Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: W3NL+XFUUF0+4ky90Hz7D4TwVFhzC6yR1rrwzohrdG0=
Subject key identifier: 2A:02:87:BF:BE:24:FC:AF:51:DC:AB:6A:C5:1D:18:93:3E:AA:9A:2B
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 019D3940B2C19FFD30D7E0BD604C89A9D107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: VY2RH0mBY+5JE57hgH7nTrkdL4k33TrqZMg5ssWZnnc=)
2: plvMMrmZnAh_cyeI-ARrIth21Cc.roa (hash: fkJT+3dTmiuNLjsJK683zGKByk+fcJe0nRAhf6uv61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b2:c1:9f:fd:30:d7:e0:bd:60:4c:89:a9:d1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=2a0287bfbe24fcaf51dcab6ac51d18933eaa9a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:9a:8d:26:cb:fa:12:f2:fe:67:14:29:0d:
d1:cc:a8:0a:14:65:ff:80:86:b5:12:00:2c:64:bb:
72:8c:c4:85:3c:5e:02:76:5e:d9:75:f2:4b:b1:e8:
9b:7e:1d:f3:e2:c0:d8:a4:e3:23:88:02:92:22:81:
6f:b4:fb:e2:d4:3c:9f:4b:02:2d:b4:90:59:14:d9:
bd:6e:f7:64:83:d2:34:b4:e1:a7:43:e1:d3:90:b4:
7e:e1:36:2c:f8:fd:38:cb:19:d1:19:f9:e5:49:9b:
3b:cb:44:28:72:1b:57:b5:96:80:16:5a:f4:46:f4:
c2:17:56:42:b6:c6:0a:47:d2:db:a1:8d:97:5e:2e:
31:dc:10:ba:5b:79:2d:08:88:a5:c6:b5:45:86:c0:
2c:9d:db:80:aa:87:df:38:b9:96:72:9e:48:3a:0d:
f2:1c:9b:86:5b:63:cb:45:0b:f0:99:4d:c0:20:88:
8a:54:26:14:03:f9:74:16:ae:8c:35:f6:01:e9:6a:
0b:36:95:a8:c7:d5:e3:8d:59:00:02:26:6c:41:51:
dd:5b:23:25:c4:34:61:39:26:e0:bc:d9:fa:2b:75:
93:cb:03:10:21:01:a1:d0:f4:84:6c:cc:db:15:ad:
cd:e7:5a:14:97:95:ac:e6:07:d8:63:25:9f:d6:77:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:87:BF:BE:24:FC:AF:51:DC:AB:6A:C5:1D:18:93:3E:AA:9A:2B
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:16:df:e0:1e:f2:7c:0f:69:a8:e3:f1:8e:e1:82:33:76:d5:
4c:ee:de:73:d1:29:12:68:8d:d9:d7:7f:88:4a:c7:8c:02:e4:
65:6e:84:9d:d3:9f:9b:1e:b3:93:10:8a:c8:6c:b4:d8:cf:26:
90:be:d6:64:fd:2c:07:0f:91:f0:74:01:8c:a2:2f:a1:04:12:
a2:0f:81:2a:dc:55:6b:7c:05:d1:59:9c:75:97:1e:e1:a4:c2:
ed:16:52:7e:c5:3d:59:5c:12:c9:33:2c:3a:9b:17:d0:68:60:
2d:cf:00:bb:fb:03:66:cc:70:fe:5c:d9:54:c2:d7:1e:f1:e0:
16:f4:30:b4:29:31:2d:cb:bf:2e:07:9e:2e:e2:92:9c:3e:16:
62:08:9c:3c:3e:90:4b:42:73:9d:f4:ce:1b:1c:09:a6:b4:c7:
dc:85:42:3d:a7:86:cf:72:56:2d:d4:a2:fe:8e:77:26:58:da:
23:36:e7:67:66:dd:61:d4:83:21:6e:a0:68:39:78:de:32:26:
cf:59:e1:58:65:85:c1:a9:3b:b3:81:ba:13:13:a3:6e:df:0c:
ac:10:5a:f4:8e:0e:ea:e4:c2:64:40:eb:3d:a5:35:f3:50:94:
0f:ef:a4:7c:2b:5d:96:65:71:f3:d5:9e:61:a1:34:38:15:f6:
8f:1d:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:10 2026 by rpki-client