Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: Vd5Th1WblseBAhqEIM5gCan0EbV6tUMmWInlSfSKEwM=
Subject key identifier: 20:4E:A5:77:52:06:B0:DC:6B:A8:93:6D:8F:C7:96:76:58:BC:27:94
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 01A13F023B6C933557EB2AC49E35C5229287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 17B3
Signing time: Thu 15 Oct 2026 10:01:13 +0000
Manifest this update: Thu 15 Oct 2026 10:01:13 +0000
Manifest next update: Fri 16 Oct 2026 10:01:13 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: QV8mZQ8yC2avQAyzkqs28kZN+/z4z8r29teT5SgctfU=)
2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:3b:6c:93:35:57:eb:2a:c4:9e:35:c5:22:92:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Oct 15 10:01:13 2026 GMT
Not After : Oct 16 10:01:13 2026 GMT
Subject: CN=204ea5775206b0dc6ba8936d8fc7967658bc2794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:c5:7a:df:96:63:0e:e8:32:4b:8d:39:fb:
a9:ca:11:b9:64:0a:58:fb:ba:22:58:01:0d:2f:39:
58:a4:28:07:54:3d:83:f2:57:4d:62:f8:e2:7d:c4:
68:5c:56:e9:9c:9e:10:4e:e4:99:39:9b:d5:d1:8a:
10:1e:a9:ef:44:51:48:dc:a3:ee:97:e4:ce:23:9d:
de:a1:ad:a6:bd:30:67:4d:d1:08:f2:83:8f:77:71:
36:24:b1:9e:59:37:a4:58:aa:97:3d:6e:b1:89:f0:
ea:18:54:4e:27:99:5c:e1:da:ca:a5:b1:67:46:25:
0a:35:91:13:42:32:90:79:1e:f4:09:3b:b6:14:e7:
52:68:bb:0a:fa:09:58:86:e5:ee:ce:8c:3c:ac:9b:
39:37:bc:f7:48:27:77:36:78:4f:0f:58:7a:1c:d3:
8c:93:22:06:91:6b:8c:44:1a:ee:3b:f7:43:75:03:
3f:ae:8f:9e:54:71:05:8f:5c:a1:01:d0:9b:8e:e6:
14:64:25:11:0b:df:70:89:77:e8:50:22:0e:1c:36:
9a:74:7a:f7:c0:b2:5c:d7:a9:c7:0a:b3:81:fa:19:
bb:f9:27:37:e7:69:83:fa:f3:77:56:5c:a6:f1:bf:
31:0f:0b:9b:e0:24:59:49:d3:c3:b8:cf:8d:c7:17:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4E:A5:77:52:06:B0:DC:6B:A8:93:6D:8F:C7:96:76:58:BC:27:94
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c4:6f:2c:82:84:5c:3e:87:f4:cb:39:00:61:f6:9e:52:58:
75:d6:11:15:3c:41:fb:04:58:50:4d:ad:bb:47:95:e9:c9:d6:
42:3c:7c:29:70:46:57:33:2a:f8:d8:67:0e:c6:6e:ae:01:f4:
07:59:82:b9:39:bd:b4:1d:50:2e:44:10:c2:a6:65:3a:89:cc:
29:33:4c:ec:50:6a:96:0d:7c:24:58:2c:4f:21:3d:64:ef:7f:
ce:45:7d:65:8c:3a:d3:68:43:40:3a:e3:cb:36:fe:e0:62:b5:
94:b8:bd:55:b4:77:a6:79:6e:4d:62:36:05:a4:f8:41:c5:43:
0b:d7:d2:e8:26:64:48:cd:a7:e5:78:c3:58:58:b9:9a:b4:d7:
d5:94:da:b1:70:dd:c7:93:3a:57:3c:3c:30:25:a2:43:48:b4:
bf:d4:30:7c:5e:02:df:16:11:df:9c:eb:bb:97:43:b3:09:83:
dc:ae:fd:2e:58:db:15:b4:44:da:5b:73:07:b5:b5:a0:8e:0a:
a6:05:1f:1a:6e:9b:d9:4e:d1:2e:fe:32:31:17:66:8e:20:12:
6b:dd:4c:3a:79:5f:90:00:0e:6a:a4:f1:1b:fc:53:dc:c8:fa:
66:a6:7f:05:b9:5d:b4:c2:ba:cd:7c:f8:d6:26:c6:1c:8e:f8:
91:1c:2d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/AjtskzVX6yrEnjXFIpKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj
ZjdhZDAwHhcNMjYxMDE1MTAwMTEzWhcNMjYxMDE2MTAwMTEzWjAzMTEwLwYDVQQD
EygyMDRlYTU3NzUyMDZiMGRjNmJhODkzNmQ4ZmM3OTY3NjU4YmMyNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyzFet+WYw7oMkuNOfupyhG5ZApY
+7oiWAENLzlYpCgHVD2D8ldNYvjifcRoXFbpnJ4QTuSZOZvV0YoQHqnvRFFI3KPu
l+TOI53eoa2mvTBnTdEI8oOPd3E2JLGeWTekWKqXPW6xifDqGFROJ5lc4drKpbFn
RiUKNZETQjKQeR70CTu2FOdSaLsK+glYhuXuzow8rJs5N7z3SCd3NnhPD1h6HNOM
kyIGkWuMRBruO/dDdQM/ro+eVHEFj1yhAdCbjuYUZCURC99wiXfoUCIOHDaadHr3
wLJc16nHCrOB+hm7+Sc352mD+vN3Vlym8b8xDwub4CRZSdPDuM+NxxcV7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBOpXdSBrDca6iTbY/HlnZYvCeUMB8GA1UdIwQY
MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt
ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj
LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8RvLIKE
XD6H9Ms5AGH2nlJYddYRFTxB+wRYUE2tu0eV6cnWQjx8KXBGVzMq+NhnDsZurgH0
B1mCuTm9tB1QLkQQwqZlOonMKTNM7FBqlg18JFgsTyE9ZO9/zkV9ZYw602hDQDrj
yzb+4GK1lLi9VbR3pnluTWI2BaT4QcVDC9fS6CZkSM2n5XjDWFi5mrTX1ZTasXDd
x5M6Vzw8MCWiQ0i0v9QwfF4C3xYR35zru5dDswmD3K79LljbFbRE2ltzB7W1oI4K
pgUfGm6b2U7RLv4yMRdmjiASa91MOnlfkAAOaqTxG/xT3Mj6ZqZ/BbldtMK6zXz4
1ibGHI74kRwtdg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:09 2026 by rpki-client