Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
File: KRKNnU8aVulw-HRtaCesESD5Jmc.mft (raw, json)
Hash identifier: IbNPkdCZpBXUmz0pP5GAu4hy2P452oq/9I4OanoJL9g=
Subject key identifier: 61:79:D8:C7:BA:C1:B1:FD:70:E4:20:F6:A5:E0:2A:E0:95:E8:98:FF
Authority key identifier: 29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
Certificate issuer: /CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Certificate serial: 01A08AFA3A52AD5B405D1E35331CB7585B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
Manifest number: 054D
Signing time: Thu 10 Sep 2026 11:00:49 +0000
Manifest this update: Thu 10 Sep 2026 11:00:49 +0000
Manifest next update: Fri 11 Sep 2026 11:00:49 +0000
Files and hashes: 1: 8KaJwIuZexyBoZjYRmZrjQf9lJQ.roa (hash: LrRg49gpH/+ELMxEyexBUIqT8W2t/5VIfE4dXyblhxM=)
2: KRKNnU8aVulw-HRtaCesESD5Jmc.crl (hash: 6M/I/EnGwJy3j2Y8ztTmdaQA91Ufp6A1+y3VyF3lHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:3a:52:ad:5b:40:5d:1e:35:33:1c:b7:58:5b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Validity
Not Before: Sep 10 11:00:49 2026 GMT
Not After : Sep 11 11:00:49 2026 GMT
Subject: CN=6179d8c7bac1b1fd70e420f6a5e02ae095e898ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:b8:39:7c:a2:f6:e8:21:c8:aa:eb:9a:1c:
1f:57:88:5a:5f:1f:a2:61:4d:b1:e9:97:32:2c:c1:
bc:04:f8:0c:39:76:fe:1e:55:ba:2a:31:0e:25:84:
80:2e:f6:8f:7d:59:4f:38:ce:0d:f9:c0:bc:88:33:
9a:4b:1b:53:1c:f8:17:bd:2c:86:1f:0c:94:34:ee:
01:c7:84:ab:ba:bb:f1:9d:21:ec:4d:3b:fa:ad:2a:
ed:be:ed:e9:9a:c0:dd:8f:f2:e6:99:37:02:59:81:
cb:f4:7f:51:61:bc:1f:a7:2d:88:c0:9f:03:65:04:
6d:b9:25:ae:88:f4:fc:da:5e:4f:4f:14:d1:d2:87:
ca:59:ed:a1:06:94:4f:f6:da:b8:0b:dc:ea:5f:92:
2e:39:8c:37:41:14:84:41:2a:14:17:49:d9:46:40:
a2:1b:a2:41:db:6c:40:01:9b:f3:45:46:52:c4:c5:
cc:1e:5a:3c:fa:9f:f4:c2:8e:c1:18:7d:ee:6a:ba:
a0:33:f9:cb:0c:86:44:5f:58:a2:8b:c0:e4:b6:92:
4f:3f:a8:ef:f3:03:f9:5b:c7:a1:a9:e3:41:7e:c0:
eb:ed:a2:bc:07:b7:61:fb:e8:a8:d4:50:b5:91:d1:
ce:84:7c:68:23:5b:e2:51:76:ba:82:e1:64:b3:62:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:79:D8:C7:BA:C1:B1:FD:70:E4:20:F6:A5:E0:2A:E0:95:E8:98:FF
X509v3 Authority Key Identifier:
keyid:29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d3:93:e6:bb:b4:89:60:a3:a0:59:00:56:9d:b0:96:b6:14:
22:b9:67:40:08:83:b2:1e:44:4c:ec:0c:1c:92:7f:36:11:51:
7e:1a:21:e3:7c:3c:46:5a:4c:9b:39:f7:05:b1:06:66:75:d0:
cc:d0:dd:ba:29:0b:e6:7b:cb:62:a0:3d:b5:9c:1e:a1:db:ea:
fa:07:fb:9f:42:22:ab:c2:73:3e:32:d2:ed:0f:f9:2e:52:69:
82:c9:95:1d:24:d5:d2:70:49:d1:1a:d9:f6:0a:e2:da:f7:99:
7d:0e:a2:57:d6:7f:aa:2d:8b:86:90:03:7b:a2:18:ff:6c:bf:
91:10:0c:f5:ef:6a:54:d1:a2:aa:3d:3f:55:86:72:d2:0c:5a:
2d:a1:7c:ce:27:58:ba:31:03:91:4d:94:82:05:4f:6f:a8:98:
ae:94:1b:c1:8d:5a:25:73:fb:c5:8c:09:49:c7:fb:2c:30:ac:
09:f2:2d:d8:6a:6f:1b:66:88:30:ec:a0:75:16:13:5e:aa:fb:
a1:7e:b9:1c:5d:f8:7f:24:ab:6d:a4:d3:d6:c0:ee:99:c8:6d:
a6:0f:d2:b6:4d:a4:0b:f8:de:c5:52:21:f6:de:db:c2:3a:c9:
71:53:bc:1c:49:51:6c:27:35:47:ae:12:72:c1:ad:01:7c:2e:
7f:10:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:42:00 2026 by rpki-client