Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: PSU8EBCnEdnUjoTqx3D3k7sy9G2bhQXJe+FPyLC1i0I=
Subject key identifier: C5:D0:2C:25:8E:A1:C3:F8:2C:2C:E8:3B:46:42:D7:20:25:1D:2A:DA
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 019EC449EF4AB98A656DBD7E6C8D3B327D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 04:00:40 +0000
Manifest this update: Sun 14 Jun 2026 04:00:40 +0000
Manifest next update: Mon 15 Jun 2026 04:00:40 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: ITs5nPNKa//coq22YbJWW8dDL+grF2qw1Ej4oEnHdVg=)
2: PHk_vBlGAMsxS-MnrekIlyqTI-4.roa (hash: DfXZCDYGxK8xf8JFedzWYQFF9T3pi36VwRR9xAmGXEk=)
3: weNArfvB6aIBhliGWgRmku9NM4k.roa (hash: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:49:ef:4a:b9:8a:65:6d:bd:7e:6c:8d:3b:32:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jun 14 04:00:40 2026 GMT
Not After : Jun 15 04:00:40 2026 GMT
Subject: CN=c5d02c258ea1c3f82c2ce83b4642d720251d2ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:71:35:9c:9e:3e:c6:08:66:91:09:64:c5:
52:c8:e6:cf:ef:a8:76:f9:01:41:03:a1:a6:0f:ec:
17:40:84:90:13:71:f8:5d:b5:a8:d3:3c:1a:f0:ed:
07:4a:0e:63:6e:4d:f3:bd:7b:e4:70:42:f0:a9:99:
d7:8e:06:b4:8d:58:12:99:08:e4:31:ed:57:1a:e7:
1d:40:04:86:f5:7c:d9:6f:49:67:75:4e:e6:84:8e:
98:ba:ff:27:9c:73:8e:be:b7:bc:b3:9e:e7:94:66:
37:bb:41:f5:64:85:04:e6:cb:ec:c3:ae:e5:15:fb:
1b:7e:ba:c4:8e:d4:79:8c:a3:4e:cc:d0:a5:07:cb:
cd:84:bc:eb:64:08:51:4d:4d:82:c3:9e:60:0c:7f:
7d:19:aa:da:a9:c0:e6:79:de:79:01:4e:8d:f9:ef:
90:6d:96:76:70:52:b3:ac:38:39:ba:39:bc:7d:d1:
6b:85:de:cf:b0:cc:88:3f:bc:c4:c9:48:af:f4:d8:
d5:bb:0b:7a:68:ce:70:11:b8:96:64:52:41:35:35:
61:c8:64:c9:6d:23:06:29:5d:9d:d9:0d:9f:56:bb:
fc:37:a9:ee:ec:29:a0:6b:52:b9:de:aa:2a:94:22:
0e:38:94:4a:3c:8f:a8:fa:54:72:75:e3:24:05:97:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D0:2C:25:8E:A1:C3:F8:2C:2C:E8:3B:46:42:D7:20:25:1D:2A:DA
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:9f:de:1f:5a:ba:da:b6:cb:52:d3:4b:ed:9e:4c:ac:cd:
e0:bb:20:c4:53:b5:e1:99:08:75:a0:38:df:7d:5c:e6:fa:ae:
8e:f8:5b:2d:5e:a7:13:52:b6:0c:17:45:43:75:62:9a:9f:67:
59:b4:4c:ce:23:44:d3:c6:30:74:47:4c:5e:dc:83:04:d9:dc:
c6:f6:bd:5e:fb:ca:0f:7b:93:f6:c1:ea:12:e3:db:f5:54:06:
4d:b8:4e:3c:7d:95:68:4e:dc:2c:6b:22:37:17:f0:f4:40:60:
e6:07:f0:f3:2c:a7:5c:77:e3:7b:5d:29:bd:36:e5:d8:ad:cc:
c5:8a:14:ed:6c:53:d2:6e:4d:db:54:5a:bb:42:10:39:ad:24:
96:04:7f:ce:66:88:a1:8c:b6:f2:1b:df:bc:8a:49:65:2f:c4:
6c:14:e3:35:34:5a:91:5d:12:ce:32:65:da:ac:7f:4c:8a:f3:
3e:e0:53:3f:95:61:f3:78:f0:3e:29:e2:bd:51:2d:5c:40:12:
1a:27:ca:b4:70:3c:52:54:d2:22:5e:68:97:b4:48:65:8b:02:
28:ac:41:eb:1a:d6:78:e4:a4:df:b1:69:7c:28:94:c3:86:42:
23:04:4e:49:41:18:9e:c0:f4:fa:f1:07:d8:df:66:5f:d0:97:
64:0c:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:18 2026 by rpki-client