Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier: 6D/9TWGt94GglfEhh5aJInbCp8XuTcnLKO8cgs5BJzg=
Subject key identifier: 9D:2C:13:21:D2:2F:9C:B8:37:7D:2E:EB:32:72:AE:ED:21:DB:A1:30
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial: 019D394084E5D994C4250188A4713DFB911E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: zWEYJlxcrUMZpEEKbx5QtMpBcC2qDEH7g5GQWIBgl9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:84:e5:d9:94:c4:25:01:88:a4:71:3d:fb:91:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=9d2c1321d22f9cb8377d2eeb3272aeed21dba130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:40:b4:85:98:02:7a:a5:34:6d:27:0b:7b:
73:df:53:9e:90:54:e3:be:63:6f:b2:6c:1b:c1:3e:
fc:b5:d3:c9:ab:11:df:56:1a:88:fb:ea:da:0f:ef:
94:8e:bc:f1:17:fb:7f:65:58:4b:1e:93:d4:bd:bf:
06:3f:8a:48:b2:c5:7b:bf:2c:60:2a:3a:d5:24:42:
12:dc:d7:f3:15:dd:d0:42:78:27:d0:b1:fe:ec:a7:
5b:58:dc:99:b8:14:01:a9:41:53:74:cd:7f:4d:b0:
b6:b3:58:20:57:fa:40:e2:2a:f3:46:d0:bf:a4:45:
7f:a0:33:35:c2:8b:ab:77:e1:2c:f2:d1:99:8e:71:
d6:8b:02:a6:2e:af:11:a4:fc:3c:e3:27:21:94:c6:
44:ab:27:98:65:09:75:4a:bf:9d:37:63:80:6a:44:
ff:88:19:4e:93:4d:a4:50:7a:83:32:de:bc:3b:76:
a1:d7:e0:e4:63:ed:8c:0c:58:9b:e7:6c:0e:e4:44:
d2:66:03:c1:c1:69:e5:be:a7:88:11:b4:94:6b:d8:
23:d7:77:3f:77:2a:cd:9f:54:ef:50:3f:0c:28:33:
d1:20:18:fa:d7:48:04:79:34:6b:22:23:fb:00:c6:
26:e6:21:f0:cb:67:6d:63:0e:30:8b:dc:a1:9e:b0:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2C:13:21:D2:2F:9C:B8:37:7D:2E:EB:32:72:AE:ED:21:DB:A1:30
X509v3 Authority Key Identifier:
keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:32:5b:c8:0c:6b:55:c1:6a:1a:74:ac:0d:c3:a8:cc:cd:23:
5b:29:fe:96:31:75:c0:98:c0:bd:f2:68:36:44:38:10:e2:23:
71:1f:77:c8:a5:db:ea:6b:d1:4b:61:44:fb:0a:23:f6:1d:a7:
14:f1:c2:a3:1f:26:66:df:6d:cd:8b:e4:74:43:c4:74:2f:83:
7b:f9:e5:65:1b:5e:c7:ac:3f:ea:9e:8e:6a:2e:a1:f3:f8:89:
a9:08:7d:1d:63:5a:ee:55:b1:e5:03:53:6f:48:e6:52:0d:c6:
50:58:6c:55:f2:10:4d:55:c7:b5:e9:42:42:ba:df:34:49:97:
48:19:ed:28:31:53:00:99:35:33:1c:db:ba:5d:27:b8:b2:11:
b1:5d:ab:9f:eb:40:e9:95:f2:2d:00:2e:09:88:33:02:0e:35:
56:26:1e:11:9e:2e:cc:42:03:fe:21:f1:5e:0f:87:d5:82:4b:
a4:c0:bd:f2:56:6f:9e:f0:a5:78:60:60:19:b7:97:0b:e3:3c:
51:13:d4:27:5d:03:e5:e6:fa:c2:5e:50:24:5c:f3:2f:c2:83:
fa:6c:b7:1d:92:7e:a4:81:9d:08:43:3c:a5:a8:2f:08:8a:85:
e3:24:dd:e5:0b:c8:f9:37:15:aa:6c:4d:92:6d:0e:bd:e0:43:
0a:1a:2e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:15 2026 by rpki-client