Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
File: KRKNnU8aVulw-HRtaCesESD5Jmc.mft (raw, json)
Hash identifier: rNUp+3HBBuVGZrDSTUtS8sM1HetYavEt0BtAmKjREh4=
Subject key identifier: F8:68:05:FC:DE:6E:D5:FF:D3:83:FF:1F:83:47:74:42:D8:13:5B:EB
Authority key identifier: 29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
Certificate issuer: /CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Certificate serial: 019FA14DA60DEB5ADA2263ECB2B8EB8DE555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
Manifest number: 04D4
Signing time: Mon 27 Jul 2026 02:00:48 +0000
Manifest this update: Mon 27 Jul 2026 02:00:48 +0000
Manifest next update: Tue 28 Jul 2026 02:00:48 +0000
Files and hashes: 1: 8KaJwIuZexyBoZjYRmZrjQf9lJQ.roa (hash: LrRg49gpH/+ELMxEyexBUIqT8W2t/5VIfE4dXyblhxM=)
2: KRKNnU8aVulw-HRtaCesESD5Jmc.crl (hash: zsbmS0hVvitFaN9fJBGgs7BnjFjjARJeLxkoy92rr6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:a6:0d:eb:5a:da:22:63:ec:b2:b8:eb:8d:e5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Validity
Not Before: Jul 27 02:00:48 2026 GMT
Not After : Jul 28 02:00:48 2026 GMT
Subject: CN=f86805fcde6ed5ffd383ff1f83477442d8135beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:ce:a4:ec:0e:0c:60:de:69:fb:2d:a8:3b:
22:5a:80:d7:87:cd:21:f5:47:9a:ff:89:0a:9f:ad:
84:4f:b5:45:f8:0d:96:7d:0b:bf:c9:04:e2:80:b5:
9f:4b:57:74:ea:e7:48:72:e7:fa:2d:6c:01:e3:81:
81:40:ff:25:67:78:40:81:e9:c5:94:7c:3d:0d:42:
d0:19:5c:b4:91:f4:ca:61:e3:eb:16:2d:aa:45:3a:
ce:e1:96:e0:67:60:93:e8:37:e3:66:8f:b5:08:25:
0d:cf:97:72:b1:20:34:e1:66:90:68:f4:b1:54:c8:
3a:9b:5d:39:92:08:04:2a:a8:8c:f5:fb:90:bf:18:
c0:1c:26:a7:ba:23:d7:63:48:77:e9:b7:33:ea:2c:
0f:e2:b2:a5:e9:8f:a9:1f:6a:e1:aa:14:97:71:b0:
6e:dc:db:62:9d:d0:fb:28:c0:82:da:e7:90:15:1e:
ec:ea:91:90:c2:36:23:5d:a1:94:91:bd:7e:0d:af:
2c:d1:63:3b:66:45:fa:eb:a1:31:74:c5:f9:66:a8:
21:8e:7c:73:22:a6:3f:28:73:b1:28:1a:81:0d:d8:
e2:de:bd:62:d1:4b:78:20:a1:93:70:77:ea:07:46:
a8:75:ab:fc:1a:83:79:6e:29:af:24:54:fe:f5:77:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:05:FC:DE:6E:D5:FF:D3:83:FF:1F:83:47:74:42:D8:13:5B:EB
X509v3 Authority Key Identifier:
keyid:29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f8:8b:82:1e:30:2d:fc:76:f7:dc:1b:bf:4a:a9:ed:fb:d4:
b5:7d:52:33:19:a4:e8:d7:b1:04:b8:49:95:5a:7e:64:01:0e:
21:9f:1b:14:ab:e1:52:5e:ce:d9:60:db:63:7a:a1:d7:3b:11:
3f:1a:55:9c:b2:6e:8b:a0:00:ee:bc:d2:6c:3d:a9:ce:36:c2:
e2:f7:25:b3:54:6d:11:63:a6:c8:46:1e:b7:0a:b1:7e:8e:8e:
e0:24:c5:07:ea:9c:62:57:4d:c2:c1:01:e8:fc:bd:9b:6e:15:
d3:5d:f7:19:82:05:51:27:7f:c5:18:71:12:53:28:e4:0a:86:
5f:01:da:99:09:62:62:1e:af:60:34:54:25:9b:ed:30:64:75:
54:8d:98:7d:ad:73:66:80:50:6b:0f:53:0b:e4:2e:b5:ac:85:
0c:c8:4e:a5:4a:bf:42:24:18:e6:29:30:0b:0e:31:0c:fe:c2:
e2:82:ac:02:53:14:71:6f:9d:be:c4:1e:4b:70:4e:88:1d:38:
15:21:bf:fd:1c:13:b4:fd:66:96:60:9d:29:a4:d8:ac:94:b3:
7e:2f:2b:c1:dc:2e:04:83:11:8d:9b:80:f7:a9:1b:55:36:ad:
42:d3:f9:5f:20:47:dc:d9:42:83:65:ee:9c:dd:8d:91:88:15:
bd:85:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:01:14 2026 by rpki-client