Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: fyxtffuToeiY4zuU/4RAbQvs7idXJ0adnKtDf7aSslw=
Subject key identifier: 0F:50:AD:9C:40:A5:96:0E:B7:3C:53:BF:1D:C0:64:8B:BE:30:F8:68
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019EB87D1F3B741E2D166C917CA804FC117F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 13E2
Signing time: Thu 11 Jun 2026 21:01:08 +0000
Manifest this update: Thu 11 Jun 2026 21:01:08 +0000
Manifest next update: Fri 12 Jun 2026 21:01:08 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: NKIjYi0PMix0UY6K42cDbe6dekmpJVzfzbeSblPIVGE=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:1f:3b:74:1e:2d:16:6c:91:7c:a8:04:fc:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Jun 11 21:01:08 2026 GMT
Not After : Jun 12 21:01:08 2026 GMT
Subject: CN=0f50ad9c40a5960eb73c53bf1dc0648bbe30f868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:59:7e:30:84:09:15:18:81:16:b5:d9:0e:
23:bb:11:da:c9:7f:99:54:2e:d1:ab:56:ef:97:e1:
fd:04:fb:01:cf:0f:47:da:da:81:59:e1:df:49:bc:
fa:ad:33:60:79:7f:4d:4c:a3:e0:14:7f:a8:5f:14:
24:c3:c1:7d:4f:69:be:1d:04:3b:6f:68:9d:4b:d0:
4e:49:e4:fb:9a:9a:43:a5:e0:d5:8b:44:a0:de:d4:
fa:82:b1:79:da:9a:4b:0f:b9:2e:48:75:f8:b5:60:
56:9d:aa:41:c2:67:77:af:2e:a5:ed:53:28:6a:3e:
99:8a:02:d3:d8:3e:fe:1a:0a:6f:d4:57:7b:64:cf:
94:3a:aa:77:61:0e:57:e8:86:28:b5:83:6c:b2:56:
5d:1d:f2:00:fe:49:48:93:96:dd:6b:9e:7b:9b:a2:
f9:49:f4:64:52:17:6a:01:1c:b9:ca:7b:4c:06:81:
a8:8b:42:c8:72:d2:bb:3d:ae:1f:b6:10:38:a2:97:
60:4d:22:5a:74:ac:f6:7c:dd:d1:45:61:f4:ec:f3:
96:19:17:46:a0:44:c9:39:6f:8c:14:68:ee:e1:8c:
7a:cc:ed:e2:a6:93:35:36:82:46:04:01:5e:50:2a:
2d:e2:28:ff:50:21:0e:c2:a5:f9:74:16:ab:ef:d2:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:50:AD:9C:40:A5:96:0E:B7:3C:53:BF:1D:C0:64:8B:BE:30:F8:68
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:20:0f:23:1f:f9:b4:0c:e2:93:90:a5:1e:64:eb:b4:30:f2:
84:e4:24:9d:f1:96:71:b6:0f:8f:89:1a:8a:81:75:1f:5b:8c:
e5:77:91:0d:07:fa:e1:74:16:1e:22:33:eb:4e:28:2c:5d:6a:
e3:54:6f:7a:54:bb:a3:7c:4c:81:6f:e6:61:62:8c:14:db:f1:
7e:ca:0f:76:23:0d:01:1f:5b:66:0a:99:8a:4c:0c:93:1a:75:
76:87:54:17:2d:3b:33:14:98:f4:50:7a:17:1b:91:e6:61:8c:
5a:e4:dd:2e:da:a8:b5:e6:37:d9:0c:26:ce:89:8a:7d:55:55:
f5:0b:fe:3b:fb:70:ed:5b:2c:c0:8c:8d:36:40:c3:7d:e1:86:
c5:d1:e9:61:18:a6:7c:df:d7:e5:1b:04:ba:4c:2a:fe:5c:31:
12:1e:33:78:9b:b6:bb:b3:41:09:ba:f2:37:21:4b:ac:0b:5f:
17:c8:ab:67:fc:8c:b0:ce:2d:87:4f:ff:24:03:5e:cf:d7:f9:
e6:0b:bb:f6:78:5f:ca:74:d2:24:2a:2c:ac:3d:ee:0e:87:93:
ed:cd:bc:39:f0:e3:43:42:f7:84:c5:74:52:70:92:98:e6:5a:
6b:c9:d0:d6:ba:1f:72:02:e1:3c:2e:d5:cb:cd:e2:ae:e1:57:
6b:3d:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:03 2026 by rpki-client