Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: +Mq2LWgIXETIq4exlaD6hcjL5wj8IQyq4Ix4Tezbp2c=
Subject key identifier: F1:0B:66:93:A8:65:92:A7:04:8E:A0:C5:DA:4D:39:DB:AC:62:C7:22
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019DA943E100400DCE83A26C16D34C7756AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0F5F
Signing time: Mon 20 Apr 2026 05:01:31 +0000
Manifest this update: Mon 20 Apr 2026 05:01:31 +0000
Manifest next update: Tue 21 Apr 2026 05:01:31 +0000
Files and hashes: 1: 6e697LuZ9jS9gA2F89nGR0cFK-I.roa (hash: ci7j6TFk0kfg5Gm37B2a5yzK2NylCLyZsggMovKNNBs=)
2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: tKBYfXToUtQnHwv61r0gIgPAbydkDaFpdZpeosPpZes=)
3: TMapBMpm5rX0-gIoWzb76bSTSuI.roa (hash: R4mwMpiCVjsTtSxaIqIQla1zIyz7FbLUvXLev4eE1XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:43:e1:00:40:0d:ce:83:a2:6c:16:d3:4c:77:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Apr 20 05:01:31 2026 GMT
Not After : Apr 21 05:01:31 2026 GMT
Subject: CN=f10b6693a86592a7048ea0c5da4d39dbac62c722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:ba:e6:9e:bd:7e:b1:e7:83:c1:93:cf:12:
09:69:77:7d:54:ab:a1:a8:7b:f6:97:ee:2e:7e:9a:
e2:54:2b:fd:55:b8:0f:84:f9:99:30:9c:ab:45:67:
9e:a7:8e:83:1d:19:6e:3c:ec:63:4b:24:bd:79:81:
ef:58:0d:d7:41:db:ca:fb:86:32:46:7f:1e:9b:5a:
ed:b9:ba:fc:b2:58:42:c3:7b:66:74:dd:45:c6:67:
15:48:dd:54:a4:a0:be:88:cd:3e:b3:fe:53:27:9b:
9a:6e:44:46:d3:3e:2e:b8:c2:c0:3c:61:42:45:2b:
69:70:94:fe:74:be:e5:a8:2b:25:df:2a:93:41:1c:
39:70:99:fc:4d:46:6c:cb:2a:53:b9:2f:b0:1d:be:
1b:e2:1e:1d:a6:55:fc:e1:45:4a:f2:29:6a:1f:00:
45:de:e4:3b:c3:de:5f:37:00:cb:bd:44:12:a5:95:
63:5b:40:0e:16:3a:2b:62:c0:cd:4f:3c:75:70:e3:
59:7d:ca:a0:9e:5e:8f:2b:86:6a:8a:2a:85:19:a6:
e3:4b:f2:07:c3:9a:2e:d8:84:73:29:00:b2:00:26:
01:b0:9c:4a:94:87:d3:e0:df:57:fa:34:9d:e9:d5:
0c:93:e7:46:56:ef:f1:ea:2a:61:46:59:35:98:66:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:66:93:A8:65:92:A7:04:8E:A0:C5:DA:4D:39:DB:AC:62:C7:22
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:05:35:65:03:38:94:96:4d:72:e8:1c:34:77:6c:06:f3:66:
98:03:73:ce:90:26:45:21:f1:f9:a2:7c:cb:59:be:db:24:e8:
8a:92:2c:0a:e5:d0:4e:ff:d0:7c:f4:ee:95:b2:13:a6:ba:89:
e1:5f:86:25:77:d2:70:92:cf:21:c8:78:77:5b:4a:df:47:bc:
9a:78:4d:b3:c2:88:85:35:65:d6:00:93:dc:6b:a9:af:79:09:
ea:82:d6:e0:1c:b1:b3:b5:c7:32:2f:a6:7f:68:b1:cb:63:1a:
d2:df:e5:4f:91:ba:89:ea:aa:ee:78:ea:6f:af:8a:95:2f:d4:
c7:af:2f:b3:b7:54:6e:af:25:d6:55:3b:02:63:67:c4:a8:0c:
da:64:3f:14:e7:d1:e2:8f:92:a5:69:7d:4e:e2:2f:8a:cd:34:
08:4e:f1:db:44:db:93:94:5c:9d:2f:a4:24:af:89:ea:ab:d8:
cc:b1:da:99:fc:10:9e:80:5a:e4:47:b2:5d:fa:ae:9a:c8:d7:
dd:ba:46:09:a0:17:cf:98:d6:21:f2:74:32:5d:32:7d:47:11:
7b:3e:6c:c9:da:e7:d5:64:94:a4:9c:9c:11:c8:ac:23:aa:11:
03:fa:38:7f:05:9a:6c:84:56:92:b8:70:3a:1d:b5:5e:53:a8:
60:ca:77:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2pQ+EAQA3Og6JsFtNMd1aqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy
ZGFkYjcwHhcNMjYwNDIwMDUwMTMxWhcNMjYwNDIxMDUwMTMxWjAzMTEwLwYDVQQD
EyhmMTBiNjY5M2E4NjU5MmE3MDQ4ZWEwYzVkYTRkMzlkYmFjNjJjNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ca65p69frHng8GTzxIJaXd9VKuh
qHv2l+4ufpriVCv9VbgPhPmZMJyrRWeep46DHRluPOxjSyS9eYHvWA3XQdvK+4Yy
Rn8em1rtubr8slhCw3tmdN1FxmcVSN1UpKC+iM0+s/5TJ5uabkRG0z4uuMLAPGFC
RStpcJT+dL7lqCsl3yqTQRw5cJn8TUZsyypTuS+wHb4b4h4dplX84UVK8ilqHwBF
3uQ7w95fNwDLvUQSpZVjW0AOFjorYsDNTzx1cONZfcqgnl6PK4ZqiiqFGabjS/IH
w5ou2IRzKQCyACYBsJxKlIfT4N9X+jSd6dUMk+dGVu/x6iphRlk1mGY9gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPELZpOoZZKnBI6gxdpNOdusYsciMB8GA1UdIwQY
MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt
NjVmYjEwYTA2ZTg5LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5
LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3gU1ZQM4
lJZNcugcNHdsBvNmmANzzpAmRSHx+aJ8y1m+2yToipIsCuXQTv/QfPTulbITprqJ
4V+GJXfScJLPIch4d1tK30e8mnhNs8KIhTVl1gCT3Gupr3kJ6oLW4Byxs7XHMi+m
f2ixy2Ma0t/lT5G6ieqq7njqb6+KlS/Ux68vs7dUbq8l1lU7AmNnxKgM2mQ/FOfR
4o+SpWl9TuIvis00CE7x20Tbk5RcnS+kJK+J6qvYzLHamfwQnoBa5EeyXfqumsjX
3bpGCaAXz5jWIfJ0Ml0yfUcRez5sydrn1WSUpJycEcisI6oRA/o4fwWabIRWkrhw
Oh21XlOoYMp3jQ==
-----END CERTIFICATE-----
Generated at Mon Apr 20 09:53:02 2026 by rpki-client