Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: wxfNi2esolj/hhZjRePvTv6ItyslcyLCuXxAfyrHmME=
Subject key identifier: 73:D3:31:D5:35:21:77:9D:DA:57:9E:03:5A:96:78:ED:0D:E9:7D:67
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 019F5A475DE6B68738BD691B0D0E239D4C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 16B8
Signing time: Mon 13 Jul 2026 07:00:54 +0000
Manifest this update: Mon 13 Jul 2026 07:00:54 +0000
Manifest next update: Tue 14 Jul 2026 07:00:54 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: iktD/nH4I/XB77NVzDZRC/WaCScWqvZiG3I4RQfO4YI=)
2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:47:5d:e6:b6:87:38:bd:69:1b:0d:0e:23:9d:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Jul 13 07:00:54 2026 GMT
Not After : Jul 14 07:00:54 2026 GMT
Subject: CN=73d331d53521779dda579e035a9678ed0de97d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:86:04:d7:70:db:55:9a:d0:c2:3f:b4:a0:
ca:db:70:09:38:ea:94:e2:13:17:49:3b:bf:8d:ad:
0e:a0:43:1c:d4:2b:91:89:47:ef:e2:4e:14:ea:24:
3e:24:74:cd:e4:28:f0:05:5e:7d:d9:08:22:21:f9:
44:ae:54:f0:dc:fc:6b:e6:5f:3c:a7:cf:f8:51:ec:
e4:10:55:08:a9:fc:7c:7a:e8:22:47:c7:b0:d7:53:
7c:1f:75:05:f5:cf:53:d6:75:9b:8b:65:fb:61:ba:
19:12:ed:f2:04:81:f4:55:ec:e0:39:9e:2f:73:f9:
23:85:f8:42:14:06:ba:7f:ac:d0:d7:6a:3e:16:49:
b0:ee:e9:7d:bf:81:f5:d0:ee:da:d3:5d:ca:48:0f:
11:bd:2f:71:11:2c:34:31:a0:1c:08:d9:6b:de:20:
fa:5e:ce:26:96:de:98:c2:62:42:7a:fe:19:35:3a:
b3:ab:30:4f:54:cd:82:c7:5f:8d:00:aa:27:dd:ad:
a0:80:29:25:86:9e:94:7c:83:dd:46:73:f8:5e:22:
3f:5e:b8:d4:0f:0f:02:99:eb:80:38:c0:e7:9e:76:
64:82:dc:62:91:7b:d6:0d:d1:f2:8f:3a:2b:04:4e:
76:f9:d4:4d:2c:cb:c1:d5:d6:bc:c1:48:79:35:44:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D3:31:D5:35:21:77:9D:DA:57:9E:03:5A:96:78:ED:0D:E9:7D:67
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:61:91:c7:d6:8f:79:8c:bf:47:7f:0a:2a:2e:7e:4a:11:c4:
61:90:29:46:b5:d1:32:fa:b5:c9:20:b5:01:5b:29:0e:7f:d9:
9e:a6:f6:0c:a3:29:76:43:4a:10:96:3d:e5:7e:fa:a3:3d:0b:
39:8c:03:b8:32:63:4a:c0:54:00:fd:9f:7d:35:3f:02:c9:15:
b5:01:e2:5d:a9:83:4b:26:44:c2:4b:0a:28:cd:3a:5e:c5:48:
a5:36:cb:eb:17:ba:8a:57:7b:4f:e7:4f:75:dc:a9:a2:8b:80:
14:cc:f1:0a:ec:14:cd:06:11:16:84:fc:e7:f2:ab:c9:28:93:
80:a0:f3:0f:4e:0c:83:f0:70:65:82:55:91:77:62:c0:e6:c6:
fa:68:1d:b4:81:24:1d:f6:94:ff:7e:84:fa:11:18:aa:37:49:
ad:06:b1:c1:87:05:1d:35:75:fc:1d:cc:47:58:c1:a5:3e:3d:
75:2c:51:a4:65:35:f7:91:62:74:0d:fa:3a:8c:ec:84:c1:c8:
ec:27:68:01:83:35:24:1a:04:bf:ed:22:19:e5:73:be:fb:78:
fb:17:5f:a8:e5:59:56:a3:d1:00:78:eb:f1:08:7c:92:9e:60:
52:d0:7d:9c:d9:e2:17:bd:65:73:56:6f:a7:cf:36:d8:e3:1b:
0f:fa:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 15:00:21 2026 by rpki-client