Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: t9T8GIi6BJK/MTjsTbxXH9doQ+luO0C5F/HHft49oms=
Subject key identifier: 62:45:D6:4A:99:6A:E1:C4:0F:A5:1D:CC:EC:AD:4F:CC:22:5C:70:26
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 019D27DFF138AF5EB80083B9E3C74B9EE01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: 4v5BgTcmzQ0y7khumrI19c8q-sM.roa (hash: pU1RWRtn8YAUvSz8vemI3GYYeqO0HhKmjSzy+TkEMSw=)
2: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: iXVzAq88OfV0Le79W1s6mflT6mQFubYYTGCz8L/b1AE=)
3: uJ_NCn-Lq8NE4MvREAlX3QhyYCI.roa (hash: oO/Qq5pXhp2RVnxIT3B+rFWzEWSNId4e/659/WEeXK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f1:38:af:5e:b8:00:83:b9:e3:c7:4b:9e:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=6245d64a996ae1c40fa51dccecad4fcc225c7026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:c1:91:42:0a:0d:5b:d2:db:68:ee:11:f5:
46:e9:30:0c:3e:11:0d:3c:00:46:c0:91:d9:38:42:
33:2a:68:75:20:a0:9a:41:59:d4:30:6a:fc:f7:bd:
fe:3a:bd:33:fd:11:96:73:92:1a:1d:af:de:17:e9:
de:c9:b6:22:f0:d6:3b:30:4d:dd:92:b9:36:f1:69:
18:bc:12:ae:c5:41:39:f5:d3:3f:ea:2f:b2:42:4e:
43:1f:d0:0b:3a:97:94:2a:7a:c3:83:b4:75:52:00:
40:d2:ad:fd:af:60:c1:78:8f:72:67:d0:0b:f7:4a:
43:0a:96:cc:dd:06:66:7d:5d:37:fb:64:41:27:8c:
a1:49:3b:7f:a1:fe:9b:ee:2a:b8:96:52:96:17:d5:
12:a5:99:55:bc:e0:62:40:e2:bc:b2:fe:15:cc:cf:
b5:51:6a:e9:24:a1:4f:76:a9:51:a9:6c:f0:d3:ec:
55:ef:06:40:72:5c:a1:71:0d:10:5a:ca:de:a2:1d:
e6:fe:d1:b5:98:0f:68:e1:7d:f9:9f:f2:6c:ce:21:
f4:3f:79:f4:6f:92:32:c2:93:9d:21:03:4c:78:93:
66:35:a4:79:3c:07:46:16:d2:ec:de:b1:9d:a1:29:
83:f8:65:ee:72:4f:0e:31:62:04:46:19:0e:fa:47:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:45:D6:4A:99:6A:E1:C4:0F:A5:1D:CC:EC:AD:4F:CC:22:5C:70:26
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:41:ab:f3:2a:3f:01:5d:d9:7a:75:f4:32:45:dd:8e:01:5e:
c5:c3:d4:ea:e5:56:50:8d:58:00:e6:37:48:bb:c5:e9:98:bb:
c1:88:d5:4b:0f:02:39:2e:be:93:e7:d7:56:05:66:e5:73:c4:
c6:84:e5:91:db:93:dc:e0:1d:04:c6:48:74:8b:32:0e:57:5c:
a8:c3:ba:ad:bf:d4:36:3b:67:81:09:0b:8a:7f:0f:7b:93:db:
ba:b4:dc:d3:11:07:01:47:87:9e:17:21:f0:de:cf:34:93:8a:
a3:67:20:7f:49:8f:15:6f:e5:85:6f:fa:6b:c0:60:68:fa:a9:
31:fc:18:1b:37:0f:9e:c8:9a:b8:b7:4a:e3:bc:dc:2a:b8:97:
23:5d:ec:0c:62:db:79:8b:68:00:dd:9e:fa:58:d7:d4:61:ca:
45:ca:84:df:50:5d:33:7c:9c:ce:47:e1:35:07:25:a6:07:bc:
2e:2f:c7:76:bf:01:04:a8:c1:59:f3:b4:b5:2c:c0:7f:eb:48:
e7:49:c7:84:f8:ec:81:5c:fa:33:43:7c:17:9f:02:2d:0d:74:
81:85:d0:46:93:35:2b:24:21:b3:23:a6:07:71:56:81:20:05:
79:f2:ed:9d:69:96:00:09:f1:90:92:5c:e3:33:ac:23:1e:2f:
38:81:4c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3/E4r164AIO548dLnuAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDY3ODVmNDY5YmU4YWE3MTUxZTMzMzNlNDc0NjVkNDc4
ZmQwZTcwHhcNMjYwMzI2MDIwMTIwWhcNMjYwMzI3MDIwMTIwWjAzMTEwLwYDVQQD
Eyg2MjQ1ZDY0YTk5NmFlMWM0MGZhNTFkY2NlY2FkNGZjYzIyNWM3MDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B7BkUIKDVvS22juEfVG6TAMPhEN
PABGwJHZOEIzKmh1IKCaQVnUMGr8973+Or0z/RGWc5IaHa/eF+neybYi8NY7ME3d
krk28WkYvBKuxUE59dM/6i+yQk5DH9ALOpeUKnrDg7R1UgBA0q39r2DBeI9yZ9AL
90pDCpbM3QZmfV03+2RBJ4yhSTt/of6b7iq4llKWF9USpZlVvOBiQOK8sv4VzM+1
UWrpJKFPdqlRqWzw0+xV7wZAclyhcQ0QWsreoh3m/tG1mA9o4X35n/JsziH0P3n0
b5IywpOdIQNMeJNmNaR5PAdGFtLs3rGdoSmD+GXuck8OMWIERhkO+kfzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJF1kqZauHED6UdzOytT8wiXHAmMB8GA1UdIwQY
MBaAFJJGeF9Gm+iqcVHjMz5HRl1Hj9DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgt
NWMzOGM3NDc1YWE5LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgtNWMzOGM3NDc1YWE5
LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUGr8yo/
AV3ZenX0MkXdjgFexcPU6uVWUI1YAOY3SLvF6Zi7wYjVSw8COS6+k+fXVgVm5XPE
xoTlkduT3OAdBMZIdIsyDldcqMO6rb/UNjtngQkLin8Pe5PburTc0xEHAUeHnhch
8N7PNJOKo2cgf0mPFW/lhW/6a8BgaPqpMfwYGzcPnsiauLdK47zcKriXI13sDGLb
eYtoAN2e+ljX1GHKRcqE31BdM3yczkfhNQclpge8Li/Hdr8BBKjBWfO0tSzAf+tI
50nHhPjsgVz6M0N8F58CLQ10gYXQRpM1KyQhsyOmB3FWgSAFefLtnWmWAAnxkJJc
4zOsIx4vOIFMQA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:18 2026 by rpki-client