Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: quzBHxe2BG9+2169PHOB6zDY5iATSMMxgisFP+UDElg=
Subject key identifier: F4:18:34:C6:9B:3B:9E:D1:94:67:2C:4C:4C:04:45:DB:5B:E1:6D:6B
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 019E1EA3AAA116A75D50C00BEA38E3987499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 0AAE
Signing time: Wed 13 May 2026 00:01:42 +0000
Manifest this update: Wed 13 May 2026 00:01:42 +0000
Manifest next update: Thu 14 May 2026 00:01:42 +0000
Files and hashes: 1: PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa (hash: 24ateHwuMk5CGZJvNYulALkvFpYFOYXvbKO8p0Z7NPQ=)
2: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: 3Oa9HrOBevp2xhTLjFkUD9MrrSWuSePV13vhpcmMSig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:aa:a1:16:a7:5d:50:c0:0b:ea:38:e3:98:74:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: May 13 00:01:42 2026 GMT
Not After : May 14 00:01:42 2026 GMT
Subject: CN=f41834c69b3b9ed194672c4c4c0445db5be16d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:ff:27:99:c2:59:09:28:29:86:a4:2a:fc:
55:b2:c8:c7:1f:5d:7b:93:79:f0:87:23:fc:2d:f4:
91:4a:ef:24:5e:c4:94:67:9f:87:cc:2f:21:86:92:
c0:cb:31:f7:07:62:52:4a:e7:2e:5c:b5:67:fd:8e:
6f:7f:3d:5a:84:0d:36:1a:1c:a9:2c:86:13:86:24:
00:ab:e2:28:5b:a7:87:15:a7:d9:9c:5a:92:98:84:
79:97:fb:01:2d:86:09:e8:75:65:97:8f:d1:a1:fd:
41:52:81:53:2e:21:ac:6f:57:08:91:1b:7b:7f:7e:
d0:ee:7b:04:d6:f3:66:ca:0d:9b:c5:49:1e:c2:04:
73:44:c6:77:45:3a:a5:6c:27:b3:25:a0:af:e3:f8:
41:4f:db:5d:e0:32:86:0a:cb:2d:f6:ae:ff:bf:f3:
e7:20:51:5a:88:19:fd:a5:56:83:09:d9:e9:c4:8e:
70:73:a9:3e:c1:16:8f:60:f2:c6:df:8a:c9:21:e1:
c3:0a:37:3a:e2:3b:4e:5f:d5:56:ce:30:a5:19:40:
23:1e:54:2e:48:e3:6e:f9:4d:bc:c3:cb:dd:e3:b2:
0d:48:2a:c9:4b:b3:06:58:eb:df:21:04:b1:cb:55:
7f:d9:3d:ce:90:43:b0:32:f8:7e:ff:ff:77:a6:cc:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:34:C6:9B:3B:9E:D1:94:67:2C:4C:4C:04:45:DB:5B:E1:6D:6B
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:ce:fe:91:03:ff:99:1e:62:87:f6:e8:77:2c:22:1d:b3:
48:c0:94:c0:c0:82:92:d4:3d:7e:54:81:c9:90:27:9b:eb:5f:
f1:f9:29:e1:eb:f9:49:e5:57:f4:48:48:84:f0:5d:d2:eb:ab:
aa:1c:17:31:0d:ce:97:cc:80:b9:c1:f5:ef:fc:fb:16:49:d7:
75:fe:4c:21:51:a6:d3:ba:4c:93:63:ff:78:59:5d:e9:38:be:
83:0f:db:23:5c:f0:c2:5c:e5:ad:49:a3:1c:90:e8:42:6d:9a:
ed:03:20:3e:9e:e5:28:d4:15:e1:de:d3:df:bc:1b:5b:37:6e:
d7:b0:ac:4d:f8:f5:db:38:52:55:ee:90:57:4e:45:33:37:7b:
bb:e3:c8:f6:33:18:17:da:83:bd:71:e9:13:f0:48:36:47:18:
a3:f1:7b:fd:c2:6c:27:88:75:aa:23:73:ce:77:5e:aa:1a:f2:
2e:12:b1:0c:b1:b2:33:09:97:14:eb:e9:1d:40:1b:1e:02:02:
e7:c8:2c:49:24:6e:7e:a5:ae:71:de:8b:73:d6:b4:b1:7f:de:
e2:f5:65:60:ed:7b:fd:a9:25:bb:e0:09:45:10:44:29:f1:d0:
69:0e:8d:c7:eb:86:75:47:a2:3f:ec:f9:a3:9a:ae:5f:a2:84:
a1:e0:8a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:54:14 2026 by rpki-client