Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: LEvSGYKpGvmaVQedqy7NTwvihWbQLRZkUyNRaA2Apz0=
Subject key identifier: 4A:56:E5:42:D1:EE:49:B1:5D:34:D7:F4:2F:C7:8C:E3:75:AD:E0:E7
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01A06DCBBB71E56D951B447A188C7F417A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0B0F
Signing time: Fri 04 Sep 2026 19:01:03 +0000
Manifest this update: Fri 04 Sep 2026 19:01:03 +0000
Manifest next update: Sat 05 Sep 2026 19:01:03 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: kyIF4uOaiAu3k+dPQF34QxmbIj+Slc3c3BlYPzmaVfM=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:bb:71:e5:6d:95:1b:44:7a:18:8c:7f:41:7a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Sep 4 19:01:03 2026 GMT
Not After : Sep 5 19:01:03 2026 GMT
Subject: CN=4a56e542d1ee49b15d34d7f42fc78ce375ade0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:6e:62:3c:47:f9:fd:b4:c2:3e:2a:ff:09:
45:77:a1:d9:ca:12:43:6d:20:fa:64:38:8d:ea:33:
16:ce:ab:34:a6:30:7a:7a:ce:46:c6:cc:93:03:9a:
ce:e3:11:41:f8:62:f1:30:7a:ec:48:37:07:67:d7:
eb:e5:6d:3f:f2:69:c7:af:c1:2c:c3:dd:67:a6:46:
bc:46:84:92:8f:fb:81:4e:87:c3:91:20:82:7f:32:
2c:b8:d5:11:f1:c2:b4:f6:3d:99:33:7c:00:9a:dc:
1c:83:29:ed:6f:b6:94:b2:4d:c3:f7:68:e1:7a:fc:
cf:14:21:94:43:11:b3:20:89:b0:22:a1:1a:be:32:
56:11:ee:1b:38:ad:f6:9c:dc:be:f5:2a:bb:e5:49:
c9:21:b6:d9:1d:8e:9d:5d:e9:4f:5d:f4:4a:e2:de:
af:b6:82:fc:0a:55:dd:e6:81:ad:3d:93:b5:9d:20:
8a:64:e9:08:9b:5c:a4:b9:cd:19:af:e3:6b:c3:c6:
bb:37:50:60:e4:41:18:b2:75:b2:68:07:f8:b3:24:
d5:9e:e5:f9:25:10:64:ee:6f:e1:78:f5:02:07:c9:
ef:ce:83:a5:21:73:05:34:fd:de:5a:0a:d0:84:22:
0f:6d:12:5f:fd:d4:7d:3a:04:8b:0d:97:8a:ab:38:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:56:E5:42:D1:EE:49:B1:5D:34:D7:F4:2F:C7:8C:E3:75:AD:E0:E7
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:27:f5:99:38:4a:06:f9:ff:99:4e:83:19:dd:ee:19:d5:5b:
c3:67:6a:ce:f3:12:44:e6:74:43:44:c1:04:90:2e:29:97:b5:
24:f0:08:7c:be:7c:02:92:a9:37:0d:b5:95:b4:b2:8f:e0:81:
be:60:d0:81:98:fd:bf:fb:47:3b:96:b2:38:68:fe:f9:48:e5:
c2:bd:92:25:38:75:de:9c:1b:b4:1e:49:4b:9a:f0:39:fe:ea:
87:92:e5:aa:96:e3:fb:6f:55:ea:30:ae:47:78:9f:a6:24:d4:
d7:7e:71:d6:af:fe:30:5d:06:ca:52:08:18:64:ba:c3:86:8c:
dd:ae:e6:17:c1:53:1d:ad:c8:69:91:05:7f:ba:f8:8f:b5:eb:
84:90:a6:bc:56:75:24:2b:df:8a:78:7c:40:80:db:15:5c:4e:
09:38:41:b2:a1:b9:d4:07:1a:da:2a:6d:03:36:43:a2:f1:3c:
88:33:f2:b1:3c:75:2e:25:e0:0d:4f:46:67:73:b8:1c:21:d0:
d4:27:8b:60:5a:47:28:22:70:4b:58:8f:c2:bc:9a:4b:a2:aa:
88:e7:36:43:8c:5c:b4:63:ff:46:e3:a3:f5:c2:c7:ee:b4:07:
b0:d5:e3:bb:86:1a:88:26:5f:64:7f:03:92:ea:b0:40:ca:7d:
a2:55:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:53 2026 by rpki-client