Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: r7IncyZgeyiWjQ2AgNgPX/x2gy9vtSNzY3HSDvev8VM=
Subject key identifier: FA:82:22:7D:7F:75:24:72:86:0D:D3:57:C0:9E:F7:21:30:AC:18:67
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019F91DA8AD164F503187FB01AFA906E53C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 118F
Signing time: Fri 24 Jul 2026 02:00:46 +0000
Manifest this update: Fri 24 Jul 2026 02:00:46 +0000
Manifest next update: Sat 25 Jul 2026 02:00:46 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 7uHutJa6YfHstjfLUCZmfnWG+X9NcKDR1H1oyDkeMpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:8a:d1:64:f5:03:18:7f:b0:1a:fa:90:6e:53:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Jul 24 02:00:46 2026 GMT
Not After : Jul 25 02:00:46 2026 GMT
Subject: CN=fa82227d7f752472860dd357c09ef72130ac1867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:0a:56:92:bf:91:dc:c7:ff:78:ee:e0:aa:
81:1a:86:d4:8b:9d:b8:45:fd:c6:c3:c5:0a:b5:8b:
9c:98:c2:e4:97:9a:40:27:4c:39:50:6b:cd:07:82:
a6:d8:2e:4a:98:e2:8b:13:28:84:3c:c3:dc:9a:0f:
07:7b:03:0e:00:c6:5d:23:95:6d:6c:e8:39:39:be:
3a:52:08:14:f8:97:e8:63:b2:95:79:3f:18:8d:a5:
f4:06:fa:4a:87:cf:b5:3c:3d:e1:71:47:b3:de:7c:
97:23:b6:f7:79:e7:3b:b1:85:9b:02:c9:73:c8:16:
e0:e1:6c:8d:cf:98:bb:b7:cd:77:28:e6:b8:23:cc:
55:fa:47:16:bf:93:ca:85:82:73:c4:5a:d7:b8:6f:
66:b1:aa:86:3f:a7:d1:99:0c:43:0a:c4:d9:34:ee:
09:4d:a9:08:0d:40:5e:bd:d6:d7:f5:23:45:fa:5a:
21:89:5f:3a:bd:ca:ef:8c:bd:f9:ef:23:44:05:be:
3e:5f:45:9f:b1:d6:c4:04:48:30:b6:ee:8e:fd:3f:
5e:66:38:8c:a2:36:4e:c8:0e:1d:94:d8:16:fa:c4:
02:82:20:fd:58:0c:6b:af:b1:4f:a7:c3:f8:6f:fe:
0f:f8:ea:c9:36:bf:dc:95:a2:d5:60:34:4e:4c:5d:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:82:22:7D:7F:75:24:72:86:0D:D3:57:C0:9E:F7:21:30:AC:18:67
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:3a:59:72:14:42:84:07:79:90:db:ad:6a:b1:28:19:0a:
90:cb:9e:a9:f3:88:53:0a:d4:62:c6:45:9b:c6:35:c3:95:2c:
48:f8:12:c2:ac:61:ea:b7:4e:d7:e1:e1:a0:eb:88:c2:67:e9:
90:48:f9:f3:be:2f:25:6c:d0:a5:df:55:72:bf:30:82:66:9d:
d9:5e:6a:29:9d:4a:b0:4e:35:65:10:34:f0:5f:fa:b9:cd:f0:
12:f7:8a:21:21:97:b1:49:4f:37:23:b1:17:aa:c8:a3:5c:da:
f3:ed:38:5b:3a:cc:35:60:7e:bc:27:d3:e5:1f:0b:ef:a4:4e:
4f:b0:a1:42:ff:00:6b:6b:e5:53:79:43:6d:df:eb:bc:1e:05:
4e:30:12:3c:71:65:35:81:2a:a4:ae:09:af:53:01:f1:35:0f:
79:74:83:00:4b:a2:fd:7f:67:b7:00:29:a6:d6:dc:8f:23:fe:
62:e8:92:65:08:b1:36:e2:c1:04:22:b0:53:c1:20:50:9c:49:
05:61:dd:94:a2:36:7b:16:85:09:c9:f5:2a:79:fd:59:58:5a:
dd:66:3b:ed:2f:10:57:5b:c6:f5:98:f7:52:4f:f2:96:e6:da:
7a:1d:60:b4:61:94:12:ac:43:5f:41:87:9a:23:bd:8b:80:01:
01:bd:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:20 2026 by rpki-client