Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: Yx7lVO5H725LfxMD3UoCzR1OQMZ48bKh528vCnIZYmg=
Subject key identifier: 98:2D:36:58:8B:06:0E:BB:E7:AE:80:A6:05:57:79:6D:B6:D8:2F:EE
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 019D9AE33BAE0569624C22127FBD457A504F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:01:16 +0000
Manifest this update: Fri 17 Apr 2026 10:01:16 +0000
Manifest next update: Sat 18 Apr 2026 10:01:16 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: XDpAW66WEnsjeeElmI+zdWDBy6M8WBY07gxrY2P9ZHQ=)
2: PHk_vBlGAMsxS-MnrekIlyqTI-4.roa (hash: DfXZCDYGxK8xf8JFedzWYQFF9T3pi36VwRR9xAmGXEk=)
3: weNArfvB6aIBhliGWgRmku9NM4k.roa (hash: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3b:ae:05:69:62:4c:22:12:7f:bd:45:7a:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Apr 17 10:01:16 2026 GMT
Not After : Apr 18 10:01:16 2026 GMT
Subject: CN=982d36588b060ebbe7ae80a60557796db6d82fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:3f:03:3b:55:2d:45:4f:76:1b:5e:9b:6a:
19:98:d4:1b:5a:48:31:46:d1:08:86:79:54:b1:d2:
eb:38:1d:3c:e4:9a:ff:8a:b6:4f:7c:59:4e:b5:8b:
35:26:85:5b:17:9e:de:27:15:8e:d3:b6:15:23:95:
72:54:09:6c:30:3a:26:fa:4c:d7:ec:73:94:4a:82:
89:f2:66:86:50:14:51:7d:01:39:37:61:c7:8a:3a:
05:5d:34:a6:b3:c2:53:90:c6:6b:94:e9:ac:2e:d6:
c4:c8:8d:da:54:c1:92:80:36:fc:6a:40:03:a2:cc:
b0:9e:77:bb:91:82:28:5b:ef:44:b8:9a:36:47:59:
f3:a1:4c:62:fe:a2:26:76:59:eb:cf:97:a3:f1:7b:
fa:1f:49:58:b7:8e:90:f0:de:6b:50:85:62:ed:97:
3f:da:6d:b7:43:a3:cf:03:32:18:f8:21:c9:8c:3c:
8e:b4:89:1c:44:c7:66:ce:28:1a:cc:57:43:29:79:
40:be:4f:a2:07:95:2b:7a:59:20:20:19:59:6b:b7:
ae:00:1c:f3:79:8d:f9:47:98:14:80:3d:ee:ba:6a:
94:79:52:b1:bc:64:6f:26:e7:66:d9:55:4f:c8:77:
73:26:04:c9:34:94:e3:b6:ff:8b:85:a7:68:2f:78:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:36:58:8B:06:0E:BB:E7:AE:80:A6:05:57:79:6D:B6:D8:2F:EE
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e1:9d:86:10:05:bf:41:15:2b:4f:93:c6:28:10:92:a0:ee:
d2:88:6c:c4:27:10:ae:9c:c9:b4:42:8c:fb:05:26:e0:67:82:
41:0e:1b:d9:3b:70:ec:20:f3:d0:46:cf:6c:f8:2f:3b:eb:39:
9b:ec:0d:56:69:37:b0:6d:88:d1:71:f2:f6:a6:7c:59:ff:aa:
09:32:f0:41:ce:46:b3:30:53:70:73:51:99:35:4a:93:e6:3a:
3b:74:75:5e:ec:9e:26:1d:1d:40:e4:8c:85:d3:56:2c:65:fb:
b9:33:7e:fc:e1:4b:6a:73:a6:23:50:48:0e:f2:c0:b7:81:59:
4f:89:9d:c3:26:e4:93:bb:aa:2e:93:20:59:b6:9b:97:2c:f9:
31:ae:79:06:b5:bf:60:b9:fc:08:c7:d7:7a:bc:86:71:b5:b3:
40:73:e9:55:06:a5:51:88:8b:c3:9c:1e:dd:f5:f8:92:7c:4f:
2e:b7:c3:5a:d2:57:af:ab:5c:a5:a4:cc:1a:e5:81:37:9b:95:
3a:e0:6e:68:fb:41:a5:7a:bf:82:ef:44:7a:13:ce:f4:4f:72:
ab:ed:0f:c7:e9:ae:2b:33:56:ef:53:f7:d3:26:11:7f:43:4d:
08:d3:15:0d:b2:30:48:8c:89:8a:53:ad:6b:f4:3a:7d:43:6c:
c7:9e:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:36 2026 by rpki-client