Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: U/kghAyd1hxmJoRs3cV6YZN4bIjCf6ifuBwSrHHIqpE=
Subject key identifier: 0D:9B:B6:9A:90:4D:BD:6C:9F:56:66:13:14:89:C4:54:2C:9A:C1:41
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019EBDDA5DDD3A2D9BCDC3FF3C80F2955F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 14E7
Signing time: Fri 12 Jun 2026 22:01:05 +0000
Manifest this update: Fri 12 Jun 2026 22:01:05 +0000
Manifest next update: Sat 13 Jun 2026 22:01:05 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: WldCAgKEhty+OnuR7/6+ReBROsprgBgkabHakXbYOLw=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:5d:dd:3a:2d:9b:cd:c3:ff:3c:80:f2:95:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Jun 12 22:01:05 2026 GMT
Not After : Jun 13 22:01:05 2026 GMT
Subject: CN=0d9bb69a904dbd6c9f5666131489c4542c9ac141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:fe:11:d0:e7:fa:57:80:b2:51:ff:dc:e7:
01:89:c4:a1:1f:07:a6:91:ec:18:a8:6e:c4:1b:1b:
57:36:3f:46:a9:8c:7b:2c:59:e9:29:35:74:62:47:
cb:60:ff:aa:1b:9c:b7:11:ce:91:bf:d1:b2:36:64:
23:25:90:7f:46:cb:79:a5:e5:d2:f2:2c:2b:b4:70:
bd:86:f2:a5:31:14:b4:a3:26:38:5c:4a:1d:b4:0e:
d0:56:ed:d9:48:32:20:d3:6f:cc:f2:4f:da:ef:df:
a3:21:64:8f:62:3b:2a:27:a9:3e:db:f1:f4:32:8e:
d1:5c:9e:3b:11:06:2d:ac:f3:86:8b:bf:a4:0f:36:
09:60:5e:4f:f9:9d:50:66:0b:0b:8c:c0:71:5a:cf:
73:d5:bc:33:c4:1a:53:f8:6c:b5:9f:a8:2a:b6:bd:
3c:6f:de:ca:e3:5c:36:28:da:b5:e8:d9:94:43:6f:
c4:a2:10:bd:c1:6a:47:07:cc:55:78:f4:2a:79:97:
db:e8:33:cb:de:40:bb:a5:19:13:78:8a:e0:83:d2:
fe:45:be:57:e0:d1:86:8b:90:65:6c:8e:03:5d:9a:
bd:7a:3d:fb:2d:92:cc:99:5e:f8:73:54:ed:e0:ed:
7e:7e:45:db:78:54:dd:33:09:cf:f4:5a:56:30:38:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:B6:9A:90:4D:BD:6C:9F:56:66:13:14:89:C4:54:2C:9A:C1:41
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0b:b9:3b:fe:e9:a0:6f:fb:53:59:f7:76:6b:69:6e:70:15:
bb:a2:10:61:78:69:19:08:9c:e6:b2:c3:ac:45:0f:53:a3:27:
d7:e2:65:32:a1:ff:6f:4e:95:cf:b4:bc:cd:81:b1:ca:d9:de:
f5:8d:8f:32:ea:f8:c0:cd:51:24:2c:f1:02:e9:ca:54:6f:d0:
c6:ae:a7:2d:df:b5:b1:2b:5c:c0:a2:61:d7:df:36:e2:9c:56:
7c:c6:db:e4:0b:96:28:02:be:95:35:a2:fc:da:f6:32:b3:5e:
97:31:25:87:cf:72:6e:2d:30:17:64:9a:f9:2a:57:73:80:d2:
f6:c9:5f:2a:61:b1:e0:f2:52:27:46:c7:9f:6d:27:84:a7:84:
cb:23:c2:69:0f:c2:82:03:a3:28:dd:b0:59:66:5b:ec:23:ae:
51:69:69:aa:bb:ed:a2:1f:30:d4:fe:4b:2e:41:f7:d1:71:34:
48:74:8a:30:b2:50:db:03:b7:5c:f1:d1:51:2d:98:20:e7:df:
97:92:7f:db:7f:e6:89:7a:fe:c9:a4:35:79:af:a4:d9:03:b0:
87:75:ee:92:2f:6a:0d:3a:8f:50:50:8a:da:60:25:4e:60:4f:
4b:8c:88:2c:6c:ff:57:d0:ec:f9:ae:c9:9c:d0:d0:fa:ef:81:
d9:35:1e:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692l3dOi2bzcP/PIDylV8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw
MTcwODcwHhcNMjYwNjEyMjIwMTA1WhcNMjYwNjEzMjIwMTA1WjAzMTEwLwYDVQQD
EygwZDliYjY5YTkwNGRiZDZjOWY1NjY2MTMxNDg5YzQ1NDJjOWFjMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO7+EdDn+leAslH/3OcBicShHwem
kewYqG7EGxtXNj9GqYx7LFnpKTV0YkfLYP+qG5y3Ec6Rv9GyNmQjJZB/Rst5peXS
8iwrtHC9hvKlMRS0oyY4XEodtA7QVu3ZSDIg02/M8k/a79+jIWSPYjsqJ6k+2/H0
Mo7RXJ47EQYtrPOGi7+kDzYJYF5P+Z1QZgsLjMBxWs9z1bwzxBpT+Gy1n6gqtr08
b97K41w2KNq16NmUQ2/EohC9wWpHB8xVePQqeZfb6DPL3kC7pRkTeIrgg9L+Rb5X
4NGGi5BlbI4DXZq9ej37LZLMmV74c1Tt4O1+fkXbeFTdMwnP9FpWMDhKBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2btpqQTb1sn1ZmExSJxFQsmsFBMB8GA1UdIwQY
MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt
M2ExNTk1ZmM4NmVmLzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm
LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAu5O/7p
oG/7U1n3dmtpbnAVu6IQYXhpGQic5rLDrEUPU6Mn1+JlMqH/b06Vz7S8zYGxytne
9Y2PMur4wM1RJCzxAunKVG/Qxq6nLd+1sStcwKJh19824pxWfMbb5AuWKAK+lTWi
/Nr2MrNelzElh89ybi0wF2Sa+SpXc4DS9slfKmGx4PJSJ0bHn20nhKeEyyPCaQ/C
ggOjKN2wWWZb7COuUWlpqrvtoh8w1P5LLkH30XE0SHSKMLJQ2wO3XPHRUS2YIOff
l5J/23/miXr+yaQ1ea+k2QOwh3Xuki9qDTqPUFCK2mAlTmBPS4yILGz/V9Ds+a7J
nNDQ+u+B2TUeog==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:22:00 2026 by rpki-client