Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier: FYKByPaMcvDaGLkzV0ab4XfG0QNv7tRQEzxLW8keuIo=
Subject key identifier: CA:E0:72:9E:28:FE:CC:EA:C7:9E:DF:DE:03:CF:56:33:68:3E:2B:E5
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial: 019D25F0FAD0E3CB11F97F7D964859A0CAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 17:00:42 +0000
Manifest this update: Wed 25 Mar 2026 17:00:42 +0000
Manifest next update: Thu 26 Mar 2026 17:00:42 +0000
Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: K3dG+/NhL9ATwA/jGIWh6AVqJdTiTFcUm5CR31mutKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:fa:d0:e3:cb:11:f9:7f:7d:96:48:59:a0:ca:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Validity
Not Before: Mar 25 17:00:42 2026 GMT
Not After : Mar 26 17:00:42 2026 GMT
Subject: CN=cae0729e28fecceac79edfde03cf5633683e2be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:d5:0a:2d:9d:32:e4:be:ef:93:db:9f:10:
a5:c3:cb:c6:e3:f4:00:6b:2b:cc:d7:7f:f0:48:e1:
82:67:45:25:c0:c1:65:0a:73:15:70:b0:ae:bf:10:
dc:45:f8:c8:22:fb:b2:08:96:1f:17:2d:d2:86:e8:
b9:01:ae:c3:38:c0:fd:1d:14:60:f6:55:73:67:d2:
17:1e:83:3b:fd:74:fe:24:17:6b:ee:82:26:32:bd:
61:5c:a1:32:b7:56:47:9d:f0:9b:76:fa:fb:43:16:
6d:a8:16:b2:e1:9b:f8:dd:99:76:a8:97:ef:a1:e6:
0e:2c:1e:89:77:66:2e:82:12:05:fb:25:b3:bb:b5:
17:94:0e:00:b8:1a:f7:ae:bc:b9:83:e0:37:66:6c:
19:cc:84:67:a1:0d:91:54:05:4a:4c:25:0c:6c:4f:
8d:d2:b7:bb:81:9b:a4:ef:59:3d:5d:cb:f0:66:72:
23:30:e4:7a:79:f8:04:4f:53:ca:d4:9d:d6:35:47:
04:61:f1:1b:d0:71:d3:52:4c:db:32:81:d0:d9:9f:
60:94:d1:7a:ea:25:66:11:b0:51:f7:cf:4a:46:7a:
ee:66:e8:98:78:f2:ab:d2:47:3c:95:6c:11:20:03:
75:5f:4b:a8:97:9d:df:72:92:72:47:a9:d2:13:33:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:72:9E:28:FE:CC:EA:C7:9E:DF:DE:03:CF:56:33:68:3E:2B:E5
X509v3 Authority Key Identifier:
keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c9:83:d5:c2:14:94:fe:ee:00:3b:2e:ee:bc:f0:8a:1c:63:
fc:d0:6c:d0:cf:f0:07:06:e4:f2:01:ac:3c:91:18:a8:a4:4e:
2b:c7:7a:12:2e:90:57:a2:f3:27:fc:66:40:c7:d2:d8:1a:86:
9a:1c:f1:dd:69:f0:18:ce:f4:c1:d5:9c:4d:84:4f:e1:c9:59:
ef:de:13:dd:5e:76:3b:8e:b4:85:1a:ba:ad:7c:95:69:8a:65:
ca:79:65:8a:f7:ed:71:62:b4:5b:fb:8b:1e:14:12:59:01:6f:
5a:d2:08:a2:7c:98:66:62:a5:e2:63:ba:6d:4d:38:e6:8e:b0:
f9:a6:b4:4a:33:44:34:54:9c:a1:51:47:da:0d:8e:3c:ab:65:
0a:c5:91:3c:ff:10:82:ae:fe:ac:93:65:aa:10:d3:9b:de:37:
b3:ec:a9:2f:cc:d3:da:ff:a3:3d:59:2c:4f:9f:3b:5b:cf:7f:
f7:b8:ab:03:f0:5d:2f:9d:55:85:13:a8:22:0d:2c:dc:0f:22:
b9:37:f1:47:13:56:78:e4:6b:ad:69:12:16:13:94:95:16:13:
bc:ac:62:3e:96:ea:b4:96:7a:56:31:35:ea:c9:1a:6a:3f:7b:
fc:76:8a:26:c4:16:b7:91:5c:5c:73:65:44:ca:6b:d6:02:da:
5d:26:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:02 2026 by rpki-client