Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: THVtZFm19uLSo7DtGWzV26OjjEYiQIeFnsl596LMnrM=
Subject key identifier: 34:99:11:BD:50:82:7B:5B:1F:DF:4D:D5:2A:24:B8:96:13:9A:10:F9
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019D382E0B9DE6E9F8FD248CA2A0FC1639EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 17B5
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: QdSyoJzU1rH9xtxBbBdW7T/19+bXmzR95VFxhl27NX4=)
2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0b:9d:e6:e9:f8:fd:24:8c:a2:a0:fc:16:39:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=349911bd50827b5b1fdf4dd52a24b896139a10f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:0b:ff:f7:ca:37:51:09:0c:15:96:9d:9c:
35:54:bf:1d:3e:92:e7:98:20:27:66:1a:45:4e:03:
f1:d2:7b:3c:3c:31:9b:09:d3:03:40:1f:6f:eb:d4:
b2:7b:6a:0c:c1:c2:52:0a:85:4d:02:d0:d0:87:3d:
4e:56:4f:88:65:81:d2:56:a2:78:a2:53:ac:9e:83:
df:a9:71:da:97:03:4b:9e:63:a7:a7:49:4c:ca:65:
32:98:25:be:e7:da:b6:52:36:96:a6:f5:da:2f:c7:
d8:d5:0b:7a:a5:15:5a:53:61:15:45:f0:b2:33:2c:
14:25:ad:f9:d0:b4:a2:1f:6b:74:d2:1d:56:72:ae:
1c:48:ba:69:9b:ca:33:a7:15:a5:79:e8:a7:df:e3:
9a:96:eb:55:e4:ef:77:6c:6c:49:a7:be:e0:6f:0d:
7f:f5:27:83:96:78:cb:50:e7:59:44:ee:9b:c4:93:
50:d4:5d:a4:60:fa:f2:14:bf:4f:47:a2:07:e5:be:
b0:bd:d0:e6:9f:27:4a:fb:b2:2d:5f:05:59:17:da:
19:62:75:21:26:c4:0c:94:f3:be:2e:90:30:39:85:
e2:75:4b:59:25:c8:19:70:9f:9f:c1:fd:04:da:0f:
14:26:e9:5b:b4:5a:eb:c7:54:b0:ab:e7:a1:5d:70:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:11:BD:50:82:7B:5B:1F:DF:4D:D5:2A:24:B8:96:13:9A:10:F9
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a6:21:8e:e5:8e:c8:84:8c:0b:f5:b6:87:71:1b:c5:eb:1b:
c7:5d:fe:a3:1b:f2:5f:93:55:47:e3:f5:8e:cb:ff:af:0b:a2:
f1:e2:ce:c0:22:57:0c:01:08:7f:01:1f:e5:b2:48:a7:46:f4:
69:83:bc:58:a9:78:7c:3e:a5:71:ce:31:11:7e:86:fb:1d:83:
5a:30:84:87:f0:bd:90:9e:95:8a:54:04:05:36:3d:94:d2:2f:
11:6f:8d:3a:17:c2:86:cf:5a:78:c4:91:20:ff:a3:af:4b:1d:
8a:d7:91:bd:dc:e1:61:f2:e4:b9:4d:f2:57:23:0f:60:59:3c:
40:16:5e:8c:12:44:98:8c:8e:ca:f9:05:d6:16:36:48:2f:08:
17:66:70:56:ed:3a:97:7c:06:c8:48:48:11:bf:0b:d1:6f:86:
bf:02:e8:45:9c:9b:c9:cd:26:e8:82:2d:a1:92:c4:ba:11:ee:
4f:9a:10:d7:17:33:d5:bd:b6:c3:b5:e8:06:63:58:7c:4c:eb:
de:31:e8:22:6d:53:3b:0f:56:48:c6:5d:c0:2d:a8:0a:06:9b:
fa:40:7e:c3:52:e6:9f:01:43:60:f5:65:0e:29:65:46:fb:8f:
08:95:67:f3:32:f3:19:b0:45:4a:a7:0f:b4:e1:1e:ac:87:4b:
fe:de:fc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:53 2026 by rpki-client