Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: Cu9dkSUfU0IZgI3D7Mkko4W0683axIrhZ0rVSv0mk5Y=
Subject key identifier: 07:AF:C8:DF:B8:B2:AB:1C:9C:A1:72:06:86:D4:A3:B2:BB:24:FE:A3
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 019D273B097C1DA2DDD146A3C58F7ABC3CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 0552
Signing time: Wed 25 Mar 2026 23:01:13 +0000
Manifest this update: Wed 25 Mar 2026 23:01:13 +0000
Manifest next update: Thu 26 Mar 2026 23:01:13 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: Y7xa0jIseALAtv3to+Y0+onbholv7MhRNRGUXTNtM2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:09:7c:1d:a2:dd:d1:46:a3:c5:8f:7a:bc:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Mar 25 23:01:13 2026 GMT
Not After : Mar 26 23:01:13 2026 GMT
Subject: CN=07afc8dfb8b2ab1c9ca1720686d4a3b2bb24fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7a:ee:6d:a1:62:9b:31:4e:e3:e6:4d:9e:40:
56:e6:82:f2:4d:9d:a6:06:b0:a1:ea:32:42:47:16:
dc:36:6a:28:37:d7:bb:a2:90:dd:c1:61:bb:b9:bc:
50:59:2f:aa:ea:7b:c1:7e:21:c9:a4:a9:af:6a:2a:
27:fe:d5:c7:b2:22:f3:6e:41:ac:17:36:10:4b:98:
34:a5:77:9d:31:d6:a4:4f:af:8e:34:8b:ab:e8:07:
34:4c:1f:12:9b:38:f2:32:9f:eb:97:58:74:b6:65:
f0:d1:2c:ae:70:b2:fd:d2:4d:2d:1d:46:c3:c7:a3:
50:0a:ca:fe:15:60:ab:01:03:61:c7:ad:a0:65:de:
50:f3:6a:7c:a8:29:5d:1e:7f:d3:c8:cb:ed:0b:c2:
2b:bb:4b:60:a6:4c:ad:99:e9:f8:fe:62:f2:ea:fc:
c7:3b:63:d6:94:06:d7:8b:99:1f:ea:cc:e9:74:85:
f0:a3:6b:cd:74:db:6a:84:4a:b8:e7:30:95:68:4e:
7a:2e:9b:44:81:a1:66:15:69:34:05:d5:0d:7a:03:
eb:7f:8a:84:34:a3:f4:05:af:f9:50:eb:f2:f7:11:
b0:e7:50:f1:03:4b:04:e0:28:6b:4f:48:29:f4:d2:
04:d1:a6:52:ce:57:5e:2a:e1:7b:5c:e6:37:6f:73:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:C8:DF:B8:B2:AB:1C:9C:A1:72:06:86:D4:A3:B2:BB:24:FE:A3
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:27:d0:e7:a9:4f:22:c4:82:4e:6c:11:20:11:75:61:fc:26:
ac:31:10:54:ff:9d:50:08:cb:da:0f:09:7e:d0:90:08:14:39:
4f:01:09:7c:34:3e:2d:16:14:ca:3a:25:cf:96:d0:e6:7e:9d:
a9:68:e3:13:45:7a:3c:7a:b1:b9:da:20:8a:d8:1e:0f:1a:09:
65:84:5b:96:5c:1e:27:f5:f1:f9:65:08:56:2f:37:93:7c:a3:
d9:fa:b2:19:a2:9a:21:d0:02:3b:fa:a7:a0:71:90:99:12:c1:
8b:54:50:3b:12:87:59:ed:0a:4f:03:a9:16:8d:29:04:ec:a0:
65:8a:89:48:be:c7:6f:28:c9:ba:a6:70:69:cd:91:73:1b:6d:
b0:3f:fe:22:65:45:39:79:30:c6:8b:6a:2d:20:67:df:ff:72:
6f:dd:04:cf:fa:38:79:a4:a7:be:a7:d0:1a:67:ad:93:35:f2:
39:44:dd:01:14:54:05:38:8e:b4:8a:a4:b9:7b:fb:13:5f:cd:
64:3a:60:16:21:79:77:df:76:ca:bb:fb:ae:4d:38:25:d7:7f:
02:39:e0:24:a3:e0:d4:6b:9b:ad:c1:a2:81:2d:98:5d:39:17:
e8:5d:61:7c:2d:e1:96:f0:f1:e6:e8:9b:bf:d7:99:5d:29:98:
07:54:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:05 2026 by rpki-client