Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: i2YkdvZCIP7a+m30cZqPl1tmyWvRIr/YSEa5rTm0Jhk=
Subject key identifier: E4:FC:B9:F4:EE:2D:8F:AF:61:05:B9:9E:61:8D:60:FD:86:99:25:9B
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 019E314E89A25ABC2329CA5EA13A4038E805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 15:01:31 +0000
Manifest this update: Sat 16 May 2026 15:01:31 +0000
Manifest next update: Sun 17 May 2026 15:01:31 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: 2SdvVXcw3c8GMO9jtSZ/BVvtcb2+WDSYeIbKtNGKjD0=)
2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:89:a2:5a:bc:23:29:ca:5e:a1:3a:40:38:e8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: May 16 15:01:31 2026 GMT
Not After : May 17 15:01:31 2026 GMT
Subject: CN=e4fcb9f4ee2d8faf6105b99e618d60fd8699259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:0d:92:b6:a9:4a:f9:ad:2a:1f:f2:8b:7c:
d2:d6:55:35:6d:00:a3:e6:c4:2e:ec:2d:67:e3:aa:
ed:3a:92:ba:23:12:96:71:91:38:d3:c5:5d:4b:35:
a4:6b:37:53:2e:76:c1:11:fe:c2:dc:6b:b5:4f:bc:
51:48:9b:a8:cc:c7:8f:92:5a:71:3d:2d:b0:6c:bf:
10:44:51:2d:f9:24:e4:63:74:ea:7f:64:bd:f7:f5:
3c:e7:69:53:5c:37:a9:9d:f2:4f:71:63:65:3d:97:
e2:79:76:6c:c7:7c:e5:97:a0:e1:71:68:a6:1e:7c:
f4:35:14:db:d7:bb:67:b6:6f:9e:f3:a0:27:fe:c1:
7d:bc:52:a1:0d:5c:d5:e4:57:a0:f2:6f:ae:69:c3:
8f:fd:10:96:6d:19:39:33:2c:26:b0:a8:a0:0a:5f:
08:21:67:2e:91:73:16:d4:41:7a:3f:60:4d:70:19:
21:fe:39:34:53:7c:c2:6b:8c:49:11:49:31:b8:7e:
03:14:c8:05:28:30:6a:59:a4:25:b9:d5:1f:5e:79:
b8:fe:b4:7b:04:0c:8c:af:a5:1f:1e:3b:fa:80:e6:
af:d2:c3:1f:b1:65:7e:68:9a:4d:32:06:e5:66:4b:
78:18:c1:5d:fe:60:71:84:28:c2:c2:c0:cc:62:94:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:B9:F4:EE:2D:8F:AF:61:05:B9:9E:61:8D:60:FD:86:99:25:9B
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:50:bf:43:1f:97:c3:08:14:16:e5:b6:30:a4:74:8d:5a:e5:
30:7d:0d:25:d0:f5:a3:3e:1b:f5:5d:b2:c9:35:c0:ef:68:ca:
ab:df:0e:62:52:c8:fe:a1:c9:b2:f9:8e:9d:51:87:8d:86:1f:
5c:a9:a2:f5:88:05:da:04:46:92:00:fc:ce:78:30:e7:ad:28:
82:16:75:33:04:72:3d:a9:65:2a:94:43:e6:ac:ec:34:85:3a:
93:dd:59:1f:51:7f:b6:6c:9e:e5:6a:45:2f:2b:03:0a:f4:ac:
d2:18:a1:8f:1a:dd:b2:23:87:ba:35:a1:d1:a8:da:14:f7:29:
ae:cb:55:9e:79:b9:a4:f0:2b:74:d0:f1:ba:1c:4f:25:75:df:
9d:65:1f:b5:55:f0:44:38:9d:a6:e7:3b:07:41:0e:6f:d8:2c:
22:97:f9:78:1b:4a:6e:4a:9d:04:20:cb:ef:50:45:c4:32:f3:
f1:2f:5d:aa:a4:60:5b:82:87:e5:90:4e:91:56:d0:10:9a:93:
60:e3:f7:e3:8b:5b:b8:20:7c:06:5d:e8:7a:37:c8:7a:7f:8e:
c1:dc:f8:76:f8:83:f7:f9:d4:a8:65:af:eb:44:02:bf:e9:7e:
58:30:bf:5c:85:9b:47:d4:8b:3b:24:ad:51:2a:d1:e9:1c:af:
6f:6f:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:44 2026 by rpki-client