Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: iQnagqtpwTbe4C/BUsiYzcZzdR4+tDUlOBYmvEgu6EA=
Subject key identifier: 51:1E:FA:2E:DF:AC:C2:C8:A1:84:2D:78:FE:E6:F3:A7:16:E7:8F:58
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 01A0C17B7F0152FECA7A15C721D5BEC51F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 15F2
Signing time: Mon 21 Sep 2026 01:01:31 +0000
Manifest this update: Mon 21 Sep 2026 01:01:31 +0000
Manifest next update: Tue 22 Sep 2026 01:01:31 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: g0eHXFkoVgBQDy7L2sEKoToAk+rWJnL/+nt3L3gICOo=)
2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=)
3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:7f:01:52:fe:ca:7a:15:c7:21:d5:be:c5:1f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Sep 21 01:01:31 2026 GMT
Not After : Sep 22 01:01:31 2026 GMT
Subject: CN=511efa2edfacc2c8a1842d78fee6f3a716e78f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:f9:a1:57:a4:b8:70:74:6b:14:ea:c9:c4:
21:79:cf:16:09:56:98:64:3b:64:47:52:a1:19:d9:
98:7b:bc:6b:99:65:bd:fa:28:b2:cc:e3:e7:aa:64:
8e:b0:21:2b:dc:d6:06:d4:01:85:0f:7d:b4:cd:e8:
3e:24:89:ab:95:89:b2:a9:c5:84:07:80:78:11:ac:
7e:74:28:64:89:6b:29:ff:44:c5:85:c6:40:cf:23:
b9:f9:1a:0d:72:aa:82:08:11:05:59:b3:6a:5e:89:
52:72:94:9c:53:78:cf:cf:a4:ea:68:4c:7a:ae:3c:
50:4c:61:da:e4:5f:e1:f8:7d:df:95:4d:7b:3c:d8:
57:de:56:7d:f1:6e:bd:30:d6:63:29:0e:ac:58:78:
50:84:aa:b9:7a:78:71:5f:d8:64:c0:f6:d3:77:95:
7e:52:f3:ae:a7:49:3a:7c:ae:6f:5a:be:fe:2a:4b:
ff:0e:e5:88:22:bf:80:f0:e1:be:22:65:54:39:6f:
29:96:bc:fc:fb:50:38:a9:52:79:1f:ee:4c:fa:d2:
49:2e:0b:98:a3:b3:75:8e:ab:3e:fc:fe:af:23:43:
19:9e:ea:06:e3:5e:5e:99:bb:12:54:1d:36:a2:32:
f9:35:85:e0:96:f7:53:05:9e:52:b3:c3:fe:bb:c9:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:FA:2E:DF:AC:C2:C8:A1:84:2D:78:FE:E6:F3:A7:16:E7:8F:58
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a4:79:ff:03:b0:45:12:00:dd:86:13:41:d9:06:44:a5:33:
7c:31:63:25:f9:b6:40:d2:bf:ab:97:a8:68:30:cf:67:50:c0:
20:a1:f4:14:49:45:92:97:dd:14:35:24:97:f6:62:70:4e:7f:
8d:8a:c3:be:0a:83:59:36:21:fb:c0:b9:34:b9:b7:e8:90:ce:
f9:75:27:51:06:e5:1c:76:ce:0f:a0:f3:08:d0:7f:ae:11:4a:
59:af:89:94:80:3b:85:c7:45:c7:c9:bb:11:09:fd:76:5a:07:
b2:6a:74:ec:42:4e:37:05:a5:3f:95:9e:d2:9f:df:04:e8:bf:
61:c5:1e:3c:03:a3:3b:7b:f9:21:76:ee:71:3a:af:1f:37:52:
e7:1e:4a:4a:17:c5:75:a1:58:fd:e1:df:37:c1:2d:8b:26:14:
8e:90:25:5b:3d:91:26:0f:71:5b:53:98:9a:79:24:6d:74:b4:
51:8e:fa:42:5e:19:11:ed:54:0b:e4:df:0d:7d:c5:bd:13:ac:
31:e1:e5:8b:7e:5d:22:8b:e8:eb:9d:95:09:a9:2a:37:31:a8:
8f:6f:3e:81:6f:5b:a5:df:96:b5:90:94:a7:90:8e:28:3f:5f:
00:2b:89:52:be:36:c6:bc:3e:8b:35:6d:97:94:e3:c3:3f:3d:
b5:bd:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:52 2026 by rpki-client