Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: hxIqRJQbyuJAv5MyoB3qVuM1H5LEsTlXTwE1wKz0pq4=
Subject key identifier: 5F:A1:49:81:ED:46:4E:19:4E:06:44:CD:2B:48:4A:68:F1:41:E5:25
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019D39411847866C3B3569658DE4DFA9FFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 1058
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: heuJu26/c2FOoAyuWxLegNaaWHJBbJOyzqm9+KYjjR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:18:47:86:6c:3b:35:69:65:8d:e4:df:a9:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=5fa14981ed464e194e0644cd2b484a68f141e525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:1d:e3:57:5b:03:12:88:28:e8:c4:24:ef:
f8:4a:b5:6a:61:07:c0:9e:3f:54:41:cd:46:12:c3:
e9:f9:bb:86:26:d2:0d:cc:d4:ac:3e:ca:50:ac:f9:
bb:21:dd:96:fe:16:c1:2a:dc:dc:4f:43:54:3e:a7:
df:41:03:3e:6c:1f:c5:ff:ca:e9:a3:2c:39:81:02:
2f:4c:41:56:39:1f:6e:6e:9c:1a:af:ee:14:6e:d2:
9c:4a:cc:39:1a:68:b6:09:9f:e5:12:f2:f5:be:41:
f5:84:09:0d:68:42:96:ff:75:d0:a0:67:3c:9b:a7:
de:6b:66:97:f4:a9:9e:17:6f:3a:1a:13:a1:6c:f8:
18:ed:5c:6c:4d:46:e6:0e:a1:0e:38:de:fc:24:da:
d5:dc:cb:62:b5:f5:54:0f:1c:95:6a:01:dc:66:08:
0a:fb:b0:03:f3:c5:01:95:21:3b:ae:84:f9:e4:29:
3e:a1:90:2a:f5:8b:74:dc:88:99:25:3c:ae:c0:4f:
5e:b2:7f:a1:25:43:a7:8d:e4:78:fa:9f:2f:d9:95:
0e:54:b0:0f:ab:fe:40:2d:59:7f:24:65:d4:54:75:
dc:b0:c2:80:e3:3e:d3:9a:2f:6e:53:c7:1e:42:a9:
27:27:3b:1a:e8:4d:dc:6f:c7:21:56:3b:c5:26:7f:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:49:81:ED:46:4E:19:4E:06:44:CD:2B:48:4A:68:F1:41:E5:25
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2b:e9:8e:2c:d4:44:de:80:36:76:16:1a:fc:13:50:3f:56:
36:df:c9:27:ea:7d:d6:48:8d:b6:06:2a:a8:f1:5d:f0:92:6c:
13:45:e7:e2:f4:88:8b:be:f9:88:03:5f:bf:fb:d4:e5:97:d8:
d1:fe:5c:52:73:c8:b3:c4:c5:da:a5:7f:4d:da:7b:08:76:2f:
28:06:24:24:29:5d:41:32:c0:42:64:1b:05:2d:60:9a:3d:35:
17:0e:57:ee:fa:67:f2:6c:b5:ac:0d:98:93:b2:5d:08:84:60:
ed:78:61:33:f7:96:06:55:f0:48:68:f8:5a:7d:36:f3:0b:c0:
54:c5:2f:51:db:36:b5:b7:48:0f:47:f2:35:bf:de:16:12:f3:
ff:c0:eb:51:b8:21:57:2e:ba:25:b9:9b:9c:6d:fe:7e:90:f0:
a6:80:a3:a7:26:d0:48:92:d9:73:30:16:ff:e7:ec:b7:bd:27:
51:b9:f5:b1:0d:1f:c3:37:e0:e1:d2:b1:4f:7b:fe:20:ea:d1:
b1:06:9b:0d:df:d6:6f:84:60:82:dd:85:42:c4:60:5e:29:5f:
62:7d:53:37:37:03:86:5b:91:90:59:0f:2c:38:37:f6:70:32:
bf:23:03:be:bf:51:38:b9:65:4c:ad:56:7c:f1:6b:7a:a4:b0:
3c:7d:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:36 2026 by rpki-client