Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: AE668ELd+ZQODNk15wSzy67lS6Vb2xcbSUPFCHjUgic=
Subject key identifier: 9A:CA:00:F2:32:7F:04:78:96:37:9E:9B:20:75:BB:62:C9:08:90:A9
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019D27A8C989AF6A89E181C77198FA80F601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: 2D2Vo659VCE7_dNsyKDY_ySnp_s.roa (hash: LZcXs72e2WHugD8ordyBZAMfRGav21lT1gfAGNPJNRQ=)
2: K-3AW1zodZQo96foEv6vSPWnznA.roa (hash: 3dK44a2XFe/Ax80oJyqlgMjQENi9InYwps3O9K6x3VI=)
3: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: 8wLVsrga1DUTjgZjazzfHyfQmPoHPV+AtyrKlWhduNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c9:89:af:6a:89:e1:81:c7:71:98:fa:80:f6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=9aca00f2327f047896379e9b2075bb62c90890a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:16:fa:62:d6:a2:e8:9b:48:dd:79:f6:12:
90:ae:38:29:a3:5a:b7:fe:0a:e6:48:77:90:3b:59:
a2:b9:21:75:42:57:e7:d4:1c:c2:82:b7:cc:df:ad:
4b:13:80:8f:cb:be:1c:09:6f:22:af:ac:77:b8:e0:
7c:21:c5:de:77:43:39:6a:d5:47:6f:68:85:86:9d:
fb:00:e8:7b:c1:75:93:07:ad:0c:67:c3:5c:15:86:
ed:5b:8b:b0:54:c4:d3:42:f4:98:55:27:2e:52:de:
a7:63:4d:ff:68:5b:17:a8:f5:bd:99:21:5d:0d:de:
65:14:a7:5a:b0:bc:15:85:2e:03:5c:1d:2a:c8:f5:
a6:87:13:e2:cf:b7:33:85:bb:28:30:4a:10:cc:e8:
6a:27:73:8f:63:d5:96:a9:f4:d5:b7:3b:b4:a1:f9:
d3:11:ba:34:5d:f7:d2:68:b7:c8:d3:20:db:a4:30:
e7:a1:7f:91:cd:d7:6a:de:93:8c:46:5c:42:ea:2d:
f6:c2:46:cf:17:ce:59:7f:75:5b:3f:64:bd:84:0c:
eb:31:ff:b6:5b:8b:c8:8b:1b:09:db:56:86:03:d9:
50:44:be:78:de:6a:2f:21:d4:4d:b4:00:b8:4f:b6:
ea:d1:cf:86:4d:04:33:8c:79:d9:53:42:92:a9:81:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:00:F2:32:7F:04:78:96:37:9E:9B:20:75:BB:62:C9:08:90:A9
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f3:17:6d:23:7e:fe:cb:0f:88:d0:b6:e9:f2:ac:3c:c1:47:
a9:d2:b9:09:1a:36:53:a4:3a:85:2f:31:ad:74:38:d9:85:5d:
9a:89:53:49:05:da:eb:b2:79:29:90:5a:a6:a3:e6:b0:89:c2:
1e:ea:bb:a9:21:46:fa:9a:7c:8f:b0:5e:e4:a8:d8:71:5f:29:
5b:f0:9a:47:6c:53:38:f9:c0:7c:69:f8:08:84:40:1e:18:98:
41:c0:94:2b:2b:a4:12:5f:53:ac:71:50:dd:84:62:96:dc:65:
d5:1c:69:d9:8f:39:c4:8c:80:fb:59:04:6a:2c:60:b2:84:66:
82:13:ac:d9:07:c3:ed:31:f6:84:de:51:90:c9:4f:bd:a5:ac:
bd:a3:f6:eb:17:67:ab:3a:86:71:a4:27:f8:9d:e4:04:e6:e5:
f0:97:cb:75:62:00:5b:43:37:5d:47:be:21:10:67:3c:cc:25:
56:f7:25:cc:50:e6:a9:56:ce:f8:ce:30:7e:8e:b2:24:f2:d3:
cc:a4:87:ae:52:2b:57:a4:3a:4b:6e:06:fe:c6:bb:2a:08:ed:
19:9f:41:59:a3:e8:d0:6c:1a:f6:25:d0:17:09:60:cc:6c:9a:
80:fb:e4:e8:8b:b2:d8:95:33:ff:ad:ff:6d:26:27:46:b8:d7:
7e:b2:a4:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMmJr2qJ4YHHcZj6gPYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1
ZWI5YWEwHhcNMjYwMzI2MDEwMTA2WhcNMjYwMzI3MDEwMTA2WjAzMTEwLwYDVQQD
Eyg5YWNhMDBmMjMyN2YwNDc4OTYzNzllOWIyMDc1YmI2MmM5MDg5MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfkW+mLWouibSN159hKQrjgpo1q3
/grmSHeQO1miuSF1Qlfn1BzCgrfM361LE4CPy74cCW8ir6x3uOB8IcXed0M5atVH
b2iFhp37AOh7wXWTB60MZ8NcFYbtW4uwVMTTQvSYVScuUt6nY03/aFsXqPW9mSFd
Dd5lFKdasLwVhS4DXB0qyPWmhxPiz7czhbsoMEoQzOhqJ3OPY9WWqfTVtzu0ofnT
Ebo0XffSaLfI0yDbpDDnoX+Rzddq3pOMRlxC6i32wkbPF85Zf3VbP2S9hAzrMf+2
W4vIixsJ21aGA9lQRL543movIdRNtAC4T7bq0c+GTQQzjHnZU0KSqYF5NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrKAPIyfwR4ljeemyB1u2LJCJCpMB8GA1UdIwQY
MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt
NDU0NGM2MTA5NzI5LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5
LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvMXbSN+
/ssPiNC26fKsPMFHqdK5CRo2U6Q6hS8xrXQ42YVdmolTSQXa67J5KZBapqPmsInC
Huq7qSFG+pp8j7Be5KjYcV8pW/CaR2xTOPnAfGn4CIRAHhiYQcCUKyukEl9TrHFQ
3YRiltxl1Rxp2Y85xIyA+1kEaixgsoRmghOs2QfD7TH2hN5RkMlPvaWsvaP26xdn
qzqGcaQn+J3kBObl8JfLdWIAW0M3XUe+IRBnPMwlVvclzFDmqVbO+M4wfo6yJPLT
zKSHrlIrV6Q6S24G/sa7KgjtGZ9BWaPo0Gwa9iXQFwlgzGyagPvk6Iuy2JUz/63/
bSYnRrjXfrKk2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:23 2026 by rpki-client