Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
File: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft (raw, json)
Hash identifier: jQJu56t4nwB8cVDVQ2FVxJHKtVhXWiwkUsdrr+G6JMk=
Subject key identifier: B1:5F:ED:90:63:44:7E:B7:15:BC:5A:DD:0F:6C:A2:5A:F8:17:D6:F2
Authority key identifier: 2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
Certificate issuer: /CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Certificate serial: 01A11B99FFD6E63D817FC85784BF8C0CAE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
Manifest number: 0295
Signing time: Thu 08 Oct 2026 13:00:39 +0000
Manifest this update: Thu 08 Oct 2026 13:00:39 +0000
Manifest next update: Fri 09 Oct 2026 13:00:39 +0000
Files and hashes: 1: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl (hash: uPBmmOlFEl+SmbIPkJzR4qNaCTCS9aQN56XdwhJS0Ds=)
2: udm-0Xl3UglvtX_NHkrgYLZH0SE.roa (hash: WYCvnHc5H5Xz3d6/Kkp/D6s/RlGIj7T/WQo1xaUpk+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:99:ff:d6:e6:3d:81:7f:c8:57:84:bf:8c:0c:ae:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Validity
Not Before: Oct 8 13:00:39 2026 GMT
Not After : Oct 9 13:00:39 2026 GMT
Subject: CN=b15fed9063447eb715bc5add0f6ca25af817d6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:0a:81:e1:89:64:34:af:da:60:ef:4f:b3:
99:81:0f:8e:d3:ee:92:9f:cf:43:5b:10:fc:8e:8a:
f3:f7:61:8c:07:52:2b:79:2c:74:fc:8c:6f:0c:f7:
21:96:2b:91:9e:17:36:c1:9d:4c:eb:23:22:b2:52:
db:8c:ff:e2:2e:79:4a:2a:9d:44:13:8a:18:7c:78:
61:b7:79:54:9a:cd:0a:f3:92:62:99:1c:26:9c:be:
8c:06:75:ce:69:cc:d2:e0:04:da:11:89:42:62:fc:
e9:b6:f2:a7:28:b6:ac:cf:f7:e9:3e:08:8a:65:96:
c2:45:e6:0a:b7:2f:18:7d:66:88:c8:62:48:ee:f6:
3a:52:67:90:cb:10:03:1b:e6:03:ee:67:ef:12:a2:
12:64:4f:7d:a2:0c:e1:9a:5b:8d:9a:88:22:ad:18:
08:7a:17:08:c9:f9:d1:1b:81:0f:d4:3c:d9:e9:c4:
29:32:57:86:1f:64:83:fb:c7:8b:43:f5:10:9e:0e:
a2:2c:3d:25:d7:af:16:d8:cf:ce:29:dd:01:3c:a1:
34:be:76:44:aa:09:46:e0:b8:ec:28:a0:11:7d:5a:
b0:f7:42:f2:68:91:82:dc:c6:6f:51:36:92:38:24:
f4:62:ca:b9:04:57:24:ca:bc:df:60:3e:8d:95:fa:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:ED:90:63:44:7E:B7:15:BC:5A:DD:0F:6C:A2:5A:F8:17:D6:F2
X509v3 Authority Key Identifier:
keyid:2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bd:80:dc:c2:f7:94:92:3d:c1:45:90:c2:b6:43:00:7b:d3:
82:05:fe:11:56:5f:b9:fa:7a:da:69:b9:bb:21:71:9a:af:e5:
a8:22:de:12:a1:08:48:3c:21:72:d4:89:1f:b0:04:27:19:db:
ef:72:51:bc:1a:c0:ab:43:ee:b8:00:c7:bc:1b:56:a1:b8:3b:
3a:e1:8a:42:50:48:38:69:27:0b:b9:c6:19:5e:cd:7c:23:05:
11:41:26:09:41:9c:07:9e:02:8f:f5:29:33:c8:62:bb:8d:77:
d0:b4:ea:62:f5:ea:9d:47:2b:0a:35:82:fc:b9:e5:39:8f:1d:
e7:cf:ac:77:a4:23:79:53:91:20:eb:cd:6a:9f:fd:3d:b4:3c:
2e:ae:47:34:ee:b5:c5:ea:9b:c2:d7:4c:c5:72:1d:b6:f8:b1:
4d:ef:d1:98:b3:13:36:1f:e4:14:17:65:e2:84:7c:3f:fc:af:
5b:b9:3d:e7:8d:3f:66:0e:3d:96:bd:2e:55:a2:52:0f:37:71:
dc:12:5b:e0:db:d4:c2:15:a6:f2:1c:b3:c3:36:ef:f3:ae:29:
60:f6:61:02:60:ff:a3:21:4b:10:cd:81:b8:d4:52:5b:cf:8c:
f8:00:1e:0d:80:0c:9c:6c:f6:b3:6b:be:24:0e:a0:11:6c:27:
e3:36:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:23:39 2026 by rpki-client