Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: BijGoSybptuqOuM0PLUq65gV31AJH7zmjujOfKkwbBk=
Subject key identifier: C2:65:AA:24:76:97:7F:16:0D:7D:08:2D:6F:D5:FF:A5:DF:FE:D0:5F
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 019D2772B3FD3A52CC45C32C2D875FCF3D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 0A2E
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa (hash: 24ateHwuMk5CGZJvNYulALkvFpYFOYXvbKO8p0Z7NPQ=)
2: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: LnQbKcyaN6+4ZWAbWz7wj7HzVaMt7VI8oc1EUUr2i/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b3:fd:3a:52:cc:45:c3:2c:2d:87:5f:cf:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=c265aa2476977f160d7d082d6fd5ffa5dffed05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:be:0b:64:e7:c3:b1:78:43:8e:c0:e3:da:
eb:03:c4:14:ed:78:f0:fb:05:59:34:67:ff:cc:77:
09:13:12:f3:ae:59:a2:f7:dc:1d:80:86:fa:27:e1:
88:e2:88:7b:86:da:5c:6d:30:75:10:ab:a4:36:1c:
d1:bb:1e:bc:36:f7:e5:ab:2d:e9:7c:10:db:eb:ab:
bc:da:ac:71:2a:b7:cd:93:84:66:e5:2d:a2:e4:58:
fe:34:53:17:15:70:22:c1:28:90:f0:7a:b3:c6:0f:
fb:6b:79:87:40:0d:99:8c:4b:1d:e9:9a:78:7e:03:
db:d0:0d:6b:c4:3e:7f:39:05:61:f9:15:f7:14:4d:
4d:e1:90:34:3c:9e:be:18:f9:13:5f:24:f4:b1:64:
fe:d9:bc:f7:53:2c:d9:e1:67:77:72:ea:4d:fe:b9:
60:69:1c:88:d1:d8:91:a8:49:6a:ef:5c:48:df:ef:
e2:4f:a6:d8:f7:ac:b1:ab:c5:2e:4d:68:24:7e:53:
97:0f:da:75:4d:58:5c:19:ce:72:27:1f:ee:75:d7:
49:2f:3a:d7:89:5c:42:70:79:ac:c9:a6:8d:7e:89:
c5:2f:a3:5c:19:e3:ca:ec:2d:59:ba:e2:30:15:73:
4a:a6:6a:b6:c3:e5:65:4f:d6:f8:33:3d:42:b1:20:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:AA:24:76:97:7F:16:0D:7D:08:2D:6F:D5:FF:A5:DF:FE:D0:5F
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:0f:b3:e6:99:dc:7b:cd:89:fa:f5:3a:db:0d:f0:ae:0a:
1d:c6:36:26:e7:de:cf:24:36:26:73:d3:6d:77:34:0f:c5:bb:
b7:06:3a:76:91:d5:af:37:e3:8b:9a:12:4b:86:b5:ad:69:d6:
96:52:cd:5b:28:37:0b:25:82:38:c0:76:89:c7:80:85:eb:cb:
8d:dc:ae:3e:25:62:c3:02:df:d7:00:60:af:79:3a:fb:7e:fd:
b8:05:04:d2:51:64:d8:c2:01:18:8e:31:9f:12:ed:eb:12:4d:
a0:7f:a8:3f:3b:e9:d2:56:63:f9:61:73:b1:2a:b8:ab:d9:f5:
f5:d6:12:e5:41:7e:89:0d:dd:f6:78:dc:31:a4:5a:14:95:32:
9d:a8:ea:2e:be:42:e8:f2:00:16:8a:c1:9b:9c:80:ee:be:33:
7c:29:c6:63:d6:5b:3f:a4:7b:9e:bc:62:af:14:0d:c0:4f:27:
9a:c9:ca:a9:86:5f:74:37:8f:19:8a:08:83:4e:f8:67:30:25:
5a:53:fa:fd:c1:fb:0b:f4:1f:63:61:d3:de:95:a1:f5:a9:87:
31:64:2f:3d:c9:ee:25:f0:38:d1:8d:0a:eb:e5:aa:38:05:f2:
36:dc:1c:a9:52:42:39:59:c0:3f:9f:4a:64:e7:5c:35:44:71:
b7:0f:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:57 2026 by rpki-client