Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: JZzcGENtsko9Pg8BIydwvSHxbbQ5HlbiQCdp9fGXN+Y=
Subject key identifier: 71:38:FE:AE:F3:45:07:94:05:2C:49:87:E4:E3:BC:B4:47:B2:0B:88
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019D9A3EE7F957B6EE5E952FC8F9191642D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 1450
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: WjqPmvT6k0eI5BcYBzSZluUcYVvRSraM2DC0JFOD19k=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e7:f9:57:b6:ee:5e:95:2f:c8:f9:19:16:42:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=7138feaef3450794052c4987e4e3bcb447b20b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:96:1e:50:0a:ca:94:f1:82:ce:15:6e:fa:
5d:39:66:86:1a:f3:e7:b7:6e:05:b1:e2:52:d4:b0:
65:9a:ea:61:57:58:70:1f:8c:76:e9:6d:bc:fd:a8:
50:31:06:df:e0:01:cc:16:2a:c3:41:93:0c:2f:63:
7e:1a:ac:2b:b8:78:46:a1:2e:bf:ae:9c:f3:49:3b:
57:2d:aa:b9:02:f4:50:60:dc:6c:31:57:d0:a7:f9:
b5:26:19:cd:46:68:5a:3b:14:b6:31:95:85:5a:6a:
10:71:ac:df:40:b5:85:2d:0d:ff:d7:c5:93:02:d6:
1f:75:4d:2e:0d:d6:04:f4:a7:ed:db:84:e3:36:de:
bc:f9:f3:2d:ee:ec:ed:8e:cb:63:90:65:87:02:87:
bf:b0:10:c3:68:29:fc:2c:58:ef:8d:a6:77:60:64:
21:58:00:8c:e0:d8:fd:55:97:a0:e8:c0:8f:bf:60:
a6:a2:37:42:69:6d:8d:2e:e9:dd:f1:c1:72:ee:7f:
6d:07:54:cf:c4:bb:86:14:70:2d:c3:bf:48:2c:78:
01:42:4e:43:33:b3:c9:23:98:1b:ad:50:aa:de:50:
2b:62:eb:8f:5c:ec:d6:82:c3:8e:18:25:d3:64:a7:
6e:08:bf:46:52:fa:66:53:d0:c6:0f:2a:3c:c1:47:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:38:FE:AE:F3:45:07:94:05:2C:49:87:E4:E3:BC:B4:47:B2:0B:88
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f9:19:1f:38:f4:37:3a:6b:e3:69:8d:f7:f9:bd:69:ba:d7:
8e:a7:a7:7b:e9:c2:9a:8e:98:3e:ba:d6:fb:dc:49:f8:7f:65:
a9:32:4a:55:e5:e7:c7:c3:2e:47:31:21:23:3a:ec:0a:79:cd:
09:3f:77:93:8a:99:81:51:c4:33:bd:6c:7e:7e:6a:e2:1c:fe:
5c:8b:90:de:aa:fa:c4:72:9e:58:62:e1:34:0e:26:ed:38:4f:
02:08:90:ae:1c:85:82:48:d3:c2:5b:7d:6c:0d:b2:15:55:8b:
97:85:0b:2f:66:68:f6:66:dc:c0:22:69:54:26:7f:86:91:a4:
35:30:b5:91:97:dc:f9:63:d6:12:56:4d:14:9c:47:24:b3:fb:
2b:bb:58:82:da:f3:31:0c:5e:32:52:9e:5b:e2:df:3a:3c:b4:
79:19:58:98:a0:62:1e:c1:0b:b8:76:bc:45:37:1b:ca:59:aa:
0e:26:1e:37:fa:7d:b2:2f:17:7a:66:fa:6e:f9:1a:fb:30:04:
ba:2a:d9:28:71:e2:16:73:e2:5e:b3:c7:e0:82:e6:b9:e8:39:
41:86:72:d3:39:a4:9c:5f:32:fb:a2:8c:1e:07:5d:40:b9:1e:
a1:70:53:b9:8a:63:82:6b:fb:ac:1d:c9:54:08:9a:1c:20:b6:
dd:d6:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:18 2026 by rpki-client