Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: MdKy3tWlHSTkVWelrsR1RkhuTZZeI5kR6nV6roD1iaU=
Subject key identifier: C4:53:CC:2B:FA:C4:80:9D:2D:B4:96:4A:3B:97:D8:7B:57:FB:92:DF
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019FA33C2A42F03DEA5056FAF5B5EB0D1813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 1198
Signing time: Mon 27 Jul 2026 11:00:56 +0000
Manifest this update: Mon 27 Jul 2026 11:00:56 +0000
Manifest next update: Tue 28 Jul 2026 11:00:56 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: QA37QxKNRgCwDqwwCRNkTctL9fpyMZR77piTVpOx2Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:2a:42:f0:3d:ea:50:56:fa:f5:b5:eb:0d:18:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Jul 27 11:00:56 2026 GMT
Not After : Jul 28 11:00:56 2026 GMT
Subject: CN=c453cc2bfac4809d2db4964a3b97d87b57fb92df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:b9:5c:2f:fa:71:10:75:a6:71:d6:d5:13:
8d:3f:b1:00:9a:05:05:c1:bc:5c:d8:35:e2:08:89:
25:d0:37:fc:5f:17:12:b1:01:6a:50:e4:24:6b:41:
67:c5:15:ca:21:c3:24:91:14:02:1e:af:6c:d9:b2:
a4:4d:c5:98:43:06:4d:ba:c2:42:48:32:df:12:33:
a4:6d:d7:43:29:c1:a8:f2:f6:cf:65:3e:21:f2:e4:
b4:31:55:a3:ab:52:fc:33:1a:1c:14:16:02:33:9c:
87:4d:b6:58:15:29:d5:c4:81:4d:1c:5b:4c:86:84:
47:98:45:58:2f:0c:6f:61:e4:14:15:7a:83:45:6f:
49:cc:44:36:ff:de:cd:8b:0b:f6:63:2d:93:1b:3b:
5c:b5:02:4f:85:86:56:85:89:79:06:86:0c:60:dc:
e4:cd:91:d0:49:13:44:55:cb:b6:ed:5b:15:69:21:
68:a1:57:23:42:40:3e:7f:f1:5a:37:19:4f:26:93:
29:30:74:0e:ca:72:1a:af:ba:bb:8e:24:6a:bc:e2:
9b:0a:07:f1:2f:44:d0:df:5a:59:9b:cd:66:03:75:
d5:02:59:2d:31:4e:7b:70:bc:29:67:fc:44:3d:3a:
c7:fc:82:59:1e:5e:0e:21:ad:2c:77:a1:dc:3c:e0:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:53:CC:2B:FA:C4:80:9D:2D:B4:96:4A:3B:97:D8:7B:57:FB:92:DF
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:92:c5:f4:4f:f7:4d:8b:25:bc:f0:64:a8:cc:ec:a6:11:
67:cf:ad:82:47:9f:f4:cc:d1:ae:06:03:28:55:0f:6f:ed:dc:
38:e4:04:88:11:ca:98:87:36:9b:c4:cb:60:ae:f9:0d:93:f8:
e1:4b:80:d7:0f:af:ae:4e:49:c5:5e:a1:dc:ca:3b:f6:a6:cd:
6f:df:c9:29:6f:a1:67:1d:9a:63:8f:75:a8:d0:03:55:d7:d6:
bc:91:c4:21:49:99:3b:19:3b:ef:b3:99:db:81:8f:a6:21:73:
0d:c4:8b:68:48:5d:9b:de:b6:f4:86:7c:78:fb:c1:1e:ae:f5:
6f:f8:1a:01:3e:cd:85:ff:97:d7:6a:33:f6:54:ce:5b:1c:fa:
c9:8d:79:9f:da:18:99:dc:45:d6:c8:86:5a:eb:64:06:30:30:
cc:75:6b:32:2e:05:cb:f6:00:6e:17:fe:24:65:71:fe:43:49:
6b:f9:b3:ce:d7:a7:a4:f2:24:11:dc:02:a4:ac:b5:18:70:bd:
0c:83:da:68:b1:e7:82:91:5f:b7:2a:1d:29:4f:33:7e:a1:63:
4c:1b:81:4d:ce:e6:eb:1f:d7:02:23:de:7a:35:5a:bf:aa:3b:
57:b4:ae:55:df:c9:be:d1:35:0b:9b:cc:6d:de:7d:bb:b2:13:
75:98:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:24 2026 by rpki-client