Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: IP8lMI+MexNISr1QawMrkjLkcjD2VfHtJukCuI6+0Vc=
Subject key identifier: A4:6B:F7:3D:6C:0E:BE:1E:E0:95:CE:3C:22:78:DD:DD:54:BA:21:1D
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 019E1BD906EF8BA9D46F0FB2BDC9FCAE7168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 1658
Signing time: Tue 12 May 2026 11:01:08 +0000
Manifest this update: Tue 12 May 2026 11:01:08 +0000
Manifest next update: Wed 13 May 2026 11:01:08 +0000
Files and hashes: 1: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: fCxpw1HVTMH+Oaex0JRTIMEGfIsuCdzA78fpIvhTPec=)
2: qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa (hash: rirbnyAccpPKWOcuInuVk5mCK3dHmlXm6puqdnxTn/s=)
3: vG177J2dohuE08wHX2-c78lEhcw.roa (hash: 3JSqj0nOnGoEw7PHeM+wBIAwqea4bnBMwwfIgvqc52Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:06:ef:8b:a9:d4:6f:0f:b2:bd:c9:fc:ae:71:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: May 12 11:01:08 2026 GMT
Not After : May 13 11:01:08 2026 GMT
Subject: CN=a46bf73d6c0ebe1ee095ce3c2278dddd54ba211d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:27:aa:92:f5:1e:d0:73:ee:16:52:37:ff:
9e:51:c3:c4:1d:01:24:b9:ee:74:ff:2b:43:10:74:
b7:61:67:96:00:3f:2e:60:81:90:37:d8:0e:17:be:
45:69:7e:4a:d8:28:00:96:c1:57:c6:be:4a:9b:50:
d9:9a:6c:5f:9f:11:de:17:78:24:73:8b:64:34:03:
45:e3:97:0f:3a:f7:ee:36:e3:fa:55:41:6e:44:d2:
bd:cb:f7:de:9b:e9:c0:9b:bc:0a:08:3d:34:00:ea:
a7:1b:fb:f3:d2:2a:65:67:8e:c7:06:c7:6c:15:07:
d1:2e:d7:07:ad:2f:08:e4:1c:2f:47:67:bd:53:6d:
fd:18:cf:76:e9:1b:79:06:f8:79:8a:a4:13:4b:ea:
ec:db:a3:30:95:96:65:1e:48:f9:98:51:1e:91:d1:
70:77:9b:37:4d:34:62:8c:67:6b:84:25:06:0a:b0:
a0:a8:00:b4:c6:3a:66:61:dd:e2:65:53:9d:b6:2d:
e8:84:60:d6:e9:10:4d:1b:a2:3e:7a:30:07:47:0a:
66:c6:48:a9:7b:41:85:c8:d7:2f:1a:a0:14:04:45:
bf:96:fa:5b:44:5a:06:e0:db:da:4b:cd:d7:9d:26:
78:e8:88:01:fe:49:18:8d:37:62:f6:fa:b3:e7:c1:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6B:F7:3D:6C:0E:BE:1E:E0:95:CE:3C:22:78:DD:DD:54:BA:21:1D
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:97:05:41:77:fd:ff:b3:b3:10:16:94:9d:5a:29:0f:0a:1b:
80:65:61:62:6d:93:dd:6e:db:d3:e2:5b:05:1d:2e:fc:d8:0f:
41:41:e1:90:4e:77:aa:a1:b0:db:31:90:00:9e:50:34:b6:26:
bd:e0:fb:6f:3a:55:63:82:a4:fd:a7:6e:32:e4:85:89:de:0d:
ec:d1:66:01:ac:79:4e:3e:82:07:e6:e1:ad:4f:98:45:39:c0:
d5:a8:fa:5e:3b:3c:07:ea:ad:4f:ca:8a:41:09:7f:45:a2:0f:
dc:80:03:76:dd:80:4a:33:02:ea:3a:02:d7:f3:f8:c5:70:3e:
0b:55:34:ed:95:22:76:55:f2:69:34:d8:af:d1:64:34:df:05:
a0:e2:03:04:04:43:c1:7d:1a:e3:45:07:77:99:62:bb:e5:92:
b4:01:68:c0:4c:ea:dd:13:c6:3f:19:17:fe:b4:fa:16:f7:9b:
79:7a:4c:54:56:ba:8e:89:7b:ee:be:80:e3:d3:52:14:43:41:
d8:bb:01:ea:74:f7:7a:74:5f:21:a1:b3:d4:d8:ce:85:fd:f2:
e9:ed:df:cf:4c:8f:4a:73:be:ae:c8:d5:0d:d7:3b:11:d2:10:
54:1f:d1:ca:ab:52:d6:2a:b7:42:83:8b:16:33:57:68:6d:e7:
45:24:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:41:44 2026 by rpki-client