Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: lXHh3dISrVYsJBDOTWsJeNazkfjC4/jbz0KyGcp9RZE=
Subject key identifier: 5B:32:D0:C1:80:B8:71:E8:5D:97:8E:E8:D1:E6:19:00:4D:E6:A7:47
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 019E709BC232E6FE825801E2772ECE3FF70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 163F
Signing time: Thu 28 May 2026 22:01:56 +0000
Manifest this update: Thu 28 May 2026 22:01:56 +0000
Manifest next update: Fri 29 May 2026 22:01:56 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: 49CWon56RKenNzq2PwtLK9hIFhF71VskV2hfpAUaT1Q=)
2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 20:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:9b:c2:32:e6:fe:82:58:01:e2:77:2e:ce:3f:f7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: May 28 22:01:56 2026 GMT
Not After : May 29 22:01:56 2026 GMT
Subject: CN=5b32d0c180b871e85d978ee8d1e619004de6a747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:c0:de:2d:50:f9:c7:c3:6e:68:e7:6a:1e:
e6:e7:d8:cc:af:3a:b9:4e:99:85:05:22:0d:e3:5f:
9b:b2:e6:2a:63:9d:d2:89:68:49:64:ab:d7:5f:c0:
20:77:c8:19:88:ff:1d:f8:6b:95:0d:a0:89:a9:0f:
1b:fb:77:3f:ca:41:6f:61:25:2b:25:99:fb:d5:12:
83:79:31:0e:fb:f7:4d:b6:9c:66:d2:bd:34:1a:78:
ef:7a:12:bf:1f:2c:d4:95:03:64:13:13:11:4d:ff:
bf:21:09:a0:1f:ef:69:ad:3b:2f:38:1d:f5:5e:e2:
9b:f6:e0:9d:fc:f7:80:ad:1d:5b:f8:e1:2c:52:89:
8c:f2:0d:2a:a1:10:5f:79:29:b9:9a:1c:78:1a:ba:
60:55:7e:d1:dd:ac:00:71:b3:2a:ec:7d:24:4c:a2:
23:33:83:9f:1e:70:2b:5b:7c:97:f1:b2:44:f4:75:
65:14:1f:5d:52:2d:4d:7d:50:3e:dc:5d:66:4f:2c:
93:ba:08:da:23:d3:ce:a7:7a:6e:1c:02:23:fa:2b:
b5:3a:d6:56:73:bb:49:30:f8:bb:0f:74:ee:1a:fe:
96:31:3f:14:77:e7:14:35:a2:37:01:ca:17:f3:a5:
3b:cb:54:34:d3:5b:bb:a4:ec:27:bf:42:69:86:82:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:D0:C1:80:B8:71:E8:5D:97:8E:E8:D1:E6:19:00:4D:E6:A7:47
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9f:a6:f0:30:67:05:45:28:8d:4c:f7:ab:91:eb:21:fe:03:
a2:2b:73:bd:7e:5f:c2:f9:aa:a5:4a:bf:14:bb:04:ad:59:62:
7a:d8:3f:e4:ed:55:df:08:65:10:b4:a6:fa:f9:9a:89:29:0e:
6d:14:62:c9:75:a3:a3:c1:90:22:31:1f:87:76:30:8c:86:2a:
7a:49:1a:0e:a3:1d:9d:61:88:e5:ce:3b:06:5b:51:92:76:72:
e1:40:84:3e:13:18:67:ce:63:2c:52:32:29:7b:50:3f:8a:ce:
6e:82:6c:3d:03:9d:6f:33:85:32:be:c1:a5:4f:c7:85:bd:11:
ce:d6:29:da:55:ac:81:97:f5:45:49:d8:c0:31:98:f7:6e:1d:
87:58:85:f2:8e:00:23:4c:0d:60:35:9e:ad:e6:c4:98:b8:a1:
17:fe:39:97:8a:25:c7:e5:0e:fe:90:45:9f:06:e3:67:eb:30:
6b:f9:8d:20:37:44:8a:ad:4e:45:5a:c0:11:28:a5:cd:50:a6:
7b:49:b2:2d:76:5f:b1:a6:fa:f9:fa:d2:9e:29:ed:22:b5:48:
16:ba:49:02:8b:7f:55:bf:4e:fc:4d:2b:cf:a2:3f:c1:4d:ea:
63:bd:6c:2f:23:62:31:5d:e7:90:a1:9e:a0:14:af:58:e3:91:
ca:90:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 23:43:37 2026 by rpki-client