Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
File: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft (raw, json)
Hash identifier: dsT2FZAEYRtjUCKBGF/rgEFSU7FrgdTgWT9zwH86Uy8=
Subject key identifier: CF:DB:A1:B5:BB:44:C8:4E:4F:0A:F2:C0:44:0A:87:4A:CB:D5:91:01
Authority key identifier: 2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
Certificate issuer: /CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Certificate serial: 019D25BA660E729DD30B64B06D3D2CC0F902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
Manifest number: 88
Signing time: Wed 25 Mar 2026 16:01:05 +0000
Manifest this update: Wed 25 Mar 2026 16:01:05 +0000
Manifest next update: Thu 26 Mar 2026 16:01:05 +0000
Files and hashes: 1: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl (hash: fmTXzj9R6MDbNg7APMGMkHcdSEZ77UZVTWGbebRX2PY=)
2: udm-0Xl3UglvtX_NHkrgYLZH0SE.roa (hash: WYCvnHc5H5Xz3d6/Kkp/D6s/RlGIj7T/WQo1xaUpk+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:66:0e:72:9d:d3:0b:64:b0:6d:3d:2c:c0:f9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Validity
Not Before: Mar 25 16:01:05 2026 GMT
Not After : Mar 26 16:01:05 2026 GMT
Subject: CN=cfdba1b5bb44c84e4f0af2c0440a874acbd59101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:25:90:ce:f1:ac:af:0d:bf:b7:4e:90:27:
f7:be:01:ac:58:ed:4a:1f:45:ce:36:ad:b7:a3:6d:
bd:fe:3f:1c:b3:1b:4e:5e:d0:c5:66:f7:49:01:fa:
43:1a:86:8b:94:63:f1:f2:65:60:3c:c7:54:30:be:
a8:8e:db:82:b3:f7:12:b0:d2:61:3b:ab:39:91:2f:
1d:e6:5f:23:4a:f9:f2:ef:80:fb:f2:a2:f9:70:da:
d5:40:96:af:8d:ae:56:90:40:c5:5e:00:e1:b1:15:
4c:24:7a:5f:95:79:df:d5:18:98:69:0b:92:6c:bd:
34:7d:ae:97:49:1d:47:a6:51:f0:9e:d8:ed:2a:84:
5c:99:aa:80:9f:2f:bd:85:b9:31:b6:46:cd:cf:9f:
7f:a5:e5:41:17:00:86:18:fe:1a:e0:ae:ed:91:6b:
4f:42:ec:5e:2b:d9:05:5c:3c:37:5c:8a:23:1f:98:
f8:79:e3:24:8f:3c:8e:d0:e8:88:3f:ad:90:21:8e:
b9:de:1f:92:5a:59:eb:91:1d:f0:4c:6b:61:01:db:
73:88:fd:86:80:83:56:fb:9f:06:50:74:4c:6b:ad:
c4:b7:4e:91:3d:a7:bb:0d:eb:46:4f:e9:ae:d9:a2:
f7:dc:94:c4:c3:ab:83:35:19:39:ff:13:ab:01:5d:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:A1:B5:BB:44:C8:4E:4F:0A:F2:C0:44:0A:87:4A:CB:D5:91:01
X509v3 Authority Key Identifier:
keyid:2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:18:72:c6:cd:5d:e0:96:c7:13:c7:3c:ed:41:fc:83:14:e5:
f5:a9:c7:05:f4:c8:8c:2d:0f:82:ea:b7:ae:5f:27:87:31:6f:
90:f7:45:5c:7f:7b:be:83:ea:d8:7d:5e:af:b2:2c:95:50:59:
b2:d1:fa:ee:28:1d:48:9b:8a:66:0c:cd:15:10:44:a5:28:2a:
c0:a3:a2:da:2c:38:d8:e8:77:39:ce:9a:06:dc:e6:e6:bc:f7:
bb:fb:1d:37:78:a3:cd:9f:29:d1:b0:e1:d9:2a:c3:47:1f:7b:
04:a3:24:40:16:7b:a1:2d:78:71:03:ab:c0:7b:38:e8:3a:85:
a8:60:f3:b9:2c:80:53:03:09:95:1d:2a:15:38:72:89:77:ca:
24:f4:70:8c:fe:18:0e:d3:85:7c:5d:bd:a3:89:49:60:37:e0:
9d:5c:02:32:bf:c7:6b:3e:3d:0e:ff:5e:1f:4e:a3:b0:6f:86:
73:a9:ca:e3:bc:9d:15:54:fc:aa:60:be:88:b3:99:5a:e7:66:
06:73:5f:55:66:e5:05:fc:10:43:95:91:00:03:fe:a0:df:8c:
d3:06:b8:aa:44:3d:68:b8:cc:47:a4:23:44:05:26:b4:c4:0c:
bc:85:ba:cf:d4:b4:06:d8:92:73:9e:9f:e1:23:6a:72:97:ee:
df:e8:28:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lumYOcp3TC2SwbT0swPkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDg5ZTkzZGNiZDg3MGU5YzIxNDliY2EzNDE4OWZiNGE5
NWFjMDMwHhcNMjYwMzI1MTYwMTA1WhcNMjYwMzI2MTYwMTA1WjAzMTEwLwYDVQQD
EyhjZmRiYTFiNWJiNDRjODRlNGYwYWYyYzA0NDBhODc0YWNiZDU5MTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBolkM7xrK8Nv7dOkCf3vgGsWO1K
H0XONq23o229/j8csxtOXtDFZvdJAfpDGoaLlGPx8mVgPMdUML6ojtuCs/cSsNJh
O6s5kS8d5l8jSvny74D78qL5cNrVQJavja5WkEDFXgDhsRVMJHpflXnf1RiYaQuS
bL00fa6XSR1HplHwntjtKoRcmaqAny+9hbkxtkbNz59/peVBFwCGGP4a4K7tkWtP
QuxeK9kFXDw3XIojH5j4eeMkjzyO0OiIP62QIY653h+SWlnrkR3wTGthAdtziP2G
gINW+58GUHRMa63Et06RPae7DetGT+mu2aL33JTEw6uDNRk5/xOrAV3kSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/bobW7RMhOTwrywEQKh0rL1ZEBMB8GA1UdIwQY
MBaAFCpInpPcvYcOnCFJvKNBiftKlawDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tpZWs5eTlodzZjSVVtOG8wR0otMHFWckFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84MzA1MTYtZGU3ZS00ZjE4LTg0OTQt
NDcwNTRjYzRlMTU3LzEvS2tpZWs5eTlodzZjSVVtOG8wR0otMHFWckFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84MzA1MTYtZGU3ZS00ZjE4LTg0OTQtNDcwNTRjYzRlMTU3
LzEvS2tpZWs5eTlodzZjSVVtOG8wR0otMHFWckFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChhyxs1d
4JbHE8c87UH8gxTl9anHBfTIjC0Pguq3rl8nhzFvkPdFXH97voPq2H1er7IslVBZ
stH67igdSJuKZgzNFRBEpSgqwKOi2iw42Oh3Oc6aBtzm5rz3u/sdN3ijzZ8p0bDh
2SrDRx97BKMkQBZ7oS14cQOrwHs46DqFqGDzuSyAUwMJlR0qFThyiXfKJPRwjP4Y
DtOFfF29o4lJYDfgnVwCMr/Haz49Dv9eH06jsG+Gc6nK47ydFVT8qmC+iLOZWudm
BnNfVWblBfwQQ5WRAAP+oN+M0wa4qkQ9aLjMR6QjRAUmtMQMvIW6z9S0BtiSc56f
4SNqcpfu3+gojQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:36 2026 by rpki-client