:80:33:
94:3d:c8:c9:e5:4b:22:e9:0c:49:5d:89:30:a9:7f:bd:b4:a3:
3b:f0:d4:4b:78:79:d5:14:71:44:90:71:f7:30:e7:7b:e6:1c:
ed:a2:8b:99:c9:45:43:54:a7:50:d6:ab:5f:90:b8:7e:87:c3:
99:34:b9:4d:0a:47:bc:b8:8e:6f:77:00:49:d4:bc:54:a3:81:
5b:35:51:4f:56:58:44:26:3d:34:fa:c0:e3:97:59:c3:d5:0d:
66:db:60:10:c7:b4:15:51:dc:6f:31:35:5d:c9:3d:0a:2d:14:
fe:27:de:2e:5c:bf:25:39:e2:55:b3:e8:f2:f5:e2:f9:ce:ee:
51:1d:ac:f3:1d:af:8b:08:71:3e:bc:8c:9c:86:20:3e:b9:f3:
85:1a:24:92:10:61:4b:ad:53:f9:f3:ad:5b:cc:72:d0:d0:a5:
a6:14:76:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWTC2NkEAoa4yQeg0Kq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDMyNzhiYWE2ZDliZDRlNDM2NzEwNGUxYTBiMTg0Y2I5
ZmIyZGMwHhcNMjYwMzI5MDcwMTAyWhcNMjYwMzMwMDcwMTAyWjAzMTEwLwYDVQQD
EyhiNTM5MDA2MDg0YTU1N2Q2MTRiZTEzNWI1NDljMmExNzk3OWM0YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfYGB7aLjc3Cee4AmcQfUfhxzn22
j2aNQqEbjXpvbYfXnQj7xgL4cE4ffzvkNhwqf1fwmKphqFCjkQSfngO9YbNgMBLQ
ZVLQdY1t84uHfvb3spyoSHy55W88jSJveGNj+Z8NOj4sR5Y3Y2iOVe1m1p5OQAWU
WQDvxSObBXKZxh7FKj47/Eotab4ATNmTClZrdKKj2TCUJU5vtzFXBS2Kp1iL2T1s
ix4rjE5jMXQp2AjeUhv0jK3/Vc+fkuJFGkMjY7kzicCNVO3+fAmH3WI4tjUMkC/V
CkhcIjn+knVk88y92Hev0fMsm3y+fbjnfmbCPFizWJwhJMeOkZpa4Oy9wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU5AGCEpVfWFL4TW1ScKheXnEtDMB8GA1UdIwQY
MBaAFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWIt
NGMyZmJkZDU2Mjc5LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWItNGMyZmJkZDU2Mjc5
LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayG4AC6X
Yxt5dbSk/WgxkC28b94AfrE8zqxbftN/8s1W84A1B/o45XDZT6zaGBifE38gjlpg
u1yIHUyabu3NtenHc6iKXzMGzSBsobqWQaBgYPk+pUzawYAzlD3IyeVLIukMSV2J
MKl/vbSjO/DUS3h51RRxRJBx9zDne+Yc7aKLmclFQ1SnUNarX5C4fofDmTS5TQpH
vLiOb3cASdS8VKOBWzVRT1ZYRCY9NPrA45dZw9UNZttgEMe0FVHcbzE1Xck9Ci0U
/ifeLly/JTniVbPo8vXi+c7uUR2s8x2viwhxPryMnIYgPrnzhRokkhBhS61T+fOt
W8xy0NClphR2Xw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:50 2026 by rpki-client