Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: 6dN/e7ZKgWuI5PC1OjGdt3ZkmypXXFvzuSvkGQ2VTPM=
Subject key identifier: AF:31:B6:20:46:24:DA:2D:8A:0E:82:46:D9:0E:18:B8:2F:F8:E9:67
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019F924879B8F328C3D32571238FE7765B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 1555
Signing time: Fri 24 Jul 2026 04:00:50 +0000
Manifest this update: Fri 24 Jul 2026 04:00:50 +0000
Manifest next update: Sat 25 Jul 2026 04:00:50 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: Lg/LJveig2/Zo2ZRAhI8CMM/tMvfKt339m7YSWj9ULc=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:79:b8:f3:28:c3:d3:25:71:23:8f:e7:76:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Jul 24 04:00:50 2026 GMT
Not After : Jul 25 04:00:50 2026 GMT
Subject: CN=af31b6204624da2d8a0e8246d90e18b82ff8e967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:10:59:4b:0b:f9:0a:bd:60:86:8f:3c:65:
e6:b5:0e:38:a2:65:4f:89:1e:5b:11:01:dc:6f:3d:
1d:88:7c:21:77:c9:cc:a4:39:74:86:a8:83:d8:25:
c7:46:a5:f5:bc:41:3d:5e:93:b3:80:b0:05:64:f2:
b2:ee:38:a2:df:d1:df:70:6d:34:a4:bc:a6:09:3b:
b4:bd:2e:6b:71:f7:87:6e:6b:06:42:ab:2a:c7:64:
65:8c:3b:ad:56:f1:d6:a6:6d:e1:16:ed:26:da:28:
c6:e4:b7:2d:7b:81:73:d2:77:f0:64:4f:52:5d:4a:
8e:98:77:5d:07:6f:3d:d8:d5:78:a6:14:f0:f7:e6:
d0:38:ac:4d:d5:02:ad:a1:6c:02:0b:ef:ac:61:ea:
46:76:2b:57:c0:56:67:7a:5b:ba:94:95:99:a9:f1:
5c:69:7c:03:ec:1c:a6:f5:e4:ea:51:92:fb:f1:1e:
a2:2b:71:46:89:e7:74:3d:3c:43:5a:e7:45:ef:c9:
5e:30:c6:cb:15:79:de:85:4b:ea:6e:43:81:00:ac:
39:e9:90:61:d0:eb:fa:f6:ce:67:36:9c:6b:d4:a5:
be:46:5d:a3:6b:b4:b5:26:7c:f0:0d:8b:6a:79:e3:
83:03:3a:bf:2d:68:30:b3:a3:79:81:f5:b5:91:10:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:B6:20:46:24:DA:2D:8A:0E:82:46:D9:0E:18:B8:2F:F8:E9:67
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b6:3d:e3:06:aa:72:b6:34:09:8b:ad:bf:38:8a:0c:84:27:
5b:60:f8:09:ec:2e:b2:88:1d:58:81:9c:4a:95:51:a0:d3:21:
b7:86:9f:d0:c0:0b:e4:d5:7c:8c:ed:07:5e:69:8c:89:24:92:
13:01:bc:a0:e7:00:ca:61:d9:40:43:50:47:37:9d:bf:3f:af:
4b:7d:a1:4e:84:a5:0d:8b:50:fb:37:29:d1:c3:8e:8f:4f:de:
fb:ec:ec:97:c3:32:b7:a5:a3:54:0a:94:bd:ef:e8:76:7a:13:
c7:95:8a:9b:ea:1f:c1:d3:6e:53:e3:f5:cb:1a:40:d5:72:28:
af:a8:af:00:e9:22:db:31:9f:59:f6:74:00:05:5a:fa:4d:4e:
01:1c:b9:cc:45:bf:b4:ef:0a:a2:1d:17:40:cc:33:7d:48:9c:
d2:1d:84:15:79:e3:94:26:d3:5a:b6:7a:c8:78:0e:43:69:ce:
4a:9a:82:14:81:2e:7f:ff:40:51:8d:a0:7c:47:75:a4:22:41:
7c:ab:6f:52:90:d4:6b:0c:2b:65:ef:3b:5c:06:2f:b8:50:37:
df:a4:4e:78:6b:e0:8a:d2:3b:65:2a:dc:0d:14:7e:d1:5e:41:
ac:09:99:1c:03:7e:6b:2e:1b:1c:3c:ca:3c:73:77:6a:23:77:
62:67:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:15 2026 by rpki-client