Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: 5mD/O0khvKeMhFu4T1xbwGN6T5a8MJNbT1ywxMY/Y7c=
Subject key identifier: 3C:DB:44:CD:97:3F:9B:D0:09:32:B7:22:A2:2E:1C:A9:52:09:B3:83
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 01A17D3CFE74293034A66A6C95CB69CAA4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 1551
Signing time: Tue 27 Oct 2026 12:01:51 +0000
Manifest this update: Tue 27 Oct 2026 12:01:51 +0000
Manifest next update: Wed 28 Oct 2026 12:01:51 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: ldb0f+O+mORPTSvz6YLPK0AJzbMWM3gandye/SPgkgI=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:fe:74:29:30:34:a6:6a:6c:95:cb:69:ca:a4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Oct 27 12:01:51 2026 GMT
Not After : Oct 28 12:01:51 2026 GMT
Subject: CN=3cdb44cd973f9bd00932b722a22e1ca95209b383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:7c:b3:ac:da:c0:bb:12:68:7e:39:25:b1:
5f:36:18:bc:ac:68:db:08:c6:13:2a:1e:29:33:4b:
b4:f5:34:10:ef:88:11:4f:f7:53:e7:2e:b5:3e:5c:
a6:6c:a5:e3:13:ad:fa:3f:fa:9b:90:44:ed:51:2f:
44:69:ac:44:32:3f:be:e8:a5:0e:55:90:be:90:de:
39:db:cd:90:cf:4b:5d:e1:6e:6e:1f:c3:8f:6e:1b:
9b:b7:63:d9:3e:44:20:6d:ae:b1:38:f1:fd:e7:b9:
cb:36:0c:5d:50:9a:6c:11:cc:e8:48:fc:6d:ac:9e:
ee:0e:9a:4b:41:d8:3b:9f:75:32:57:42:6d:26:fc:
de:1a:86:5d:fb:59:7e:6e:79:e6:69:5a:d3:a3:59:
be:c5:a5:32:26:b2:b7:02:b5:6c:12:37:15:f0:ce:
22:64:f2:86:26:be:67:9d:34:8f:40:5e:b1:51:08:
55:2a:26:f1:fd:f9:dd:2b:e8:e5:6b:9d:41:38:d7:
c8:b4:1a:07:50:ca:34:35:d4:d5:42:b9:12:51:5f:
80:19:b8:ad:81:21:37:29:46:f3:6e:f8:47:7a:6f:
cb:64:4f:2d:09:5e:4d:a6:cf:6e:03:78:3e:02:89:
92:a1:f0:f7:a1:87:6f:59:b5:af:a0:82:08:0b:3b:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:44:CD:97:3F:9B:D0:09:32:B7:22:A2:2E:1C:A9:52:09:B3:83
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:21:82:7c:b7:5f:e6:4b:52:0c:2b:00:61:05:b6:fb:ce:b2:
bf:b0:cb:88:9a:94:4e:a9:21:e3:ae:5a:18:1e:a8:93:05:41:
d3:d8:f7:c6:5d:74:ca:f8:eb:43:9f:96:6a:03:3b:9e:4d:49:
f7:c7:80:fb:e4:26:74:68:fa:fd:45:89:d1:17:d2:9d:ba:8b:
f0:c3:73:ca:7f:98:23:48:56:8a:e8:53:9f:8c:0c:0c:df:6c:
c4:c5:7b:fe:76:35:4d:a1:93:76:b9:a9:d2:f3:de:10:08:14:
aa:89:e6:20:0c:0c:a6:3d:72:6b:47:d8:b2:9a:d9:67:07:fa:
81:dc:d9:00:12:d0:37:df:ce:f0:cf:66:1f:bb:96:ae:3a:e7:
7a:83:5a:5a:51:7b:5d:49:b9:d0:91:28:95:31:32:4c:7f:3f:
f2:f5:87:1a:81:1e:18:1e:9d:ca:f3:72:75:d2:13:42:27:9c:
7c:65:8b:70:0b:45:1c:45:45:be:09:16:ea:dc:e4:db:cb:2a:
f4:63:67:1c:b3:a6:e1:90:71:d3:78:20:07:d6:d1:8c:7d:f4:
16:d9:14:c6:34:6f:a2:70:e1:50:15:46:94:e1:fb:df:55:de:
1a:96:49:85:c6:ea:d1:58:35:60:e2:90:6c:7c:6c:ac:43:c6:
7e:86:54:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PP50KTA0pmpslctpyqTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2
ZTU2NzcwHhcNMjYxMDI3MTIwMTUxWhcNMjYxMDI4MTIwMTUxWjAzMTEwLwYDVQQD
EygzY2RiNDRjZDk3M2Y5YmQwMDkzMmI3MjJhMjJlMWNhOTUyMDliMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqB8s6zawLsSaH45JbFfNhi8rGjb
CMYTKh4pM0u09TQQ74gRT/dT5y61PlymbKXjE636P/qbkETtUS9EaaxEMj++6KUO
VZC+kN45282Qz0td4W5uH8OPbhubt2PZPkQgba6xOPH957nLNgxdUJpsEczoSPxt
rJ7uDppLQdg7n3UyV0JtJvzeGoZd+1l+bnnmaVrTo1m+xaUyJrK3ArVsEjcV8M4i
ZPKGJr5nnTSPQF6xUQhVKibx/fndK+jla51BONfItBoHUMo0NdTVQrkSUV+AGbit
gSE3KUbzbvhHem/LZE8tCV5Nps9uA3g+AomSofD3oYdvWbWvoIIICzvRKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzbRM2XP5vQCTK3IqIuHKlSCbODMB8GA1UdIwQY
MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt
YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw
LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCGCfLdf
5ktSDCsAYQW2+86yv7DLiJqUTqkh465aGB6okwVB09j3xl10yvjrQ5+WagM7nk1J
98eA++QmdGj6/UWJ0RfSnbqL8MNzyn+YI0hWiuhTn4wMDN9sxMV7/nY1TaGTdrmp
0vPeEAgUqonmIAwMpj1ya0fYsprZZwf6gdzZABLQN9/O8M9mH7uWrjrneoNaWlF7
XUm50JEolTEyTH8/8vWHGoEeGB6dyvNyddITQiecfGWLcAtFHEVFvgkW6tzk28sq
9GNnHLOm4ZBx03ggB9bRjH30FtkUxjRvonDhUBVGlOH731XeGpZJhcbq0Vg1YOKQ
bHxsrEPGfoZUOg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:29:46 2026 by rpki-client