Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
File: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft (raw, json)
Hash identifier: S9EB3N4F+TXGf/4boz7wTUGr00UznizV1bl42vcKWb4=
Subject key identifier: 85:8A:06:55:52:CA:7E:38:99:6D:42:4D:06:48:DF:8A:50:F7:72:CE
Authority key identifier: 2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
Certificate issuer: /CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Certificate serial: 019D2703D04E4736AF30D0142836C5A7EB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
Manifest number: 113B
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl (hash: kLAS3+Ofo0J4QOOlUq+Jzg0mJcVKMFXLvVIZt2nCPn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d0:4e:47:36:af:30:d0:14:28:36:c5:a7:eb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=858a065552ca7e38996d424d0648df8a50f772ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:88:8e:56:c4:5f:16:bb:bb:5c:cf:e4:79:
ae:33:73:c7:35:60:02:5f:46:3c:99:33:e0:3f:26:
c4:7f:67:80:d4:04:4a:b5:69:7a:b5:1d:85:a2:fd:
c8:27:71:3c:b8:54:d4:97:46:48:f2:6e:f6:6e:49:
4f:62:96:ae:9f:67:7a:c1:e4:51:0c:7f:76:30:4e:
1e:69:82:67:5f:18:a5:e4:40:bf:bc:9e:4f:da:98:
63:c8:d8:9e:69:e4:3c:b8:b1:8b:81:c3:ed:83:7a:
4f:04:02:37:74:f9:f0:03:0a:4a:fe:07:db:36:d6:
48:50:92:25:16:1b:95:27:fc:90:4d:c6:ae:6c:74:
f2:0d:ab:a1:a6:42:fc:28:d4:55:9e:04:f6:9b:9f:
a6:b3:fa:18:69:37:f1:2e:94:df:9b:1f:42:28:8f:
3e:96:d5:04:48:9f:01:b4:b2:76:4c:c2:ad:8f:64:
ad:50:f0:29:ca:51:9a:06:87:00:28:8b:fe:e5:94:
5e:ce:bf:fb:7b:0c:75:a5:f1:55:8f:85:1d:66:27:
c2:e2:a4:a3:95:80:9e:dc:f7:13:c8:f1:48:f3:9f:
3c:c9:86:6e:05:4e:73:7f:ac:7d:8a:a8:b1:a4:64:
3c:ed:d3:fc:f4:a5:1f:5e:ff:7f:e3:14:97:5d:81:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8A:06:55:52:CA:7E:38:99:6D:42:4D:06:48:DF:8A:50:F7:72:CE
X509v3 Authority Key Identifier:
keyid:2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2d:2e:7f:d2:9e:0f:11:3a:c6:58:3f:4d:db:bd:7b:c5:6d:
fc:b7:6a:dc:12:c2:44:b4:c7:6a:6f:1f:e9:76:64:a7:4d:b1:
98:00:6e:76:b4:68:98:37:15:c4:3c:53:bb:e5:3c:a1:22:11:
a0:3e:1c:b5:f5:62:db:d2:b2:c0:0a:b9:a6:aa:e0:93:c9:68:
ee:64:6d:ab:7c:d1:c4:c8:06:87:f3:c2:95:95:d6:14:6b:12:
30:15:91:b2:91:c1:54:85:93:76:15:33:45:14:8b:01:17:e7:
19:d9:d3:8a:0f:af:b5:95:ca:12:51:97:6f:7a:c8:e2:f4:48:
37:2b:ef:75:bc:fc:0a:7e:5a:be:0d:fc:5f:5a:8e:d4:a4:23:
59:1a:47:b9:34:dc:ba:39:24:87:1b:f2:3f:0b:a9:2e:c8:a4:
ae:31:a5:7b:38:cb:2d:d1:6b:0a:c4:ce:ad:32:73:22:72:03:
e9:e0:45:e9:51:57:a8:27:b5:e2:94:b5:c3:db:c3:2e:20:e3:
51:98:f0:f7:06:a0:97:7f:29:6e:8b:1d:52:5f:e2:9b:7d:74:
5c:8b:a5:2f:c7:96:8c:26:27:c1:a1:69:2d:c6:33:0c:e2:60:
48:e8:45:17:ab:47:b1:d1:a2:24:0a:ed:fe:21:9b:9c:45:b1:
98:64:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:37 2026 by rpki-client