Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
File: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft (raw, json)
Hash identifier: psbfJKBk1GcmQhHMQd/C5B4sAmwfnikRSiBRF0qQZBg=
Subject key identifier: 35:5F:27:AC:7A:15:22:2B:34:33:50:C2:E2:43:48:95:76:56:7B:C5
Authority key identifier: 2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
Certificate issuer: /CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Certificate serial: 019CAC0FF5C9D0E008B1DA41C745A94BA5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
Manifest number: 49
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl (hash: cWNR/0kTlq0Expag8q7t7NZxEB9ycjejovNg5x002lE=)
2: udm-0Xl3UglvtX_NHkrgYLZH0SE.roa (hash: WYCvnHc5H5Xz3d6/Kkp/D6s/RlGIj7T/WQo1xaUpk+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f5:c9:d0:e0:08:b1:da:41:c7:45:a9:4b:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=355f27ac7a15222b343350c2e243489576567bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:f9:d4:bc:5a:61:ac:91:d3:45:92:ed:53:
e7:9a:e5:30:9e:a5:bb:04:6e:ba:39:a5:fb:bf:ae:
37:35:d6:0e:7d:4b:da:9f:42:70:40:74:9a:b4:9b:
f2:31:86:5b:c6:3a:1c:05:b2:53:ca:75:0e:9d:1d:
dd:7a:ee:40:c5:07:f2:ae:d5:11:27:c9:06:d6:8a:
66:e2:67:0f:52:4c:52:a8:59:cf:19:80:a8:6a:9f:
b0:c1:15:c2:19:5e:ec:fe:b4:f9:cc:47:42:a8:13:
4b:de:0b:b3:b4:d3:b2:09:b9:8d:21:d4:50:bc:de:
ac:96:28:6b:94:63:11:52:a2:e5:7a:6a:5a:9c:d7:
29:94:55:c1:96:62:fa:6c:05:12:73:ba:10:60:40:
d5:b5:65:0f:9d:5d:f9:20:1a:29:2f:56:f4:5e:c1:
f3:50:34:3a:15:f4:d6:d1:b4:c9:73:3a:2d:be:0e:
5c:60:51:88:4a:f5:2e:5f:66:40:2d:d2:7c:47:77:
84:40:1d:7a:ec:72:52:80:db:14:45:45:2b:de:ad:
82:5f:cf:c4:12:b5:cc:5e:89:d0:9c:01:8b:5d:73:
b2:df:0c:f2:79:33:b3:c9:c1:ee:d7:6c:93:52:c2:
a8:1c:83:26:f2:05:b3:19:f7:12:e9:e3:d7:ce:30:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:27:AC:7A:15:22:2B:34:33:50:C2:E2:43:48:95:76:56:7B:C5
X509v3 Authority Key Identifier:
keyid:2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1c:b7:75:1d:dd:70:ce:49:66:29:08:2b:05:4c:5f:3d:6c:
56:85:0a:57:41:79:42:50:7f:81:c4:76:69:fd:c3:19:f5:d0:
a0:4f:e2:90:21:cf:39:71:91:69:b9:6b:96:68:4b:de:74:4d:
14:a5:46:34:ef:62:25:54:ba:d9:17:9a:a6:63:f7:dd:20:d1:
12:6a:f3:c3:08:be:8f:96:da:49:cf:6e:fa:b6:4b:62:2f:27:
8e:4e:5f:bf:0a:86:14:44:bd:6d:24:f7:78:99:3a:d2:4b:b2:
ba:78:3b:bd:a3:bd:3a:86:f0:1c:7d:9f:c8:91:83:58:37:30:
13:77:93:06:4d:b2:ec:6e:00:84:2a:20:42:d2:22:31:d4:5d:
d7:a1:62:e7:b5:63:58:ba:1b:57:51:a9:8c:28:3a:4f:ee:57:
50:44:3d:d5:60:f2:14:2c:cc:ba:27:50:8a:b0:7e:0c:d6:ce:
41:1e:5d:95:60:c0:4f:46:e2:25:a6:9a:9e:62:e0:a8:2c:fc:
17:11:73:15:ec:d9:0e:64:94:d8:81:2e:d2:c3:d5:3a:5f:6a:
4c:ef:41:7e:2e:5c:a4:79:9c:47:c2:e3:31:5e:82:4d:e0:60:
dd:26:a2:44:02:d5:33:19:69:4b:5d:1c:28:e3:4c:09:7f:29:
4a:d7:fb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:50:38 2026 by rpki-client