Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: vnadEc0g3zYiZm3b6j0CwdL42+NN1HZe+9dxK0v6SOk=
Subject key identifier: 28:90:DF:0C:7F:97:61:86:90:9D:82:C3:FF:BE:49:2D:91:F5:1F:DA
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019CAA21368D95D99752B0B54CD23CA32074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 16:00:28 +0000
Manifest this update: Sun 01 Mar 2026 16:00:28 +0000
Manifest next update: Mon 02 Mar 2026 16:00:28 +0000
Files and hashes: 1: 2D2Vo659VCE7_dNsyKDY_ySnp_s.roa (hash: LZcXs72e2WHugD8ordyBZAMfRGav21lT1gfAGNPJNRQ=)
2: K-3AW1zodZQo96foEv6vSPWnznA.roa (hash: 3dK44a2XFe/Ax80oJyqlgMjQENi9InYwps3O9K6x3VI=)
3: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: 48566VyQ3Phe0e5mSBMgzkvf1t3c3vUuqM0o+nRjF1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:36:8d:95:d9:97:52:b0:b5:4c:d2:3c:a3:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Mar 1 16:00:28 2026 GMT
Not After : Mar 2 16:00:28 2026 GMT
Subject: CN=2890df0c7f976186909d82c3ffbe492d91f51fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:96:55:d5:67:ca:11:ee:0d:57:19:e2:77:
21:9f:cb:4d:67:f8:1b:c4:52:8e:c3:8d:35:4f:b8:
2c:1f:9e:aa:62:85:00:c9:f3:0a:47:5f:63:fd:fe:
3b:a6:af:ed:47:5d:d7:15:e2:e5:0d:cb:41:5d:4c:
23:70:db:d0:e1:69:1e:e0:c8:33:54:c7:4a:17:c1:
17:98:19:b5:42:c9:ed:36:62:5b:6d:63:55:1a:7e:
51:95:cc:77:5d:66:15:5c:c5:a8:b5:1c:48:c8:ae:
ff:e1:ae:6a:e3:12:7f:75:17:a8:7c:2b:b2:61:0c:
41:cf:6d:f5:26:4f:30:d8:2f:40:da:01:98:cb:78:
31:4b:ec:ad:ea:31:bc:ad:a6:97:54:21:c1:ce:8b:
48:98:f2:d5:8f:b1:a2:49:d0:85:14:01:bb:d3:c0:
16:4f:1c:b2:c4:10:0c:23:7c:a9:83:88:4a:0e:7a:
47:1d:e8:bb:68:4c:16:67:fd:3f:0a:34:dd:2b:16:
a5:b7:7f:de:6a:81:44:bb:05:12:b6:02:78:c1:2d:
c6:ba:01:1a:57:01:66:5e:d7:be:2b:6a:b0:ea:59:
14:10:94:11:16:f1:92:4a:7d:39:a4:12:09:55:c4:
bd:08:d7:ab:9f:d5:dd:85:00:b0:7b:ad:d9:93:9a:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:90:DF:0C:7F:97:61:86:90:9D:82:C3:FF:BE:49:2D:91:F5:1F:DA
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:29:09:da:88:54:53:02:15:a3:b6:a5:e8:cc:c6:7b:3b:e4:
78:3a:cc:14:ce:1a:f5:9a:f0:65:08:4c:30:39:06:22:f4:f6:
5e:16:b0:1c:9d:0e:2d:18:b0:64:9f:19:7d:c4:ab:a2:9f:e4:
17:9f:e3:1c:73:76:fd:02:0c:37:77:c4:a1:85:86:82:56:fb:
fb:59:39:c6:59:f2:8b:31:d5:2f:6f:b1:3d:e0:75:74:ae:2a:
35:29:b9:34:5e:ba:6d:54:c9:b1:05:8d:71:82:20:e8:0a:f9:
60:72:6c:2f:bc:48:59:46:5c:b6:31:ce:54:93:62:30:d7:6f:
ce:7e:83:cb:e0:ae:49:b3:cf:bd:04:9f:63:db:d0:38:e2:1a:
3e:a3:b5:eb:a4:52:4e:42:69:37:47:4b:a3:ef:99:4b:a3:c1:
56:a9:ce:5f:0f:9f:bf:e5:3e:29:b4:77:3e:f3:82:f3:0b:15:
66:33:07:9a:2e:be:9f:5e:4e:96:03:cf:1b:b7:31:a5:46:4e:
af:1b:a1:ce:7c:c3:de:b0:07:d2:4e:24:ca:42:05:00:3e:d3:
fe:f9:40:10:63:94:89:49:38:4e:ce:84:31:91:a7:95:df:b7:
c9:32:5d:be:e7:11:0a:59:90:79:64:2c:94:4b:2c:b8:dd:ff:
e1:37:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:53 2026 by rpki-client