Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: Iiai2sZLI4eVscDHKnL0Al+Sw+AtNadDad6EIKv9RFc=
Subject key identifier: 05:92:DC:64:A7:30:B5:8F:18:B0:28:E4:E8:DD:2F:22:69:24:DA:96
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019FA03AEC119B2DAE2461102B61918F5903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 145A
Signing time: Sun 26 Jul 2026 21:00:43 +0000
Manifest this update: Sun 26 Jul 2026 21:00:43 +0000
Manifest next update: Mon 27 Jul 2026 21:00:43 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: LLtYhqFFAR4+IueB6dlHXyL6UV86ZvZtDSeOqlXdHu0=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:ec:11:9b:2d:ae:24:61:10:2b:61:91:8f:59:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Jul 26 21:00:43 2026 GMT
Not After : Jul 27 21:00:43 2026 GMT
Subject: CN=0592dc64a730b58f18b028e4e8dd2f226924da96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:2b:31:9c:e3:cb:72:8a:21:2f:e9:bf:66:
8b:97:e2:bb:dd:33:d1:19:c5:71:dc:06:27:4b:29:
5b:87:aa:8e:6c:54:67:12:b4:e8:e0:0e:b9:3e:e9:
98:40:c4:4f:60:be:8c:35:0e:02:14:75:6f:7e:d2:
be:9e:e3:24:88:0d:e3:bd:ac:3d:82:4e:c1:b7:46:
a5:36:e8:33:03:8e:9a:76:e0:68:bd:2d:90:6f:7e:
77:24:00:a0:b6:06:d4:0b:c6:65:d2:f7:74:d6:14:
94:94:2f:68:ab:bd:58:52:42:8f:2f:39:ca:88:80:
70:de:40:a3:7a:08:94:91:a8:df:34:11:94:77:82:
2d:cd:af:bb:ab:16:43:9c:37:46:3c:d6:fb:1c:f7:
8b:ad:46:c7:b7:63:7d:3a:9b:ef:32:08:97:24:07:
9d:ca:54:71:43:37:29:9a:03:58:f9:64:4e:cd:f3:
ab:5f:f3:ed:36:3b:9c:23:10:df:30:3c:c8:6b:11:
c2:e7:e7:f0:e2:64:f8:11:a2:5b:ef:24:56:4a:52:
bd:1a:27:b0:1f:65:ce:60:c9:3b:44:86:5e:3b:50:
c4:d4:b1:15:cb:95:05:ea:86:ee:57:a3:97:ff:57:
a5:50:83:07:a1:30:ed:99:0e:cd:1d:12:66:94:ff:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:92:DC:64:A7:30:B5:8F:18:B0:28:E4:E8:DD:2F:22:69:24:DA:96
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:72:0f:7f:fa:98:82:21:b6:a2:41:ad:0d:c4:ba:55:40:f7:
9a:9f:37:b4:66:8f:78:a1:ff:19:cd:ae:c1:bc:60:60:2d:4d:
6a:c9:94:6b:98:15:20:e0:e7:56:c7:05:30:7e:c2:2e:10:1d:
74:3f:bb:19:a4:fc:72:df:ba:30:bf:43:e2:b0:17:d9:cd:2c:
46:7c:26:14:5f:d8:38:17:10:be:f5:94:a1:ea:d8:ba:c2:ad:
b2:55:af:51:b4:59:7d:f7:0b:b0:30:a9:6c:0c:93:37:80:cf:
6f:50:63:5b:7b:97:d9:a7:e9:25:5d:47:71:00:7d:be:34:4e:
fc:ad:2a:6d:85:4e:e4:7b:b7:ab:90:2b:25:4c:49:99:37:76:
0c:76:35:33:78:bb:0a:0c:c3:84:99:bd:31:ef:ad:a7:ea:d4:
57:2d:bc:91:e6:3b:61:7f:2d:c8:0d:63:29:6b:f5:81:f3:ad:
1a:8a:7f:8c:fd:ef:da:75:95:ee:b7:cf:5f:67:b6:d0:40:f3:
6e:33:64:46:df:de:c5:b2:ab:66:17:8d:5d:2b:80:16:c1:20:
9b:c8:1f:8c:c4:95:0a:fb:0f:67:60:7d:e2:dc:4a:b6:e7:ec:
05:d5:95:af:2c:c3:a2:fd:e8:32:42:99:12:25:29:32:6d:6e:
62:91:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:02 2026 by rpki-client