Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: 9QiGTQAZyLcayHd7DDYBvHOiSpqOZpEMEwdU+cyT+Kg=
Subject key identifier: 9F:D2:85:2B:D4:2A:57:3B:95:12:06:0C:A3:FA:F6:79:89:6F:B1:6F
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019CAAC6F1CBAD34904AF40939DC39EA38C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 13D4
Signing time: Sun 01 Mar 2026 19:01:30 +0000
Manifest this update: Sun 01 Mar 2026 19:01:30 +0000
Manifest next update: Mon 02 Mar 2026 19:01:30 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: OQVs/Ke3rm4qg2rAoQPfN72CuiduMqYgmWInnCgtlGM=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f1:cb:ad:34:90:4a:f4:09:39:dc:39:ea:38:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Mar 1 19:01:30 2026 GMT
Not After : Mar 2 19:01:30 2026 GMT
Subject: CN=9fd2852bd42a573b9512060ca3faf679896fb16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:e5:34:ea:dc:6e:25:3e:6d:d8:27:6b:28:
28:62:ad:99:b3:f6:78:f4:05:a2:ab:84:f9:de:18:
28:5f:10:25:d0:c0:fc:a1:fc:a0:4a:e0:bd:ae:45:
3e:4c:c0:73:3c:e7:67:05:38:23:10:33:d8:cc:68:
07:2e:24:d4:02:68:ed:3e:cc:c7:a2:a6:b0:a5:7e:
d0:01:e0:2e:b2:5e:59:15:d6:d5:c3:78:fe:09:7f:
90:4e:a4:27:39:61:c3:7d:22:dd:4e:e7:92:ce:8f:
01:8d:73:7c:3b:f9:6f:57:c0:72:8a:b6:66:c3:b2:
c4:39:74:ba:34:53:78:bf:aa:dc:6f:81:81:30:50:
b2:23:7b:33:ec:6c:74:53:68:6e:84:4d:61:2c:6e:
9f:e4:32:b1:56:91:80:08:2b:57:a9:59:0c:4a:2e:
f3:45:a2:6a:a9:89:23:87:ae:fc:63:f6:5e:f1:a9:
08:00:14:f7:dc:a3:39:c5:f0:22:02:63:2c:8e:05:
76:b2:37:f8:43:3b:bb:ae:58:c1:72:e4:12:24:cd:
2c:11:6b:99:00:c1:6d:d3:a5:b1:69:0f:c1:7a:fb:
af:bc:4d:a0:a6:6d:7a:4b:40:09:74:00:b5:7a:e8:
2e:ac:44:60:d8:35:9d:32:81:f5:2f:dd:3a:ab:34:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:85:2B:D4:2A:57:3B:95:12:06:0C:A3:FA:F6:79:89:6F:B1:6F
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:7a:4c:6b:0e:4d:eb:f9:15:69:2a:43:43:ce:45:75:e7:
43:6f:07:9d:37:bc:8c:8e:e6:35:ef:4e:a1:68:11:0d:f4:cc:
dd:77:fc:70:81:61:e0:17:ce:ac:ba:d6:95:f4:57:94:27:fb:
fb:b0:0a:a6:6c:1a:70:68:6f:b9:4c:4f:32:38:b9:ca:e1:0c:
e5:62:73:ee:e0:03:47:7d:7d:d7:9b:50:6a:5b:f4:0e:c6:62:
8b:61:e2:4d:70:b8:aa:32:ff:94:fb:77:bf:7b:4b:dd:0f:9d:
7c:30:0d:a1:fc:88:ba:b6:9c:ec:a1:49:26:57:2b:97:41:78:
7a:97:c9:e6:43:5c:73:38:ae:16:d9:41:92:44:5d:e0:27:ab:
e7:ff:04:7a:4c:9f:19:8f:94:7a:eb:a3:a4:68:5e:f7:7e:4b:
a4:26:79:80:1e:ff:89:04:b9:f9:bc:f7:25:71:8a:65:0a:df:
00:89:88:dc:36:41:bc:d1:05:db:62:42:9a:cd:73:d9:df:a2:
18:11:88:0c:ba:e0:49:9d:cd:46:bd:72:98:0b:4c:13:45:47:
7e:a2:28:bc:e3:b6:ea:fa:49:4c:9a:a0:53:25:b6:b8:d1:f6:
24:c7:cd:42:f6:1a:7a:a9:32:a3:ca:80:30:60:a5:6a:3b:8b:
d9:d5:0f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxvHLrTSQSvQJOdw56jjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw
MTcwODcwHhcNMjYwMzAxMTkwMTMwWhcNMjYwMzAyMTkwMTMwWjAzMTEwLwYDVQQD
Eyg5ZmQyODUyYmQ0MmE1NzNiOTUxMjA2MGNhM2ZhZjY3OTg5NmZiMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmizlNOrcbiU+bdgnaygoYq2Zs/Z4
9AWiq4T53hgoXxAl0MD8ofygSuC9rkU+TMBzPOdnBTgjEDPYzGgHLiTUAmjtPszH
oqawpX7QAeAusl5ZFdbVw3j+CX+QTqQnOWHDfSLdTueSzo8BjXN8O/lvV8ByirZm
w7LEOXS6NFN4v6rcb4GBMFCyI3sz7Gx0U2huhE1hLG6f5DKxVpGACCtXqVkMSi7z
RaJqqYkjh678Y/Ze8akIABT33KM5xfAiAmMsjgV2sjf4Qzu7rljBcuQSJM0sEWuZ
AMFt06WxaQ/BevuvvE2gpm16S0AJdAC1eugurERg2DWdMoH1L906qzQwKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/ShSvUKlc7lRIGDKP69nmJb7FvMB8GA1UdIwQY
MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt
M2ExNTk1ZmM4NmVmLzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm
LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+B6TGsO
Tev5FWkqQ0PORXXnQ28HnTe8jI7mNe9OoWgRDfTM3Xf8cIFh4BfOrLrWlfRXlCf7
+7AKpmwacGhvuUxPMji5yuEM5WJz7uADR31915tQalv0DsZii2HiTXC4qjL/lPt3
v3tL3Q+dfDANofyIurac7KFJJlcrl0F4epfJ5kNccziuFtlBkkRd4Cer5/8Eekyf
GY+UeuujpGhe935LpCZ5gB7/iQS5+bz3JXGKZQrfAImI3DZBvNEF22JCms1z2d+i
GBGIDLrgSZ3NRr1ymAtME0VHfqIovOO26vpJTJqgUyW2uNH2JMfNQvYaeqkyo8qA
MGClajuL2dUPBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:32 2026 by rpki-client