Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: bC2kiauQaRh3TIXQ+1wNFQHpJ7yvA6t/4QZ/VfwyfuU=
Subject key identifier: 1F:A8:FD:E4:CD:C7:91:B1:79:85:BF:E7:75:20:75:49:76:51:5C:53
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019D390A4F7A0FA9F12A804EBCF8603C207D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0966
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: RjT2q2TDci2DiBMD0E4IYuKJk/4hcvEWrwL4CJM2MTY=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4f:7a:0f:a9:f1:2a:80:4e:bc:f8:60:3c:20:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=1fa8fde4cdc791b17985bfe77520754976515c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:a6:e9:af:2a:be:bb:27:fe:83:e5:79:41:
6d:8c:fa:04:2e:71:7f:b1:24:6b:21:5d:ff:96:a1:
fa:e0:45:6a:ba:ad:42:9a:f4:0a:8a:2c:0c:1c:19:
75:cc:40:9c:cd:13:58:d8:83:b9:2f:48:4b:d3:7e:
41:07:44:cb:14:8b:3f:ce:ac:f4:82:9c:78:06:37:
34:aa:93:0e:cc:ef:5a:1c:2a:87:31:4d:67:e8:73:
ce:13:47:d9:5c:20:82:af:9a:86:51:c5:34:c4:51:
cf:f2:ef:01:95:12:84:4c:5f:a2:a8:fb:1c:9b:04:
29:73:c4:56:07:5e:0b:52:bb:b7:35:da:c1:06:e5:
48:49:5d:8e:88:98:1a:32:59:dd:4e:90:1c:83:12:
1b:66:24:4f:2b:ef:01:0c:97:b8:f2:6c:ee:a7:e7:
36:63:37:9d:c8:7d:4d:fe:9b:e3:7f:c0:9d:2e:f5:
78:84:ab:ac:46:0e:db:ea:b7:c8:b2:05:22:97:b1:
66:fe:52:01:2a:43:2f:33:2f:c6:4d:b5:dc:0c:4e:
62:00:9d:15:3c:87:d6:cb:02:2b:dc:46:08:d6:0a:
b7:c7:cf:ab:46:a9:8c:1a:06:96:85:43:a8:f4:4a:
f4:e7:04:d7:82:93:e3:c0:33:55:b5:1e:7f:0f:b3:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:FD:E4:CD:C7:91:B1:79:85:BF:E7:75:20:75:49:76:51:5C:53
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:be:00:53:80:5a:d0:0d:dd:07:56:32:e2:09:53:91:65:96:
70:ab:d1:32:57:2b:75:15:ed:92:9b:a4:e7:50:ad:55:61:b0:
73:b1:fe:29:f9:aa:b5:e8:54:3b:6d:88:ba:91:2e:7b:36:0b:
62:c8:a9:5e:81:4b:bb:29:a8:b7:42:5f:70:c9:1c:8d:3c:84:
db:69:3a:52:6b:1f:81:b4:bd:22:ee:c7:53:4c:a7:d9:ea:e9:
e1:ad:15:13:0a:d5:49:69:85:3d:e2:87:2e:76:43:76:9e:09:
a7:63:c6:e7:7e:43:4d:7d:de:0c:bf:5e:0d:d1:4e:34:12:d5:
8b:2e:52:81:ab:14:76:aa:46:ab:09:8c:b9:a0:72:6d:93:e4:
41:93:89:7f:82:00:f0:05:69:1a:89:c5:94:59:54:76:ca:52:
8e:3d:d9:61:bf:40:66:a3:5d:5c:9e:a6:a9:a0:be:14:26:40:
d1:e1:ad:7d:f6:e7:8b:ac:c9:bb:b2:11:ae:d1:cb:8a:ac:76:
f9:0b:f9:fd:aa:39:8e:66:7e:fb:2e:62:8a:4e:15:04:65:c2:
23:dc:9a:1f:71:c3:a2:0e:64:d3:94:65:6b:c7:cb:24:0d:35:
73:70:b1:94:12:fa:04:68:44:77:66:98:e1:fe:98:50:7e:5b:
f6:6c:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:03 2026 by rpki-client