Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: VDxWvpgWVpaaOeR2eYSfQy8RF8+27niJmMVT4poqvyg=
Subject key identifier: 3E:F0:72:FC:8E:EB:35:B8:06:77:CC:C2:C2:8A:31:FC:FB:2F:F8:CC
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019D284E21B6EEE5DEB623D4F72C9A8271AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 1415
Signing time: Thu 26 Mar 2026 04:01:42 +0000
Manifest this update: Thu 26 Mar 2026 04:01:42 +0000
Manifest next update: Fri 27 Mar 2026 04:01:42 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: qE8lXkRwdJbrJuLyE32HQ0bMk2xUxBxf/WaiBKFn+mI=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:21:b6:ee:e5:de:b6:23:d4:f7:2c:9a:82:71:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Mar 26 04:01:42 2026 GMT
Not After : Mar 27 04:01:42 2026 GMT
Subject: CN=3ef072fc8eeb35b80677ccc2c28a31fcfb2ff8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:70:d4:a1:5c:d7:78:76:96:df:31:12:28:
d6:43:20:32:0d:b2:56:9f:85:ab:9b:70:61:b6:a3:
1c:f7:e8:c0:32:9c:f2:d9:fd:19:08:b3:35:72:02:
a1:01:14:69:58:df:e6:e1:7b:41:5e:e5:36:10:11:
51:6d:08:83:05:88:f7:d2:5d:aa:54:23:66:74:65:
94:85:ef:1e:e5:99:c4:81:65:58:9b:04:3d:15:bc:
27:09:10:31:cc:16:39:bb:96:c8:96:c3:73:0e:6d:
6d:a2:30:be:07:4c:4c:52:b4:9e:d6:bd:3e:69:c0:
00:6b:b9:0e:b4:22:5c:82:52:37:db:fe:c2:bf:89:
ca:cb:a4:fb:33:05:06:8a:71:f3:5f:c4:c3:4a:34:
e4:16:4c:c4:12:02:51:71:64:a9:a1:71:f8:59:0a:
59:0b:5e:9e:a7:dc:04:94:8f:1a:19:30:11:2a:71:
03:c0:e9:5d:f7:7c:d7:85:a7:65:d1:3c:bf:f0:66:
da:bf:82:84:c5:1f:04:1f:63:a3:7b:b1:93:1b:19:
e0:76:87:fc:fe:9d:cb:6b:e8:97:33:99:3e:29:bb:
09:f6:ed:a5:0a:69:a8:4e:70:a6:ec:fb:f4:99:8f:
c3:73:f1:ab:dd:4b:97:ff:f7:d0:c5:e1:7c:ef:49:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F0:72:FC:8E:EB:35:B8:06:77:CC:C2:C2:8A:31:FC:FB:2F:F8:CC
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5f:f4:e3:52:72:4d:ab:ae:17:73:67:c3:bb:8f:6e:b6:39:
7e:f5:c8:66:88:54:81:d9:79:cb:e4:8a:73:6d:43:28:24:23:
b3:85:f7:23:65:de:02:b8:fb:ab:41:67:bd:53:9a:e5:07:26:
46:fa:dd:a8:4a:31:28:e6:fd:9a:e8:87:8e:c2:5f:a8:7a:a8:
e0:20:08:65:78:15:05:5b:3c:5f:35:a4:a9:5f:f5:e7:e4:aa:
5d:74:11:42:11:44:8e:02:a7:1a:29:00:66:fd:f7:dc:dc:ab:
f7:95:a9:02:77:38:13:6b:79:2f:13:6a:63:6e:ce:1e:2c:d1:
7b:92:9f:3f:3d:52:f3:6c:97:11:f7:2a:65:04:3c:e2:5b:fe:
b9:8e:a8:9b:18:fa:db:d9:cf:37:b0:2d:f6:72:d6:10:9a:b5:
15:de:41:e7:e7:82:a4:3d:e0:70:dd:c7:a1:07:66:cb:b4:00:
8a:66:d0:9e:ec:ac:e0:c7:77:03:74:2b:c0:09:ac:02:32:d8:
bf:d6:cc:ed:f1:5e:28:88:9b:2d:d0:80:fb:c7:32:b2:08:48:
b3:cf:bc:e0:67:5a:d1:31:a5:b5:c8:fd:01:66:21:ff:bf:6b:
66:f6:4f:de:03:83:b9:49:6b:ff:ae:60:8d:29:e3:dd:3e:1b:
90:32:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:45 2026 by rpki-client