Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: vXXdnc6BjN4cG+fb1ASsc5zJqE3VekelzX9KCmbGeE4=
Subject key identifier: B3:3A:8D:49:8A:98:93:64:D3:41:E1:A5:58:44:71:03:25:96:01:8B
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019CBF970E7BF53B4FFB1485C5BAA6D28EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0EE6
Signing time: Thu 05 Mar 2026 20:01:13 +0000
Manifest this update: Thu 05 Mar 2026 20:01:13 +0000
Manifest next update: Fri 06 Mar 2026 20:01:13 +0000
Files and hashes: 1: 6e697LuZ9jS9gA2F89nGR0cFK-I.roa (hash: ci7j6TFk0kfg5Gm37B2a5yzK2NylCLyZsggMovKNNBs=)
2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: jD8UVCxgig6AvWTrN94stXNBkldzGVosyCuFUYgMRdU=)
3: TMapBMpm5rX0-gIoWzb76bSTSuI.roa (hash: R4mwMpiCVjsTtSxaIqIQla1zIyz7FbLUvXLev4eE1XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:97:0e:7b:f5:3b:4f:fb:14:85:c5:ba:a6:d2:8e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Mar 5 20:01:13 2026 GMT
Not After : Mar 6 20:01:13 2026 GMT
Subject: CN=b33a8d498a989364d341e1a5584471032596018b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:6e:89:82:f3:d1:4c:3e:7a:44:2e:4d:4c:
ff:a2:e0:6f:8b:31:ff:11:cf:e9:45:4a:b9:79:94:
3d:d0:61:bb:83:dd:ed:26:31:02:09:70:07:93:c9:
d8:ad:d4:a9:2c:7f:dd:b3:dd:5a:d2:4c:f0:e8:f4:
ef:88:e7:a7:55:cf:ed:fd:0f:ef:dc:5c:b5:06:dc:
8c:16:95:65:22:6f:1b:c3:f9:e8:f7:ec:99:51:bf:
75:69:ed:41:40:68:06:39:92:2e:19:0b:d9:ab:5a:
1c:ab:8a:ac:b5:1a:f4:51:da:f0:b0:08:a6:f0:ca:
17:35:1b:6a:4b:37:15:f0:0e:f5:78:a7:a6:ea:32:
fd:7e:75:56:5c:0a:12:eb:5f:90:0d:96:d4:15:7e:
79:b4:8f:c1:b1:b8:3d:d0:02:5a:c3:c5:bd:c2:d1:
53:90:87:ea:88:43:d9:33:e7:4a:82:19:5a:19:26:
4c:f7:39:d5:3e:f0:d9:4d:42:18:4d:73:dd:45:2f:
ff:95:72:2c:06:65:60:20:68:23:f9:30:c8:5e:d7:
af:1a:80:5d:94:3b:4b:84:00:29:c2:c8:cb:aa:17:
8a:12:3a:b4:17:54:47:0f:1e:1c:80:65:55:c0:9c:
e6:b5:77:dc:be:e5:36:1f:92:c3:b7:8e:9c:45:40:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3A:8D:49:8A:98:93:64:D3:41:E1:A5:58:44:71:03:25:96:01:8B
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:34:b5:41:18:8c:69:87:c4:64:fc:1e:44:b4:54:7e:dc:35:
d2:b3:83:f9:9c:1a:fe:c8:fd:b6:8b:d9:50:91:95:30:ea:75:
13:a8:89:14:c3:0b:c8:ab:96:ae:b1:c4:52:4a:22:1e:fe:c9:
f9:21:1b:43:33:fe:b6:b3:d4:e3:6f:d3:b9:b8:e8:58:5a:c9:
83:81:05:7f:04:b2:8d:30:47:19:a7:95:ab:ba:28:86:62:4e:
5f:45:cb:61:b5:b2:a8:22:eb:32:44:74:90:c6:0f:63:90:69:
9c:d1:4e:cd:37:4b:53:00:b0:cf:5d:d3:ea:c1:7a:c7:d5:0d:
ee:b4:a2:09:44:48:33:6f:63:de:75:31:ad:56:c5:f8:ef:2b:
14:3d:37:b4:70:b4:b9:0d:3f:49:a8:17:3e:4f:ec:4d:d9:f0:
e7:1c:f8:fa:43:02:04:c1:1d:df:7a:6c:d7:f0:b0:9b:82:79:
69:58:ed:d9:a2:57:4d:df:42:28:ff:6f:a0:b2:e9:de:c5:7a:
81:ff:dd:1c:a2:4b:21:07:6e:03:0a:98:95:9b:48:72:93:d2:
24:31:22:2f:13:7d:df:41:77:9d:99:f1:05:fc:d6:16:cb:1d:
90:d4:b5:cb:51:78:d0:e7:e1:79:2b:44:08:2d:0d:fa:b7:83:
8a:da:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:46:31 2026 by rpki-client