Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: Xzsg6O1EcK88vF7/uj2Is8W2i71lCBtomCVIZMm0xgg=
Subject key identifier: 93:DF:AB:B4:C6:E4:58:63:9D:B3:24:2F:33:0F:63:00:70:83:C5:16
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 019CABD9A51CE2349F3A551CC664F5BBF7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0F13
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: 5b9__Q8NOyZsGtNfArWmdCajUsQ.roa (hash: JRUc1JqtkkmBfJnMJX95f2kq0cGDruqAawQMnKbLcRM=)
2: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: l7RK2GfMdxHH285DzVAZhy18Gnz++LOnKwkOkg9UZvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a5:1c:e2:34:9f:3a:55:1c:c6:64:f5:bb:f7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=93dfabb4c6e458639db3242f330f63007083c516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:8b:c9:c6:33:d4:1d:cf:38:79:ca:9c:96:
89:ae:eb:28:ba:97:51:d4:85:28:71:03:c8:11:be:
ec:30:b1:8a:a0:f7:ee:e2:ee:f9:45:d1:9e:25:23:
fe:3b:ba:f5:0d:26:53:a8:ba:0f:d7:60:58:a6:d5:
2c:6a:82:f9:73:6c:d0:34:64:1c:68:bb:a9:51:d4:
22:b1:76:3d:ea:ca:ef:23:06:c1:72:27:10:aa:ff:
79:ea:ef:75:4e:1d:a6:3c:a3:29:f1:50:89:1c:f7:
9f:68:b4:63:e9:3a:16:c8:d0:71:df:c4:b1:b3:81:
22:f3:e9:9b:8d:29:d3:a8:13:2c:e1:18:24:1d:5d:
bb:a7:18:9f:3f:0b:69:dc:35:6e:cf:7a:a6:ab:a0:
f5:4b:31:94:9f:2b:14:c4:c3:05:e3:be:46:10:f1:
9c:74:24:78:64:0f:c4:c5:8f:2a:f0:fe:86:a7:21:
e4:91:c2:dd:47:94:7e:4f:d4:11:b6:c2:19:de:49:
62:c4:ca:cf:a4:fd:a0:a7:14:49:3f:a8:37:3b:80:
7e:43:4d:72:90:18:55:67:b7:41:4a:00:cf:16:1c:
3a:22:a9:8c:9e:7a:47:52:9b:89:04:54:04:07:3f:
b9:6d:c8:88:f1:fa:a5:cd:89:b4:9d:12:16:66:2a:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:AB:B4:C6:E4:58:63:9D:B3:24:2F:33:0F:63:00:70:83:C5:16
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:38:e0:6e:26:1e:48:32:49:c5:5d:c8:79:06:0a:02:17:98:
fa:7c:6b:b2:5f:b2:27:59:52:82:3f:be:8f:83:a3:30:e8:ae:
fc:a1:5f:96:de:9d:39:e7:57:5e:24:63:fe:24:5d:d4:3b:1f:
ae:75:27:fa:70:f6:99:ab:79:b9:01:6c:8b:00:7e:6c:be:d2:
50:fc:18:3e:94:da:40:19:bf:fe:db:f3:64:86:48:c6:01:d6:
91:db:c0:0d:32:2a:30:4f:ba:44:f3:eb:d1:6a:50:84:0a:62:
c6:b9:04:b9:e8:76:62:22:c9:d4:2d:a2:9a:71:28:a5:ea:4a:
8f:8b:9e:ce:bf:1e:a2:dc:01:ac:b7:86:b2:9f:a0:90:b4:d7:
34:3b:10:c6:ad:20:74:1b:80:b9:3c:1b:ff:2f:61:38:8a:9e:
23:42:66:df:39:d3:5a:e7:a8:da:37:de:3c:02:f1:cf:0c:27:
81:d6:ff:14:df:44:b1:4b:83:a9:6e:14:ff:ff:b3:f3:9e:ac:
6e:27:46:6a:cf:29:bb:c4:54:f8:b1:81:fd:ac:90:57:fa:f5:
c1:6f:90:5c:4e:28:04:58:ee:cc:40:6c:2f:91:55:57:e4:24:
5e:ae:62:79:9f:71:61:3a:eb:bc:06:5a:b9:f5:b9:b3:01:98:
df:65:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:46 2026 by rpki-client