Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: nwAa14mblak0dMzovvaoVJvxgXOUx1zAZ2bFi6gQHF4=
Subject key identifier: 89:A1:E5:A2:67:40:BA:E2:3F:18:DF:7E:F9:DD:54:EA:BF:A8:29:74
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 01A0010210B7D8F53323239A790664B30007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 16:01:47 +0000
Manifest this update: Fri 14 Aug 2026 16:01:47 +0000
Manifest next update: Sat 15 Aug 2026 16:01:47 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: vKFCAlLo20gw7TNfzFnJpPhLtpYqVvXepvcCtRBi090=)
2: q2viQQxnb5hv9cHSi6k5fpuWvhk.roa (hash: moDWR3w9AS8vgQ6/NXNmyaldf5yTsoXdPMVWWQQURXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:10:b7:d8:f5:33:23:23:9a:79:06:64:b3:00:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Aug 14 16:01:47 2026 GMT
Not After : Aug 15 16:01:47 2026 GMT
Subject: CN=89a1e5a26740bae23f18df7ef9dd54eabfa82974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7f:9b:38:f8:d7:48:c2:55:8c:56:fa:cf:b5:
83:9d:63:46:39:8c:7f:fe:a8:37:b0:b7:f0:fd:cb:
06:8a:1e:4e:8b:72:68:5d:ce:4c:fb:a4:02:20:8c:
58:4e:59:82:ba:a5:d7:3c:e4:db:b3:2d:f7:0e:03:
ed:b9:cd:fc:10:18:9f:54:81:7e:4e:fd:7f:32:e6:
21:1a:86:01:b5:23:eb:1a:a5:18:c8:f1:ec:cc:10:
37:22:7e:8c:42:86:85:65:bf:1a:d9:d9:8d:b8:24:
1e:d3:d4:12:8d:ed:20:9c:92:5e:2d:82:a1:80:44:
65:f1:1b:16:fa:42:3c:88:2e:35:2b:54:d6:fe:1a:
a5:6c:2e:8c:57:78:56:b7:18:ed:cd:76:1b:c6:27:
13:a0:2b:04:ac:4a:d3:09:8b:ea:17:8d:09:5b:00:
94:00:b5:d9:89:58:e1:73:1c:3c:9e:e4:9b:18:3d:
9a:c8:fc:cd:ce:67:56:83:cc:aa:35:ad:dc:a6:57:
c5:71:57:8c:6c:f3:96:55:60:f8:a8:bc:92:f1:39:
cf:2f:17:47:29:d4:cf:2e:73:1b:19:ac:22:95:92:
be:45:f6:ce:82:92:70:df:8e:d4:a1:06:07:17:d0:
d7:0c:31:14:b5:71:62:cf:8e:a2:7b:78:10:24:85:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A1:E5:A2:67:40:BA:E2:3F:18:DF:7E:F9:DD:54:EA:BF:A8:29:74
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8f:00:eb:a3:c2:80:cc:f9:a8:a5:fd:54:52:1a:8a:0e:a0:
a5:f3:47:f2:a3:d8:fe:17:02:73:7a:7e:6e:48:eb:5d:bc:c8:
14:58:d9:e6:83:28:7f:76:91:f0:0d:ff:e3:4b:8e:32:ac:c6:
3a:ba:98:8f:05:28:60:e3:ac:e0:72:c5:b3:ba:1d:f2:be:56:
b5:ef:05:85:74:e0:e0:25:72:92:8e:db:8f:90:c8:c1:c4:48:
d4:54:4c:9a:21:31:93:5f:ab:ec:4f:37:c1:13:87:cb:cb:cb:
46:05:1e:01:1a:e0:fa:ce:08:dd:90:6d:c6:e4:1e:cb:9c:52:
24:7e:52:76:f3:61:7e:4f:72:1a:bc:05:d8:f4:d4:11:d7:d0:
35:27:8f:c0:9c:c5:44:cb:ea:e6:4c:f8:ae:10:0d:1e:b0:77:
06:34:98:1f:31:c7:58:61:58:1d:e5:98:01:5a:a7:c6:ce:36:
22:e0:ea:69:e7:ed:75:f6:fc:5e:38:b3:da:ac:3b:86:f3:2a:
b3:6b:a2:1a:e5:fa:45:55:0d:2d:a8:13:01:49:9f:a5:0d:df:
04:5e:3d:73:42:f2:6c:81:db:15:51:0b:ca:5b:52:77:65:bc:
d8:e2:62:6f:2a:d6:75:b9:f1:81:0f:f7:0f:e3:24:44:8b:f8:
c3:4e:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:12 2026 by rpki-client