Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: lixUGBjkcS3v6NLe3D6I6M2UZMQPICs48dR8aNdJ8Yk=
Subject key identifier: DA:A1:5D:0E:6B:BF:59:59:C8:88:4D:34:06:D5:91:73:D4:CC:E4:EB
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019F860D4FB8A7509EEC8A4C88F11E5C2CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0A97
Signing time: Tue 21 Jul 2026 19:00:46 +0000
Manifest this update: Tue 21 Jul 2026 19:00:46 +0000
Manifest next update: Wed 22 Jul 2026 19:00:46 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: 9N6VYVG6cvDfWKYascpH+mO/lxs/+PKmD/t/e6I38ec=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:4f:b8:a7:50:9e:ec:8a:4c:88:f1:1e:5c:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Jul 21 19:00:46 2026 GMT
Not After : Jul 22 19:00:46 2026 GMT
Subject: CN=daa15d0e6bbf5959c8884d3406d59173d4cce4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:0e:1c:68:49:67:bd:e3:59:e4:70:72:f8:
1d:40:10:a5:80:39:1c:dc:bb:7b:32:82:cb:5e:8c:
37:5d:43:ef:21:bd:37:6c:5f:0a:fa:75:a4:74:04:
e4:0d:a0:df:71:f5:dd:f1:8c:ed:d8:65:0f:ba:6c:
ab:de:89:42:75:fc:21:3e:44:db:c2:ae:58:8a:f4:
b8:ed:4f:5b:ef:45:28:41:db:01:f2:24:19:0a:42:
75:41:9b:1f:71:36:40:8f:eb:8b:71:c6:48:45:c6:
19:ea:c7:9c:8c:8c:9d:11:73:3f:97:83:3d:ed:e8:
91:d4:64:c0:5a:b3:48:a1:e2:bc:98:4e:e0:09:4c:
41:71:d0:13:c7:b0:bc:bb:21:6c:20:41:c8:5a:6c:
51:6d:7e:51:54:16:72:b1:79:9e:6f:39:fd:36:db:
19:99:bf:d5:2b:9d:40:2d:10:dc:b3:ad:96:09:81:
fa:42:8d:c3:8a:f4:9b:c7:3f:10:61:f4:ea:f9:05:
81:f8:61:09:be:21:70:ad:f7:0a:74:53:55:ec:87:
1d:0a:75:23:7d:76:be:6e:29:ba:e0:bf:cc:5c:47:
23:f0:91:7f:61:bd:c9:8d:bc:90:d1:5c:c8:cf:12:
47:c5:4e:c5:19:f9:dd:f5:92:77:c8:e2:31:c6:d1:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A1:5D:0E:6B:BF:59:59:C8:88:4D:34:06:D5:91:73:D4:CC:E4:EB
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:59:bc:b7:08:49:c7:54:d2:1d:cb:52:eb:2a:8b:43:95:
5b:2c:cd:2a:c7:6d:71:c1:38:51:8e:76:18:5e:f0:5c:ea:49:
76:e8:ac:1b:18:91:28:8c:3a:c6:b3:14:1f:fd:f1:06:65:c6:
22:e7:ef:66:6a:72:e2:57:9d:e7:6f:e4:ab:46:8e:d0:12:4a:
57:38:22:35:0f:c0:47:98:b0:c5:3f:d8:57:48:3c:cc:b9:a9:
8d:ad:59:e9:a6:e5:cb:6a:b1:4e:6b:92:f1:92:5a:cb:8f:2c:
85:16:97:15:ba:45:f6:20:1c:0f:78:56:7f:05:1c:34:7d:72:
89:23:49:00:5e:20:8c:c6:fb:0a:66:da:3d:b9:f7:65:d2:43:
98:cb:5a:da:0d:da:18:0b:2f:02:54:05:93:eb:20:3a:66:3e:
fc:3c:7f:fb:94:2d:52:3a:9b:16:83:08:7f:31:ef:e9:2e:0c:
48:75:2d:45:ae:bc:15:4c:0d:a7:71:11:a4:df:7a:d3:c3:14:
dd:65:36:94:4c:e3:18:91:21:6f:2e:a6:ec:a3:58:60:a7:39:
4d:8b:48:e6:cf:f4:1b:d5:30:d5:a6:d4:9d:aa:71:e0:c3:f0:
59:c5:da:d4:29:83:c8:04:38:a2:df:9a:29:8e:c0:4d:9e:24:
b3:f0:28:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDU+4p1Ce7IpMiPEeXCzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjYwNzIxMTkwMDQ2WhcNMjYwNzIyMTkwMDQ2WjAzMTEwLwYDVQQD
EyhkYWExNWQwZTZiYmY1OTU5Yzg4ODRkMzQwNmQ1OTE3M2Q0Y2NlNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIoOHGhJZ73jWeRwcvgdQBClgDkc
3Lt7MoLLXow3XUPvIb03bF8K+nWkdATkDaDfcfXd8Yzt2GUPumyr3olCdfwhPkTb
wq5YivS47U9b70UoQdsB8iQZCkJ1QZsfcTZAj+uLccZIRcYZ6secjIydEXM/l4M9
7eiR1GTAWrNIoeK8mE7gCUxBcdATx7C8uyFsIEHIWmxRbX5RVBZysXmebzn9NtsZ
mb/VK51ALRDcs62WCYH6Qo3DivSbxz8QYfTq+QWB+GEJviFwrfcKdFNV7IcdCnUj
fXa+bim64L/MXEcj8JF/Yb3JjbyQ0VzIzxJHxU7FGfnd9ZJ3yOIxxtFORwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqhXQ5rv1lZyIhNNAbVkXPUzOTrMB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJZZvLcI
ScdU0h3LUusqi0OVWyzNKsdtccE4UY52GF7wXOpJduisGxiRKIw6xrMUH/3xBmXG
IufvZmpy4led52/kq0aO0BJKVzgiNQ/AR5iwxT/YV0g8zLmpja1Z6ably2qxTmuS
8ZJay48shRaXFbpF9iAcD3hWfwUcNH1yiSNJAF4gjMb7CmbaPbn3ZdJDmMta2g3a
GAsvAlQFk+sgOmY+/Dx/+5QtUjqbFoMIfzHv6S4MSHUtRa68FUwNp3ERpN9608MU
3WU2lEzjGJEhby6m7KNYYKc5TYtI5s/0G9Uw1abUnapx4MPwWcXa1CmDyAQ4ot+a
KY7ATZ4ks/AoOA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:43:09 2026 by rpki-client