Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: RMMVhhEtO2lyQ6hz1LKYO/4LMpGPdlGpKRVpvH9dLdM=
Subject key identifier: 31:E7:4B:09:37:B1:26:D1:80:FA:0C:5D:A8:D7:88:36:4B:1F:7F:40
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01A17C29104F2F92404339D030C13594D7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0B9B
Signing time: Tue 27 Oct 2026 07:00:28 +0000
Manifest this update: Tue 27 Oct 2026 07:00:28 +0000
Manifest next update: Wed 28 Oct 2026 07:00:28 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: hi5G2ZW0xmcQqjySjGCBfA0tvYOCauRdZpv/XjtmOFs=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:10:4f:2f:92:40:43:39:d0:30:c1:35:94:d7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Oct 27 07:00:28 2026 GMT
Not After : Oct 28 07:00:28 2026 GMT
Subject: CN=31e74b0937b126d180fa0c5da8d788364b1f7f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:9c:fb:6d:9f:5d:a7:43:a5:9e:d0:aa:8f:
bf:11:a8:7f:aa:b1:18:c9:2d:9c:1b:96:75:63:51:
9f:a3:46:41:cf:8b:60:c9:16:8c:cd:7e:b7:cd:01:
a2:13:a3:96:7f:a9:57:91:c0:f5:54:ac:16:14:0e:
30:39:93:4d:67:8c:fb:fa:d4:8b:ca:1a:01:ae:7a:
19:d0:7a:89:b6:60:cd:fe:f9:cf:6f:c8:ba:ee:3f:
1b:f4:09:27:80:14:ca:d5:75:41:ba:ea:ae:37:2b:
09:a5:17:ec:36:f5:66:4d:11:e6:34:3d:e5:07:49:
e1:f6:f7:36:2b:b9:66:28:22:25:a6:be:b0:a1:9f:
5b:2b:7d:ba:8d:1f:b7:97:47:44:8f:6b:53:c1:7e:
3e:39:5e:da:9a:17:c0:c6:0a:62:5e:6c:9c:53:a2:
5a:ee:27:b4:f8:4a:71:66:49:70:8d:4e:0e:51:84:
fb:b0:ad:fe:a9:63:f9:1b:c8:87:05:15:f3:00:ca:
48:68:19:71:4a:29:c9:b4:bf:58:38:18:47:d3:49:
06:7e:dd:70:ac:b7:07:fc:f4:17:d9:1f:f0:ca:51:
1a:4c:10:2b:08:ac:b8:12:49:11:42:0c:91:60:bd:
20:5e:52:34:3f:01:2a:e9:f4:ca:7f:a1:89:61:2d:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:4B:09:37:B1:26:D1:80:FA:0C:5D:A8:D7:88:36:4B:1F:7F:40
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:d9:98:b8:a8:33:81:33:0a:e8:96:7b:1f:16:91:f0:3a:
7a:77:30:44:ab:30:f5:93:b8:3a:74:e2:88:d4:f7:57:cf:05:
5b:23:9b:31:90:ea:9f:b9:df:00:84:da:f0:22:9c:8f:3d:78:
3b:6d:07:d9:f6:3b:de:34:fa:f9:12:c3:c0:e1:e2:b1:02:30:
7d:91:7d:92:51:dd:f8:eb:d3:5e:9e:89:ea:3f:8a:50:f3:7b:
d6:34:0b:5d:45:0d:17:90:fe:32:ba:8b:52:9c:9e:23:f5:34:
8d:8c:00:44:53:01:f1:1e:c1:67:cb:4b:65:da:b5:e1:77:10:
9b:0b:ec:da:7a:f6:4b:88:16:36:66:c2:7c:52:28:1f:43:8c:
0b:cc:f6:a8:97:d4:2b:2d:c7:73:ae:9a:16:ea:d6:3c:e6:3c:
d9:91:22:f3:f2:86:52:7d:77:94:ce:dc:bd:2b:6a:0b:95:44:
6a:e0:f6:7a:3c:81:fd:38:42:4f:39:64:7f:79:ca:a1:90:cc:
23:aa:1c:5e:5c:f6:55:ab:13:f9:7b:70:3c:42:fe:f0:74:20:
4c:64:51:0f:3c:9f:d6:d5:cd:e8:25:46:16:67:39:99:f9:cb:
84:83:1a:12:83:bf:18:b9:ad:22:82:85:56:55:f1:74:66:84:
c9:c5:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:18:30 2026 by rpki-client