Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: 7f6yhtCqMCQZHo6VAiD7oYItUhXJLgtNzM//Sr2ECLQ=
Subject key identifier: 91:A5:64:18:45:D5:42:01:7A:A8:7B:96:E1:20:37:15:0E:0F:22:AE
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019EB98FCB3B7398244EBCA36B8FF5F86F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 111F
Signing time: Fri 12 Jun 2026 02:01:09 +0000
Manifest this update: Fri 12 Jun 2026 02:01:09 +0000
Manifest next update: Sat 13 Jun 2026 02:01:09 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 0m+u8t9omf74GvdjR4Vi9Xf3BJcFOTfuU/IKKrX7klc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:cb:3b:73:98:24:4e:bc:a3:6b:8f:f5:f8:6f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Jun 12 02:01:09 2026 GMT
Not After : Jun 13 02:01:09 2026 GMT
Subject: CN=91a5641845d542017aa87b96e12037150e0f22ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:d0:d1:9d:9e:1f:9a:65:f2:e0:bf:fd:9d:
81:0d:22:a6:b7:01:b3:12:4a:c1:f8:21:75:a6:ec:
3a:d6:ef:71:a7:d4:c7:36:59:3a:89:b2:3e:42:59:
ad:e8:be:7f:78:7a:98:b9:87:69:50:e6:77:d8:7f:
a5:30:eb:43:6a:ae:36:85:a5:15:76:01:c2:0e:73:
90:06:ba:f4:d9:c4:12:98:46:fd:a9:f6:09:a6:de:
a3:d0:31:ed:a9:9c:50:b6:85:9e:e6:de:ff:d0:49:
f2:53:0a:00:32:1e:50:b1:6a:d0:f7:9b:b7:16:a7:
4e:5a:66:05:6f:70:23:23:51:fe:31:4c:72:15:a5:
53:1d:4d:9b:21:2f:71:db:cc:da:f9:47:00:64:84:
7e:a2:49:fa:15:b9:24:f9:e0:63:03:1b:8a:83:e1:
f4:9c:d0:1d:e3:60:fc:02:8f:2a:5c:38:d3:25:54:
e2:6e:d9:df:fc:cf:02:c0:9f:d3:ac:56:95:ec:3f:
34:e3:8e:94:b5:d2:07:d8:4a:cd:a8:90:66:b6:e3:
e3:51:69:fc:2e:3a:1f:44:79:71:ed:ef:45:28:b7:
5f:eb:16:36:e7:53:75:a4:88:83:f2:35:53:0e:1f:
a1:b6:b3:3f:7a:44:3c:02:76:56:66:97:16:00:33:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:64:18:45:D5:42:01:7A:A8:7B:96:E1:20:37:15:0E:0F:22:AE
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ed:a4:83:b1:d0:08:01:04:df:a0:e4:84:b8:ae:b8:1a:29:
52:6c:be:e1:f0:43:31:0f:6c:d4:c5:c3:d4:e1:08:d5:bb:b7:
31:83:f4:70:3a:b3:75:e6:24:59:cd:f3:61:4a:2b:70:72:e9:
81:77:f5:df:ac:b4:df:09:6f:12:01:2d:98:fc:9b:3f:61:83:
ea:d3:a5:ea:20:c3:dc:98:0f:e0:ad:d9:4a:23:7d:e4:5a:89:
d8:15:65:3e:a1:42:01:b9:2f:ef:5c:af:a6:ce:7d:bc:23:24:
c9:ae:90:2c:bf:6d:37:1a:da:b7:10:75:da:af:36:da:ec:b0:
e8:5a:96:b1:2b:c2:a9:93:84:ab:41:39:a5:f8:2a:65:f1:2a:
45:be:76:56:7c:58:ce:d1:da:99:93:01:38:65:8e:8a:71:20:
1d:27:c0:3e:10:a5:df:e9:34:0a:ab:32:41:0d:e2:fa:fd:d8:
d7:84:47:5a:9d:4c:49:3c:d7:81:14:e4:d6:b0:c2:76:52:1e:
ee:db:b4:f5:ba:f8:2d:69:f7:d9:0c:de:e9:32:09:b4:b1:6a:
51:a9:c2:e9:08:23:04:66:ca:78:66:19:52:63:6c:9b:4e:28:
d7:ba:8e:41:2c:5a:70:2d:21:17:ae:6e:2e:1f:2a:96:53:cb:
b6:63:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:38:49 2026 by rpki-client