Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: v1cy5QFg99Q+Q42SwRrR5GrI/U+GcxTd9V7ZY1gc2pI=
Subject key identifier: 5B:BC:A9:CC:17:BC:8F:BC:E0:45:1D:D3:B4:15:04:74:90:7A:0F:70
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 019CAD226BBCAC8C96380D846D3121A14786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:40 +0000
Manifest this update: Mon 02 Mar 2026 06:00:40 +0000
Manifest next update: Tue 03 Mar 2026 06:00:40 +0000
Files and hashes: 1: AJpV8hpcC9NXykoo9-dL6aH0A9g.roa (hash: k7moU7Gr/UvmzLxveWCv2AfmeEfD1dJ7zogQAYvX1ZU=)
2: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: U5ivcsJKomy/IlVxMe6tFjcukgxWwbFHCwa6Pa/ZJRc=)
3: weNArfvB6aIBhliGWgRmku9NM4k.roa (hash: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:6b:bc:ac:8c:96:38:0d:84:6d:31:21:a1:47:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Mar 2 06:00:40 2026 GMT
Not After : Mar 3 06:00:40 2026 GMT
Subject: CN=5bbca9cc17bc8fbce0451dd3b4150474907a0f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:de:05:49:a5:90:f0:37:86:6e:8b:b4:21:
ff:15:ac:f5:95:6e:48:1d:0f:3a:82:a1:7f:1d:ae:
e6:fa:9e:ed:24:8c:36:12:43:04:f8:5d:49:94:53:
c0:48:c9:e0:86:b7:3a:fb:90:8e:5f:3f:2b:fe:cc:
cd:32:63:36:6d:81:7f:f0:28:8a:01:9a:b1:37:70:
e5:3d:34:9a:a7:92:fc:cb:52:48:6d:6e:c4:26:e2:
95:27:cf:ee:98:25:3c:91:fd:1f:af:4f:1f:3b:b1:
a0:3d:3b:7b:f8:c1:5a:9a:ac:29:52:1c:1e:ad:5a:
8c:55:59:d5:57:64:6e:28:8a:cc:3e:50:75:24:1a:
41:27:02:cc:45:74:fb:3c:1c:07:c6:6f:4a:3d:6e:
50:97:b7:81:0f:f3:ec:a8:99:3b:4b:7e:0e:35:6e:
ff:4d:12:c5:34:9d:f7:af:5e:ba:84:31:fa:ba:44:
cf:41:d6:3d:1f:12:cc:96:7c:9f:c3:c1:a7:a9:12:
78:eb:4f:bd:e4:9a:e5:5d:f6:f0:cd:c0:78:70:93:
48:d1:d9:00:b9:dc:7f:dd:7a:69:1d:4f:ea:7c:b8:
79:93:9b:13:7e:bd:b3:d8:28:a2:f9:3d:14:ef:9e:
88:f8:65:f9:06:b0:e6:b1:df:f9:c0:ef:a8:bb:b9:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:A9:CC:17:BC:8F:BC:E0:45:1D:D3:B4:15:04:74:90:7A:0F:70
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:55:c5:29:38:4c:6d:e1:e4:06:47:3d:e0:e3:0e:3f:e4:dd:
81:e0:0a:6f:ff:f4:8b:8c:e0:e7:12:99:d0:b9:a3:cd:1d:af:
9c:f1:76:d1:37:75:49:38:7e:de:27:64:c7:7e:4a:56:ac:f8:
04:47:a9:0c:f5:ce:49:04:b2:04:af:ae:38:bf:3a:59:4c:6e:
ec:54:9f:d7:04:3a:6b:54:b2:93:54:39:1a:93:48:60:31:ea:
7f:a5:5e:8f:e1:dd:04:31:0f:7f:0c:38:24:e4:c0:7e:d7:50:
13:76:58:43:b3:5b:9a:b3:8f:90:0f:1d:5b:f4:52:11:a8:98:
bb:1b:6a:a9:1c:3d:cc:64:f2:d3:53:ec:41:8c:d0:20:05:b2:
20:d9:96:e7:82:34:ee:39:d4:1c:88:48:f7:1c:f0:4c:b7:9c:
58:fe:2e:8f:65:04:9b:fa:4a:51:29:33:b0:21:d0:e1:cf:e4:
b4:ab:ea:a6:06:42:a1:74:7b:df:8a:6a:13:c7:9f:22:9c:8c:
1e:f1:78:73:b8:e4:2d:17:f4:21:10:78:9e:d8:9d:e1:d2:40:
a1:03:b1:25:ee:fe:c0:b9:9c:c2:28:14:ea:19:40:4d:6e:e2:
29:9d:3b:d0:56:fc:3d:03:58:6f:40:d9:c4:0c:81:e5:bb:28:
a8:96:7e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytImu8rIyWOA2EbTEhoUeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1
ZWMwOWEwHhcNMjYwMzAyMDYwMDQwWhcNMjYwMzAzMDYwMDQwWjAzMTEwLwYDVQQD
Eyg1YmJjYTljYzE3YmM4ZmJjZTA0NTFkZDNiNDE1MDQ3NDkwN2EwZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pLeBUmlkPA3hm6LtCH/Faz1lW5I
HQ86gqF/Ha7m+p7tJIw2EkME+F1JlFPASMnghrc6+5COXz8r/szNMmM2bYF/8CiK
AZqxN3DlPTSap5L8y1JIbW7EJuKVJ8/umCU8kf0fr08fO7GgPTt7+MFamqwpUhwe
rVqMVVnVV2RuKIrMPlB1JBpBJwLMRXT7PBwHxm9KPW5Ql7eBD/PsqJk7S34ONW7/
TRLFNJ33r166hDH6ukTPQdY9HxLMlnyfw8GnqRJ460+95JrlXfbwzcB4cJNI0dkA
udx/3XppHU/qfLh5k5sTfr2z2Cii+T0U756I+GX5BrDmsd/5wO+ou7ns7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu8qcwXvI+84EUd07QVBHSQeg9wMB8GA1UdIwQY
MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt
MDA4NmQwMjM4NWQ2LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2
LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFXFKThM
beHkBkc94OMOP+TdgeAKb//0i4zg5xKZ0LmjzR2vnPF20Td1STh+3idkx35KVqz4
BEepDPXOSQSyBK+uOL86WUxu7FSf1wQ6a1Syk1Q5GpNIYDHqf6Vej+HdBDEPfww4
JOTAftdQE3ZYQ7NbmrOPkA8dW/RSEaiYuxtqqRw9zGTy01PsQYzQIAWyINmW54I0
7jnUHIhI9xzwTLecWP4uj2UEm/pKUSkzsCHQ4c/ktKvqpgZCoXR734pqE8efIpyM
HvF4c7jkLRf0IRB4ntid4dJAoQOxJe7+wLmcwigU6hlATW7iKZ070Fb8PQNYb0DZ
xAyB5bsoqJZ+3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:32 2026 by rpki-client