Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: kbUI/3+4cUT4vuYgHxlDtlZTyNNW0p1/JbfAterDj1k=
Subject key identifier: BA:52:26:2B:1F:13:95:45:74:17:D0:57:78:AC:50:E7:DC:FB:E9:05
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 019D322C24A64D8841393752E4ABD57D167B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 15DF
Signing time: Sat 28 Mar 2026 02:00:46 +0000
Manifest this update: Sat 28 Mar 2026 02:00:46 +0000
Manifest next update: Sun 29 Mar 2026 02:00:46 +0000
Files and hashes: 1: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: y9tcFPP7VWCePz7rwmSpiNOqGrHPXsOAJjjgt0Egc+M=)
2: qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa (hash: rirbnyAccpPKWOcuInuVk5mCK3dHmlXm6puqdnxTn/s=)
3: vG177J2dohuE08wHX2-c78lEhcw.roa (hash: 3JSqj0nOnGoEw7PHeM+wBIAwqea4bnBMwwfIgvqc52Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:24:a6:4d:88:41:39:37:52:e4:ab:d5:7d:16:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Mar 28 02:00:46 2026 GMT
Not After : Mar 29 02:00:46 2026 GMT
Subject: CN=ba52262b1f1395457417d05778ac50e7dcfbe905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:58:b6:27:1c:bd:29:b4:02:a4:fd:5c:c4:
fe:e5:c9:d2:3c:20:7e:7e:8c:aa:e1:44:30:1c:58:
87:a1:96:eb:f9:b3:c5:8c:8e:ae:83:8c:3b:87:c3:
ef:a7:10:a4:06:81:c4:04:9e:26:67:20:fa:29:b1:
6a:01:ca:b3:3f:f5:08:fc:6c:28:f1:d5:6c:cb:ec:
1a:ca:50:e3:54:38:c3:2e:c3:2e:5e:ee:26:26:c2:
43:0b:1b:eb:aa:a3:15:a5:99:a4:b5:fc:e0:01:3d:
36:0e:3d:17:2d:28:6a:95:27:da:17:47:43:12:df:
57:e3:e5:80:2e:68:fb:ae:f6:42:dc:b0:96:cf:05:
db:5f:d5:08:2b:72:75:8f:b1:73:67:7a:94:36:9a:
6f:7f:d2:ed:7c:ca:60:07:19:c8:8c:35:7d:8e:ff:
64:b0:b3:3e:5e:eb:02:a8:a4:b8:bc:3a:f2:49:5f:
9b:55:fe:a7:a3:59:f6:d6:f1:4d:49:36:3e:8a:0f:
fc:83:ea:da:d9:7e:ba:db:b6:9e:a0:cb:16:39:a9:
75:b7:e7:ef:54:f0:11:d4:c5:db:4d:d7:24:67:58:
0d:95:78:25:85:37:c8:5a:08:59:42:96:ad:b4:3a:
6f:12:52:fa:e2:34:15:40:f1:68:6b:af:0a:04:32:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:26:2B:1F:13:95:45:74:17:D0:57:78:AC:50:E7:DC:FB:E9:05
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:71:66:fe:54:97:e7:2e:43:f8:9f:b9:98:95:a8:f0:c1:09:
ae:a6:77:7a:87:54:5f:3b:18:97:a9:6b:22:bb:3f:4f:9f:e7:
9c:a3:ca:da:85:b5:11:a8:b8:b0:39:b6:2e:ae:c5:99:a3:69:
97:ca:e9:e3:86:97:56:9b:96:bf:ba:50:06:58:d6:07:48:91:
2f:d8:38:28:19:32:05:fc:ac:de:78:61:25:aa:80:b8:7a:2a:
c9:f1:b5:99:6c:47:5a:de:5d:19:d6:da:30:43:54:49:bb:56:
d2:20:71:65:6d:82:d9:09:8a:34:ca:0b:2a:01:6d:79:03:c1:
bc:8f:88:60:24:d6:1e:91:06:c6:24:1e:a3:15:02:77:ad:d4:
8c:f3:4b:ae:2b:30:5d:36:64:5c:86:e4:9c:35:96:f5:2d:72:
c1:1e:1b:e5:c5:26:7a:b5:b3:88:ef:d6:1f:32:b8:46:f1:89:
e8:82:67:0b:fc:ae:42:bb:67:18:63:6a:87:5e:64:6e:aa:40:
cf:15:3a:ff:1e:f2:8e:75:c8:64:10:58:44:91:e1:2b:cb:f9:
d0:8f:3f:a9:00:e0:d3:ca:04:92:93:c3:7f:3a:f2:6e:66:4b:
cc:40:cb:ed:a2:09:a0:19:f3:6f:b2:d1:90:f8:1a:55:61:bc:
82:5a:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:32 2026 by rpki-client