Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: wqqIIVsQAs/wMTfzzpYPP32lFxyIJLg5L3SQTC1NjL8=
Subject key identifier: E1:AA:3B:41:2D:7C:F6:A3:2F:57:9B:F8:EF:09:7B:B6:03:F0:10:42
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019E20FF9D0EB27780E4B8F779EE85A46D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 10D0
Signing time: Wed 13 May 2026 11:01:23 +0000
Manifest this update: Wed 13 May 2026 11:01:23 +0000
Manifest next update: Thu 14 May 2026 11:01:23 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: ybfZGNGRq2GNDVS+KHiWBjsGckfsUU7Tg4hk5RAPlTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:9d:0e:b2:77:80:e4:b8:f7:79:ee:85:a4:6d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: May 13 11:01:23 2026 GMT
Not After : May 14 11:01:23 2026 GMT
Subject: CN=e1aa3b412d7cf6a32f579bf8ef097bb603f01042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:d2:cc:bf:09:72:ce:66:0c:3e:ad:07:1e:
30:a2:b5:e3:3a:56:83:ab:c5:89:dd:e9:1b:93:9e:
8a:e6:e1:b0:5f:7d:77:4b:ed:48:49:fe:bc:c3:40:
a4:ff:ff:a9:49:ea:1a:08:6b:3e:14:27:fc:0a:ef:
ec:04:72:1d:28:29:74:7f:58:43:82:e4:b4:98:f9:
b7:d0:5e:1f:9f:e2:2b:90:b3:dc:cb:23:85:8a:fc:
21:45:36:99:ab:bb:1f:74:4f:14:86:9d:37:69:6d:
82:d1:04:a7:d9:38:2b:68:ae:8c:6c:61:7c:09:18:
40:b3:52:01:16:24:b9:ff:9d:04:18:9a:7d:09:85:
cd:9f:d7:74:57:73:ff:9a:dd:65:5d:dc:34:0d:28:
67:d9:3f:a6:2e:3c:01:f1:38:f0:ea:f4:69:6f:05:
c5:cd:04:a4:e7:5f:e0:16:48:cb:30:df:b2:ef:d4:
c6:7b:9d:de:62:47:a9:4c:a5:92:32:83:54:3f:70:
ae:f7:5a:78:7b:e1:79:45:d9:10:94:5c:e7:cd:41:
5b:01:8e:0a:ae:db:40:4b:58:0d:65:da:15:5b:e8:
8e:27:bb:38:99:29:b0:58:fc:31:a2:da:3d:9c:82:
78:a2:e0:dd:cd:bf:3a:44:8d:5d:73:17:b6:17:d7:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:3B:41:2D:7C:F6:A3:2F:57:9B:F8:EF:09:7B:B6:03:F0:10:42
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4f:f2:73:b9:38:02:87:c4:bc:ad:9a:b1:cf:06:28:6a:26:
e3:9a:e8:1f:e7:99:e9:56:86:b3:3d:cb:45:94:7d:e3:fd:1e:
a1:c6:42:56:9a:22:63:46:2c:d4:b6:53:29:f8:e0:43:4e:7d:
03:63:8a:98:56:a8:39:43:9b:0d:e6:96:08:c3:01:98:34:e8:
ca:97:6e:99:20:77:86:c2:c9:0b:70:c9:49:f8:2f:42:68:86:
b2:f2:31:75:01:55:13:fe:30:d8:a4:8c:db:db:71:85:3f:07:
f5:3a:20:2f:cc:be:e1:0c:db:0e:34:9b:50:3a:ff:86:45:43:
eb:6d:9f:f2:91:9d:d9:28:2c:ba:6d:39:44:b3:3e:bc:7d:ef:
2a:81:5d:35:21:b0:f0:ff:fd:83:f3:5c:c7:cc:63:9c:61:aa:
db:71:49:4e:ae:cc:bb:d8:0a:34:64:02:52:07:9b:81:e7:60:
93:93:de:66:fc:b9:aa:71:99:cc:15:42:27:84:63:7e:d2:db:
1c:7e:97:7a:4e:6e:8d:a0:1f:dd:3d:af:9f:5b:25:da:7b:5e:
a7:4d:d3:05:3c:56:43:50:71:d2:7b:09:3c:fe:61:33:6e:a9:
78:e9:f2:59:a7:c5:1b:05:98:af:5d:20:0f:44:df:9f:56:06:
35:87:ad:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:30 2026 by rpki-client