Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: fMwnkUoJPbpYoBdsfOVVJh4+8SFwrp5jiuMUacMFzp4=
Subject key identifier: C5:C0:A7:B7:50:3D:5C:F0:4F:DD:68:5E:DE:CD:DD:AE:6A:46:9A:C5
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 019D37524067E7A6FB38A7621984B4659870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 02:00:30 +0000
Manifest this update: Sun 29 Mar 2026 02:00:30 +0000
Manifest next update: Mon 30 Mar 2026 02:00:30 +0000
Files and hashes: 1: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: P+oWxJUBjuw6hNyuibYm8ziBSd0x7XIrrP1dSSNOmbg=)
2: fhF1gg6tTaPV39pNHXzapn66B-4.roa (hash: 2B1HxgzGj1c2eVd/8cGSVbgWEoR1+FiouVzHrmQHR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:40:67:e7:a6:fb:38:a7:62:19:84:b4:65:98:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Mar 29 02:00:30 2026 GMT
Not After : Mar 30 02:00:30 2026 GMT
Subject: CN=c5c0a7b7503d5cf04fdd685edecdddae6a469ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:a8:6c:bf:ef:23:cf:51:fd:c8:64:f6:6a:
90:37:8a:b5:01:88:62:e1:83:28:e6:a3:67:9f:48:
cf:52:3c:2e:d6:a7:bb:83:cc:01:0f:d8:67:17:9e:
49:2f:0a:83:5a:81:01:1d:89:80:60:96:cc:1c:e7:
38:e2:26:c1:65:06:ce:51:cf:7a:a9:a0:db:ef:94:
f0:3d:c2:ee:d4:71:fc:0b:8c:b5:83:30:88:47:29:
1a:d9:e3:07:f5:c1:4a:28:56:ea:2a:23:12:39:9d:
fb:58:63:c3:ab:a8:86:16:fc:19:ff:65:04:1b:46:
8a:93:b6:4e:9c:7f:04:63:00:e6:25:7b:1e:b4:8e:
e0:1b:62:5c:a6:2a:4c:a8:32:ce:72:a7:4c:cc:3d:
ca:1e:33:88:33:4a:c4:c3:79:a3:64:a3:9a:86:9d:
49:2b:8d:d3:3e:b6:90:38:76:f5:71:7b:1c:9c:0b:
c7:45:d8:b2:dc:33:84:c4:de:00:ae:6c:a0:ad:5a:
9d:85:7b:b8:b3:90:12:87:b0:ae:6c:73:89:3c:8b:
c9:69:c5:ef:e4:89:04:1c:fa:00:d4:72:de:dc:d6:
12:78:8a:d9:97:4d:7e:5d:1c:50:41:09:67:4a:8e:
a4:bf:ce:27:c2:ab:22:d5:2c:a9:78:a1:1b:36:fe:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C0:A7:B7:50:3D:5C:F0:4F:DD:68:5E:DE:CD:DD:AE:6A:46:9A:C5
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:73:7f:c4:ba:c3:51:53:01:1e:a2:5f:d4:bf:bc:9a:5e:10:
a2:6b:64:ed:aa:af:a0:b9:e0:b6:41:32:6e:49:53:ef:b8:ee:
66:ec:d7:07:c0:58:9a:c7:71:54:e6:42:f1:7a:06:6e:04:a6:
19:40:18:10:f1:c3:d1:d1:3e:9f:a3:f9:dd:49:d5:eb:2d:d3:
ca:ce:68:07:ba:56:e7:0e:02:b6:88:8f:cc:ec:f7:e1:3c:52:
d4:e5:ed:12:ca:b7:c8:c6:aa:a0:58:c9:73:8d:3d:22:6b:b8:
78:b7:63:5d:27:35:b2:04:0a:7c:90:8d:32:13:8d:0e:46:f7:
db:28:29:05:90:27:73:b9:23:1c:20:e6:a5:bb:59:6e:24:24:
6c:fb:e6:34:0d:cd:2d:db:50:ec:b5:e1:7c:7f:a5:de:79:4a:
ce:c5:b5:9f:9b:8e:40:1f:dc:81:f8:cf:69:dd:4f:64:68:36:
59:64:b4:be:6a:36:7a:8f:a7:aa:f3:67:72:55:75:43:6b:ce:
2b:c1:35:ad:62:92:2b:f1:03:16:f3:d7:08:62:4a:35:5f:61:
01:22:cd:cb:03:32:be:d4:55:81:d6:2c:c8:4d:22:6a:a8:db:
30:ed:cc:e8:6c:c0:53:e3:a5:99:8e:b4:1f:7e:69:6f:b1:f9:
ec:c2:3d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UkBn56b7OKdiGYS0ZZhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTg3ZjgxMTU5N2RkMDM1MTNiZTQyZjQzMTU1YmMxNWEz
YTBiM2YwHhcNMjYwMzI5MDIwMDMwWhcNMjYwMzMwMDIwMDMwWjAzMTEwLwYDVQQD
EyhjNWMwYTdiNzUwM2Q1Y2YwNGZkZDY4NWVkZWNkZGRhZTZhNDY5YWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPKobL/vI89R/chk9mqQN4q1AYhi
4YMo5qNnn0jPUjwu1qe7g8wBD9hnF55JLwqDWoEBHYmAYJbMHOc44ibBZQbOUc96
qaDb75TwPcLu1HH8C4y1gzCIRyka2eMH9cFKKFbqKiMSOZ37WGPDq6iGFvwZ/2UE
G0aKk7ZOnH8EYwDmJXsetI7gG2JcpipMqDLOcqdMzD3KHjOIM0rEw3mjZKOahp1J
K43TPraQOHb1cXscnAvHRdiy3DOExN4ArmygrVqdhXu4s5ASh7CubHOJPIvJacXv
5IkEHPoA1HLe3NYSeIrZl01+XRxQQQlnSo6kv84nwqsi1SypeKEbNv43cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXAp7dQPVzwT91oXt7N3a5qRprFMB8GA1UdIwQY
MBaAFCkYf4EVl90DUTvkL0MVW8FaOgs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgt
MjQ5OTRiMDQwZjQxLzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgtMjQ5OTRiMDQwZjQx
LzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnN/xLrD
UVMBHqJf1L+8ml4Qomtk7aqvoLngtkEybklT77juZuzXB8BYmsdxVOZC8XoGbgSm
GUAYEPHD0dE+n6P53UnV6y3Tys5oB7pW5w4CtoiPzOz34TxS1OXtEsq3yMaqoFjJ
c409Imu4eLdjXSc1sgQKfJCNMhONDkb32ygpBZAnc7kjHCDmpbtZbiQkbPvmNA3N
LdtQ7LXhfH+l3nlKzsW1n5uOQB/cgfjPad1PZGg2WWS0vmo2eo+nqvNnclV1Q2vO
K8E1rWKSK/EDFvPXCGJKNV9hASLNywMyvtRVgdYsyE0iaqjbMO3M6GzAU+OlmY60
H35pb7H57MI9Kw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:12 2026 by rpki-client