Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: BinXoOF0tKjx17gy3AqYNo8Fq2zvBWfZ5F0GT7yTPOA=
Subject key identifier: A3:55:CB:D1:92:96:82:F6:BB:A2:02:E6:C1:FF:7E:A8:E5:CD:3C:65
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019D9B87ADEED20068E945AF00D835E9CB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 13:00:53 +0000
Manifest this update: Fri 17 Apr 2026 13:00:53 +0000
Manifest next update: Sat 18 Apr 2026 13:00:53 +0000
Files and hashes: 1: 2D2Vo659VCE7_dNsyKDY_ySnp_s.roa (hash: LZcXs72e2WHugD8ordyBZAMfRGav21lT1gfAGNPJNRQ=)
2: K-3AW1zodZQo96foEv6vSPWnznA.roa (hash: 3dK44a2XFe/Ax80oJyqlgMjQENi9InYwps3O9K6x3VI=)
3: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: NqVHR7zPH4XtHKzW5okisy615/jRxqG9+KEhL6KCQ5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ad:ee:d2:00:68:e9:45:af:00:d8:35:e9:cb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Apr 17 13:00:53 2026 GMT
Not After : Apr 18 13:00:53 2026 GMT
Subject: CN=a355cbd1929682f6bba202e6c1ff7ea8e5cd3c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:f3:db:05:49:6a:f3:c2:80:b1:86:51:39:
db:f1:09:65:36:1f:bd:ee:26:6b:d4:fe:b8:cf:8d:
d9:70:48:7e:81:7b:75:0d:f8:a4:27:69:32:e1:db:
19:ac:06:d4:82:fb:a0:ba:43:b9:fa:ee:25:c5:63:
c5:88:d8:8c:6d:22:b5:5f:bb:c7:9e:07:7f:52:f9:
68:ad:94:34:07:c3:23:ce:32:9d:48:b4:2d:4c:8e:
c1:23:98:19:c3:6b:3d:c0:81:7a:76:9c:89:1f:fc:
4a:df:6a:a7:5f:6e:54:d9:32:0a:b0:e5:91:c1:e1:
41:f8:9d:98:c0:d6:22:2c:5c:cb:30:e0:a3:97:6c:
69:36:f9:ed:de:d0:71:c4:bc:56:4d:06:c2:de:89:
8e:96:92:ea:70:94:17:ec:13:98:67:1f:1f:11:f1:
61:c2:e6:5b:71:81:a8:11:54:d5:c8:38:be:75:b0:
d1:5b:c9:c4:22:ff:81:a5:af:d8:7b:db:ae:1e:46:
52:72:36:9d:02:7e:b3:96:c7:17:57:4d:83:f5:6c:
4e:7f:bd:56:04:8c:7b:67:68:90:fc:10:2c:fd:85:
8d:92:59:67:ee:9c:82:15:bf:2e:60:f1:5f:4a:e7:
82:5c:24:ad:94:f8:1f:43:5c:7d:02:54:0e:a6:1d:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:CB:D1:92:96:82:F6:BB:A2:02:E6:C1:FF:7E:A8:E5:CD:3C:65
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0c:64:1e:2c:f1:86:ab:72:94:ac:40:51:b1:bb:e4:24:cd:
1d:59:6b:80:b8:df:7b:3a:e6:be:39:2b:c5:92:45:20:45:45:
c2:23:bc:c5:2c:3d:de:0a:b7:60:db:b6:0b:b6:c6:a6:4e:3f:
a2:69:f5:6f:56:ab:6a:3b:18:fa:9d:2a:46:f0:ed:4a:08:15:
8f:ec:3b:5b:c8:12:ae:dc:8c:dd:8c:2e:44:59:e1:e6:fd:44:
44:92:a6:b9:be:e8:6a:bb:c5:eb:30:f9:99:5e:f8:2d:01:a2:
47:83:46:f0:61:e7:65:f2:10:3c:ff:c7:52:43:29:65:2b:5e:
89:77:79:f3:de:b7:2c:e0:e2:f1:77:d2:c7:f1:0c:63:21:38:
1e:c0:e8:0e:f5:a4:da:bc:4a:20:89:5f:be:c1:64:df:d7:53:
f8:8d:4c:71:98:0f:1b:ed:46:ec:ec:59:15:f0:c0:d2:46:c0:
3b:46:bd:c4:e0:93:7c:4e:cd:c6:ad:08:4c:a3:d7:55:c7:5c:
48:f7:57:eb:c7:38:76:47:e6:9f:d1:73:a4:93:d9:2b:99:8d:
8c:32:68:37:19:f6:ff:6b:ba:c4:ee:2e:ed:69:57:89:cc:ee:
2f:db:91:46:ed:e9:fc:4f:6d:14:bd:4b:fd:e8:c9:d2:66:2b:
86:5a:7a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh63u0gBo6UWvANg16cuZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1
ZWI5YWEwHhcNMjYwNDE3MTMwMDUzWhcNMjYwNDE4MTMwMDUzWjAzMTEwLwYDVQQD
EyhhMzU1Y2JkMTkyOTY4MmY2YmJhMjAyZTZjMWZmN2VhOGU1Y2QzYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/z2wVJavPCgLGGUTnb8QllNh+9
7iZr1P64z43ZcEh+gXt1DfikJ2ky4dsZrAbUgvugukO5+u4lxWPFiNiMbSK1X7vH
ngd/UvlorZQ0B8MjzjKdSLQtTI7BI5gZw2s9wIF6dpyJH/xK32qnX25U2TIKsOWR
weFB+J2YwNYiLFzLMOCjl2xpNvnt3tBxxLxWTQbC3omOlpLqcJQX7BOYZx8fEfFh
wuZbcYGoEVTVyDi+dbDRW8nEIv+Bpa/Ye9uuHkZScjadAn6zlscXV02D9WxOf71W
BIx7Z2iQ/BAs/YWNklln7pyCFb8uYPFfSueCXCStlPgfQ1x9AlQOph1wwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNVy9GSloL2u6IC5sH/fqjlzTxlMB8GA1UdIwQY
MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt
NDU0NGM2MTA5NzI5LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5
LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwxkHizx
hqtylKxAUbG75CTNHVlrgLjfezrmvjkrxZJFIEVFwiO8xSw93gq3YNu2C7bGpk4/
omn1b1arajsY+p0qRvDtSggVj+w7W8gSrtyM3YwuRFnh5v1ERJKmub7oarvF6zD5
mV74LQGiR4NG8GHnZfIQPP/HUkMpZSteiXd58963LODi8XfSx/EMYyE4HsDoDvWk
2rxKIIlfvsFk39dT+I1McZgPG+1G7OxZFfDA0kbAO0a9xOCTfE7Nxq0ITKPXVcdc
SPdX68c4dkfmn9FzpJPZK5mNjDJoNxn2/2u6xO4u7WlXiczuL9uRRu3p/E9tFL1L
/ejJ0mYrhlp61g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:46 2026 by rpki-client