Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
File: KRKNnU8aVulw-HRtaCesESD5Jmc.mft (raw, json)
Hash identifier: eXpXmXo/KBzoxvm6haDSQNChRCj99OVHRN04QhRsuAI=
Subject key identifier: 20:5A:56:48:E0:4A:57:23:43:A9:B2:01:1C:65:0C:48:2D:9B:5F:9C
Authority key identifier: 29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
Certificate issuer: /CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Certificate serial: 01A187F7126331A7BDE554C4976288C3D3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
Manifest number: 05D0
Signing time: Thu 29 Oct 2026 14:01:18 +0000
Manifest this update: Thu 29 Oct 2026 14:01:18 +0000
Manifest next update: Fri 30 Oct 2026 14:01:18 +0000
Files and hashes: 1: 8KaJwIuZexyBoZjYRmZrjQf9lJQ.roa (hash: LrRg49gpH/+ELMxEyexBUIqT8W2t/5VIfE4dXyblhxM=)
2: KRKNnU8aVulw-HRtaCesESD5Jmc.crl (hash: 9ZWySLuZOqjZF9ICce7uc14t3JDK9O462Wd34Cl+lEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f7:12:63:31:a7:bd:e5:54:c4:97:62:88:c3:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Validity
Not Before: Oct 29 14:01:18 2026 GMT
Not After : Oct 30 14:01:18 2026 GMT
Subject: CN=205a5648e04a572343a9b2011c650c482d9b5f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:59:38:db:da:02:86:e9:53:e9:c7:36:32:
05:2b:90:94:e4:66:fb:99:b0:c9:73:dd:0e:d7:b3:
d8:3e:3b:d0:d6:2b:9b:24:04:be:51:02:64:17:3c:
09:8f:7f:d6:bd:2b:e1:66:8f:2a:27:24:0e:44:da:
4b:39:fc:ea:b0:29:2a:85:ec:33:d5:70:bd:24:4e:
cd:ba:97:cd:ed:15:70:fd:c3:64:86:06:ac:ea:68:
3d:5f:83:cf:c1:c5:95:3f:00:a1:72:42:20:7f:de:
e5:6b:fc:54:f5:18:25:bd:9c:79:7f:b3:3c:4f:71:
16:69:25:2a:c5:0d:c8:1b:7c:33:1a:39:3e:9f:cf:
c8:5b:2b:30:92:c8:29:1d:03:50:48:1d:27:73:65:
e3:6a:c5:ad:b7:cb:ef:51:b1:a1:d6:97:b3:32:b0:
06:3d:78:c9:ff:c2:27:e2:67:1b:90:a1:78:6e:9b:
d1:e8:d7:51:a9:6f:4b:c5:b4:92:7a:1d:76:c7:47:
fb:91:9e:f8:98:d2:eb:38:a0:37:89:88:5c:28:ab:
72:e6:c7:ed:6c:97:b3:54:43:93:2f:09:af:74:46:
31:fd:15:0e:8d:f4:0b:76:e2:9e:f1:41:4c:d5:c2:
10:d0:86:ac:4f:da:13:71:ca:a2:9d:7a:63:36:82:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:56:48:E0:4A:57:23:43:A9:B2:01:1C:65:0C:48:2D:9B:5F:9C
X509v3 Authority Key Identifier:
keyid:29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:98:71:47:b3:d5:c3:22:b2:74:28:e5:c6:0f:fb:ca:cd:ab:
28:15:26:78:b4:b1:4c:c4:c3:8d:41:b3:b9:33:0b:12:97:19:
d5:a0:b3:4d:35:9e:aa:ef:a4:12:f5:c5:a1:91:5b:ef:ec:1d:
af:6c:29:6f:4c:ca:0b:79:89:79:73:e1:2d:a6:6a:e7:33:e9:
62:dc:c6:f9:00:d8:2b:27:4d:fe:8e:75:7a:01:06:53:52:ba:
33:1e:a7:07:c9:e5:a8:85:4a:bf:cd:32:5b:45:b0:e3:6c:b8:
e4:9b:7c:a0:21:d0:fd:1e:b0:dd:ae:13:e2:7d:4c:3d:29:46:
c8:ce:3f:2c:2e:36:e2:02:02:62:ad:8d:b1:b4:54:4f:34:ac:
47:cb:29:38:7f:8a:f9:f3:d2:7f:a5:cd:b3:be:8e:57:c2:3e:
50:a7:ea:5a:1a:c2:bf:fa:6f:ff:58:03:08:56:b2:c1:87:9d:
0c:4a:ad:f4:59:28:d6:ad:32:40:b2:3d:f8:2b:7a:e3:72:79:
77:58:5e:a1:92:4c:ab:d8:75:8c:c4:03:25:17:42:0f:37:87:
52:ab:6a:b0:b3:67:a9:b8:f3:98:f6:70:66:b7:c3:2b:3d:1d:
81:48:3e:d4:d0:e0:15:bf:eb:92:e5:88:bf:18:3d:f6:4c:f2:
04:81:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:46 2026 by rpki-client