Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: h3ftfBH2VCxv6hlI4kskGvreK1dbtqSVPuhQbxrV5BI=
Subject key identifier: 7B:68:64:D5:58:1E:2D:26:A8:A4:82:DA:3B:60:F3:A4:FD:C9:E9:D9
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 01A0D6F0CA26492C45C1965389BE5586BD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 17C2
Signing time: Fri 25 Sep 2026 05:01:39 +0000
Manifest this update: Fri 25 Sep 2026 05:01:39 +0000
Manifest next update: Sat 26 Sep 2026 05:01:39 +0000
Files and hashes: 1: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: xC42StijeJ6PFPlAL1LYQiPN8kjFvVSEg/Z9dedC7qI=)
2: qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa (hash: rirbnyAccpPKWOcuInuVk5mCK3dHmlXm6puqdnxTn/s=)
3: vG177J2dohuE08wHX2-c78lEhcw.roa (hash: 3JSqj0nOnGoEw7PHeM+wBIAwqea4bnBMwwfIgvqc52Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:ca:26:49:2c:45:c1:96:53:89:be:55:86:bd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Sep 25 05:01:39 2026 GMT
Not After : Sep 26 05:01:39 2026 GMT
Subject: CN=7b6864d5581e2d26a8a482da3b60f3a4fdc9e9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:a4:9d:69:71:83:b5:64:d9:5e:05:a6:0a:
56:6e:9a:d1:77:47:14:5e:8a:16:ce:eb:a3:e9:46:
e1:b4:5f:c3:91:2a:ee:ff:92:85:e7:2c:93:40:bf:
72:c8:c0:b6:8f:42:90:4d:cc:9c:79:e8:ad:94:47:
85:93:aa:bd:8d:6d:84:e5:b8:ff:d5:c0:2e:ff:d7:
8c:15:0c:2e:63:65:91:24:b6:0f:89:34:74:f1:30:
b1:e2:d3:3f:5e:07:df:6c:2d:f1:fb:3e:c5:b4:c7:
0e:e7:40:8d:82:48:76:67:3a:0c:d2:bb:fe:bc:ed:
10:a0:76:bb:71:e2:1b:74:72:09:6a:89:64:a8:1c:
12:44:7d:c8:08:ab:dc:e9:95:22:22:96:58:ab:8a:
80:41:96:30:a0:d4:6f:f1:61:8a:47:e9:1b:07:62:
bd:10:4a:30:1d:c7:12:5e:43:cc:18:99:a3:95:d3:
74:b3:0c:db:fb:d1:09:00:98:cf:43:ee:5d:e1:fc:
cd:c4:59:ca:f4:e7:42:6f:2e:a0:39:8b:ea:88:98:
dd:b6:78:c5:74:35:57:cf:7f:63:be:81:0e:1d:df:
37:0b:25:ba:06:a5:c9:b9:66:bc:af:7b:3f:cf:f5:
61:40:53:36:8b:dd:0d:09:75:94:0a:ee:99:45:47:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:64:D5:58:1E:2D:26:A8:A4:82:DA:3B:60:F3:A4:FD:C9:E9:D9
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:de:86:3b:9c:0f:05:0f:3f:80:45:aa:18:4e:c8:70:68:17:
cd:6f:32:04:ca:5f:21:b0:85:4d:be:1f:67:8b:d8:48:c8:bf:
db:2e:59:51:8f:58:87:3b:d6:fa:a4:94:dc:2c:e1:32:40:14:
50:af:c7:b2:a6:fb:cd:45:94:57:be:fa:a2:90:57:86:27:36:
58:b4:54:56:ab:f9:2f:3f:82:81:99:84:30:76:a7:9e:2c:e5:
d8:39:95:71:4e:1a:30:f8:41:c2:5d:85:aa:e6:39:72:93:5e:
c2:65:cc:a6:18:27:c5:38:b3:8f:69:52:0e:9e:1a:6d:f6:d9:
37:10:1b:99:5a:dc:1c:85:cc:6c:5f:92:e8:51:43:ff:86:c6:
08:e4:a0:53:88:bc:78:2e:5a:db:54:85:29:65:c5:8f:f9:2c:
c6:0f:99:11:98:f2:23:76:89:4d:0d:20:4d:68:f4:82:38:01:
0d:5b:57:16:89:e5:19:96:f3:9f:64:24:7e:59:08:9e:36:b2:
c2:34:03:19:08:c0:d8:b2:34:3d:af:0a:20:7b:aa:40:b2:58:
22:6a:e2:20:8f:4a:f3:b3:f3:36:71:d4:a2:96:55:43:a3:70:
73:7b:15:f6:48:21:f5:4f:c0:54:5f:3a:ac:6f:d8:ba:40:8a:
31:96:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:43:51 2026 by rpki-client