Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: krIyIBhMHgjuHeyZLOreWNdboeiSq9Tz27mFmdrOzmA=
Subject key identifier: 4C:B6:6A:04:A4:66:F7:F5:A6:44:CA:F0:84:C1:6E:BC:5D:21:E7:8E
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 01A0D501D7044E5E1FA42021070F4EC32DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 17C1
Signing time: Thu 24 Sep 2026 20:01:02 +0000
Manifest this update: Thu 24 Sep 2026 20:01:02 +0000
Manifest next update: Fri 25 Sep 2026 20:01:02 +0000
Files and hashes: 1: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: chwnYQOXtwNDS84FLff/mm8gBez/ubVTCFj54JvFyoc=)
2: qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa (hash: rirbnyAccpPKWOcuInuVk5mCK3dHmlXm6puqdnxTn/s=)
3: vG177J2dohuE08wHX2-c78lEhcw.roa (hash: 3JSqj0nOnGoEw7PHeM+wBIAwqea4bnBMwwfIgvqc52Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:d7:04:4e:5e:1f:a4:20:21:07:0f:4e:c3:2d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Sep 24 20:01:02 2026 GMT
Not After : Sep 25 20:01:02 2026 GMT
Subject: CN=4cb66a04a466f7f5a644caf084c16ebc5d21e78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:f2:dd:36:28:5a:6a:0f:07:06:53:58:ed:
32:fa:38:7e:8c:dd:e4:44:8b:94:d1:d5:de:30:cb:
a8:90:a2:87:c5:05:c4:c2:15:31:ce:45:61:22:99:
0b:99:48:e9:6b:dd:dc:4a:19:f9:76:e0:9f:2c:39:
ab:18:87:3a:b8:ce:d3:e8:db:8f:0e:ac:6a:f1:6d:
53:12:eb:13:be:cc:89:9f:65:1a:c6:32:45:49:0d:
f0:57:13:7c:65:48:74:03:b7:81:85:cc:fa:16:8b:
2b:12:7b:fc:31:70:5b:8b:7c:04:bc:32:96:a3:e6:
68:67:c1:b2:1e:87:dc:0c:b2:b9:c4:8c:81:60:3e:
2c:58:08:c0:c0:8d:f2:f3:de:7f:2b:76:ed:9f:62:
70:30:6b:7e:d0:e0:11:d6:0d:d5:db:cd:82:41:2b:
44:6f:cb:ec:7c:09:3f:52:1a:90:e2:ea:c8:ea:50:
6b:3d:42:7e:cd:29:13:1b:7a:c0:32:61:ac:f6:b1:
5c:e9:c3:14:f2:e2:82:6a:ae:bd:f8:85:5d:30:17:
3b:12:fc:18:f0:4c:c8:5c:d3:a9:92:df:b3:97:04:
42:5f:2b:ec:67:c7:06:53:c7:43:a3:fe:b3:c6:f6:
21:0e:8a:49:24:b7:69:79:50:d0:aa:6d:1e:3c:63:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:6A:04:A4:66:F7:F5:A6:44:CA:F0:84:C1:6E:BC:5D:21:E7:8E
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:97:59:0b:5b:d4:5d:20:94:dc:eb:19:f3:be:d4:b8:b5:
22:3d:3c:5e:5a:43:2a:2e:91:0b:b9:45:97:d8:48:11:2c:91:
6f:02:d1:47:60:c3:d8:3b:9c:46:7a:a3:10:00:8c:14:60:07:
0d:fd:c6:7c:af:43:e0:d0:84:6c:a8:ca:7a:a6:a8:b5:36:aa:
54:cc:29:82:f5:bd:92:47:46:68:43:1b:92:64:e7:29:48:40:
ca:1d:4e:9c:cf:87:d1:0a:01:bd:92:b4:db:15:71:57:d6:b6:
11:2a:f9:5c:aa:17:d2:e0:60:1e:c8:6e:60:b3:8a:43:26:13:
57:6c:5f:04:99:b7:78:45:4f:dd:5b:db:68:f2:03:ad:05:fd:
fe:fd:eb:04:32:3d:86:d9:c4:b4:59:23:8c:7a:be:f1:b8:78:
04:07:d7:b5:78:22:65:34:bb:d8:b4:ce:b2:46:e3:50:f1:33:
b9:ae:cb:db:01:18:90:7e:65:9c:dc:00:bc:66:c5:f1:c8:b0:
0f:76:2f:80:52:80:d8:cd:53:1f:c8:ba:b4:77:c7:63:c2:93:
26:0e:e2:bc:ac:ae:b9:ad:9f:d0:f7:65:2a:17:ad:40:2e:62:
8d:49:27:56:52:22:9c:4a:95:d6:db:39:28:32:72:28:95:bd:
e7:2e:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:45:50 2026 by rpki-client