Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: wBO9DbJgyVH1CdM3b3ZSt04g5vTO66b9H5IcWGnPD2o=
Subject key identifier: AB:32:11:A8:F2:A0:71:8B:37:FD:85:82:65:AC:C3:8A:E7:56:0A:42
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 019EC25C81CE74F1ADC00C361445F293B038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 19:01:42 +0000
Manifest this update: Sat 13 Jun 2026 19:01:42 +0000
Manifest next update: Sun 14 Jun 2026 19:01:42 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: wXFXKrQxMy4SE/eHGsFsKDTHqIThse/7KSU+o+Uupiw=)
2: PHk_vBlGAMsxS-MnrekIlyqTI-4.roa (hash: DfXZCDYGxK8xf8JFedzWYQFF9T3pi36VwRR9xAmGXEk=)
3: weNArfvB6aIBhliGWgRmku9NM4k.roa (hash: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:81:ce:74:f1:ad:c0:0c:36:14:45:f2:93:b0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jun 13 19:01:42 2026 GMT
Not After : Jun 14 19:01:42 2026 GMT
Subject: CN=ab3211a8f2a0718b37fd858265acc38ae7560a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:2c:38:ce:e4:c9:86:98:9a:1b:04:12:ca:
ee:e5:67:11:6a:cb:35:a0:bc:28:07:c9:8c:73:d8:
87:81:48:99:28:a2:94:5e:57:8c:cd:b9:f4:a2:51:
18:76:62:58:a4:a0:fb:10:2c:26:3d:cd:f2:b4:8b:
0f:4a:be:39:2a:87:68:b1:19:b3:e5:92:ac:33:33:
c0:99:59:9e:c3:2c:24:f1:6f:a6:69:8c:28:96:d9:
9f:f2:34:6f:63:5d:09:55:ef:df:a0:d4:6c:7e:99:
8e:0f:dc:7f:80:17:52:b8:9a:1e:f0:6e:d3:25:ce:
fa:38:11:62:eb:7d:39:62:49:1f:f3:ed:69:e1:1e:
35:00:27:c8:e3:0f:45:d9:28:62:3f:02:a5:c6:97:
58:0c:69:90:a4:2c:f3:5c:a6:a8:ce:62:db:51:ff:
03:fb:fe:98:df:a2:46:9a:f6:8b:dd:6b:4a:eb:6a:
7d:56:94:9a:67:6f:27:fb:49:eb:77:9d:55:52:ce:
a4:65:19:55:4c:88:cd:32:24:e7:4d:72:73:83:d2:
0e:6f:ca:47:d8:78:a0:8b:3d:04:c4:c2:22:3e:6b:
d5:b3:39:e1:52:86:e9:eb:15:84:f1:2a:bc:30:29:
0d:f4:3d:ff:96:00:f8:b4:3a:d9:f0:77:1b:d4:0f:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:11:A8:F2:A0:71:8B:37:FD:85:82:65:AC:C3:8A:E7:56:0A:42
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ac:e0:6c:ef:6b:18:45:b4:69:2a:de:80:b0:ca:c8:63:0d:
71:61:89:f0:f3:d9:ae:ff:2c:4e:08:8d:6a:39:9e:16:da:d0:
c2:2a:08:f2:66:7c:1b:16:95:fb:5e:49:c9:32:4e:e3:d9:88:
4e:91:c3:69:1a:7c:e5:40:40:42:6e:e1:48:07:61:10:36:f9:
26:94:2c:b5:fc:f5:27:ab:3d:cf:35:70:c7:7f:22:cc:8d:8b:
47:02:47:a0:4a:9a:91:a5:4a:c6:81:8b:be:8e:d3:90:bb:9d:
60:79:6d:eb:50:2e:c1:43:6e:bb:8d:f8:bf:3f:44:dc:04:3d:
87:f5:e7:15:2d:23:67:dc:28:20:c2:57:05:32:2c:38:f1:16:
d5:f2:7f:b8:53:0d:14:c4:37:af:31:4e:fd:10:98:3e:0b:80:
70:1f:72:47:f0:0b:0b:77:69:4f:34:b2:a7:01:7a:35:b8:6d:
ff:32:de:3c:96:70:6f:16:67:21:66:99:fc:ae:75:3f:e8:5d:
d5:06:50:56:f3:e6:e1:e1:77:02:ae:71:c6:71:86:83:73:2c:
7a:27:fe:1f:bf:59:7c:d1:df:80:39:ee:cd:a1:58:75:3a:a3:
1a:74:67:59:96:a4:73:78:e1:81:5c:e4:9f:f0:8c:ac:1f:74:
38:d9:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:31 2026 by rpki-client