Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: nDxtLKSRj7Xd3nvVpSUVTzhOi6rdmh/zYI0o6b+urXo=
Subject key identifier: B9:58:21:E3:90:B5:85:9F:F2:28:6E:49:59:63:3A:70:F7:67:7C:BE
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 01A1822BCB0151734E42E68F947C2F4ADFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 1290
Signing time: Wed 28 Oct 2026 11:01:10 +0000
Manifest this update: Wed 28 Oct 2026 11:01:10 +0000
Manifest next update: Thu 29 Oct 2026 11:01:10 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 5+R28ax0xIeCZ+9BlXkXSsLnwkwut7tZgvGDsnc0y3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:cb:01:51:73:4e:42:e6:8f:94:7c:2f:4a:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Oct 28 11:01:10 2026 GMT
Not After : Oct 29 11:01:10 2026 GMT
Subject: CN=b95821e390b5859ff2286e4959633a70f7677cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:03:f4:2d:09:aa:08:4f:77:3d:d9:71:72:
48:e1:31:9b:25:bd:13:af:eb:b8:f8:38:e7:bb:b7:
0e:f6:08:51:13:1d:f7:df:37:fc:bb:e1:cc:a0:02:
a7:88:df:12:af:0f:f9:86:d9:cb:b8:7f:96:8c:95:
85:f1:8a:9a:b0:60:69:3e:cf:4d:5f:b3:dc:44:24:
ae:06:db:06:13:7d:80:f3:ec:2a:a6:e1:fe:3a:40:
71:36:50:45:bf:77:3f:7c:be:c3:9e:41:a1:5e:c3:
5f:35:c2:25:1b:bf:78:17:31:00:a0:43:b1:18:43:
e3:06:be:e8:7d:f6:a8:05:e7:88:d1:78:1a:f3:b6:
96:e6:2d:81:0c:12:50:99:da:48:94:75:e1:29:55:
18:ed:38:54:9e:8f:3d:ad:46:06:d4:b6:31:9b:fa:
ac:1f:71:e3:f1:a0:70:7e:7e:7e:ec:5b:5b:17:6c:
af:17:c6:45:4f:bf:36:36:7d:8f:f3:6b:1a:58:13:
95:f7:50:f9:6d:dd:95:9d:7e:6e:43:84:7b:8b:c8:
f2:9d:68:6b:b5:d0:91:eb:d7:70:65:45:39:35:ed:
38:b3:b7:ba:9a:13:21:a8:fa:e7:2a:67:c4:36:57:
0e:cd:26:6c:15:f0:7e:49:a9:6e:96:cf:66:e3:5b:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:58:21:E3:90:B5:85:9F:F2:28:6E:49:59:63:3A:70:F7:67:7C:BE
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e1:62:04:99:a9:e6:84:59:27:a2:03:14:22:01:05:de:e2:
81:1c:3e:f2:da:fb:0c:b6:3b:b2:7a:19:a9:c3:12:b1:30:92:
7d:44:f6:41:3c:d1:b8:3d:ec:2c:b7:93:5a:29:a1:50:1a:51:
e6:9e:d4:cc:75:20:a2:25:75:56:f9:fc:68:71:43:2b:62:1d:
a9:c5:d3:3c:c3:da:a1:9d:07:de:9f:03:1d:ad:f2:61:92:de:
1b:8c:f4:d4:71:ca:61:bc:e7:1d:22:29:10:99:64:f2:7f:74:
07:43:5a:c8:c3:3d:36:2b:a5:39:e3:e0:c9:60:de:4d:df:b2:
b6:67:cb:e3:01:02:89:34:d0:1d:eb:89:9e:94:f4:ad:2a:9a:
7d:36:6d:2b:ee:d3:2e:90:4f:b5:9b:92:f1:c8:a9:30:ac:51:
7d:c9:b6:06:4f:37:3c:0a:73:ec:4f:55:1c:fe:39:7d:05:bf:
ff:f5:25:96:3a:16:08:6f:32:62:c6:3f:9b:74:ed:37:3b:d9:
e7:86:0e:24:aa:74:29:a8:05:6a:36:0e:31:7d:9e:04:49:71:
69:96:4b:89:8a:bd:89:41:95:1f:df:99:ea:24:a9:77:f9:7a:
da:c9:82:01:96:6f:1b:60:0b:42:40:03:8e:48:25:e0:73:d7:
d5:b8:69:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK8sBUXNOQuaPlHwvSt/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjE0M2Q3ZGIxMTU5NTdjNWRiOWFmODk1ZjRlN2UxNWI3
YjZiMTcwHhcNMjYxMDI4MTEwMTEwWhcNMjYxMDI5MTEwMTEwWjAzMTEwLwYDVQQD
EyhiOTU4MjFlMzkwYjU4NTlmZjIyODZlNDk1OTYzM2E3MGY3Njc3Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAED9C0JqghPdz3ZcXJI4TGbJb0T
r+u4+Djnu7cO9ghREx333zf8u+HMoAKniN8Srw/5htnLuH+WjJWF8YqasGBpPs9N
X7PcRCSuBtsGE32A8+wqpuH+OkBxNlBFv3c/fL7DnkGhXsNfNcIlG794FzEAoEOx
GEPjBr7offaoBeeI0Xga87aW5i2BDBJQmdpIlHXhKVUY7ThUno89rUYG1LYxm/qs
H3Hj8aBwfn5+7FtbF2yvF8ZFT782Nn2P82saWBOV91D5bd2VnX5uQ4R7i8jynWhr
tdCR69dwZUU5Ne04s7e6mhMhqPrnKmfENlcOzSZsFfB+Saluls9m41s7EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlYIeOQtYWf8ihuSVljOnD3Z3y+MB8GA1UdIwQY
MBaAFJKxQ9fbEVlXxdua+JX05+Fbe2sXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTct
NmQzYTg4MTUzNzY3LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTctNmQzYTg4MTUzNzY3
LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauFiBJmp
5oRZJ6IDFCIBBd7igRw+8tr7DLY7snoZqcMSsTCSfUT2QTzRuD3sLLeTWimhUBpR
5p7UzHUgoiV1Vvn8aHFDK2IdqcXTPMPaoZ0H3p8DHa3yYZLeG4z01HHKYbznHSIp
EJlk8n90B0NayMM9NiulOePgyWDeTd+ytmfL4wECiTTQHeuJnpT0rSqafTZtK+7T
LpBPtZuS8cipMKxRfcm2Bk83PApz7E9VHP45fQW///UlljoWCG8yYsY/m3TtNzvZ
54YOJKp0KagFajYOMX2eBElxaZZLiYq9iUGVH9+Z6iSpd/l62smCAZZvG2ALQkAD
jkgl4HPX1bhp+w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:18:09 2026 by rpki-client