Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: Pv35JSImqWeT0TLJn7q5CvgIZ4npqLyctLqf2Q8eABw=
Subject key identifier: D6:37:79:88:08:49:57:CD:EB:DB:87:82:39:93:D9:66:E9:C4:86:A6
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019D27DFB06CCCF2F8744BD41D1C0B6857C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 104F
Signing time: Thu 26 Mar 2026 02:01:04 +0000
Manifest this update: Thu 26 Mar 2026 02:01:04 +0000
Manifest next update: Fri 27 Mar 2026 02:01:04 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: jfItG5eT7L837VzPr47EhDkIy9VW4tFNErPpi/Q5bhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b0:6c:cc:f2:f8:74:4b:d4:1d:1c:0b:68:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Mar 26 02:01:04 2026 GMT
Not After : Mar 27 02:01:04 2026 GMT
Subject: CN=d6377988084957cdebdb87823993d966e9c486a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dd:31:35:6f:21:b0:ed:7d:34:67:69:b6:85:
14:5c:16:ce:9f:07:ca:6a:90:66:b9:de:05:5b:e1:
52:49:c4:57:d0:16:21:fa:f9:92:49:5f:fb:29:46:
4b:9c:2a:fc:26:c6:7e:e6:fd:f6:d4:7d:3f:80:40:
0a:d9:37:b8:ac:39:08:e6:0c:ae:8f:78:85:26:8d:
24:32:2d:f3:b2:c9:66:54:13:f1:0c:4d:dd:3a:92:
86:9d:6c:02:8b:52:45:f7:f7:84:20:b4:58:36:96:
e9:25:86:4b:b1:40:ae:2e:47:fe:59:e2:b7:53:46:
11:c0:c6:3b:1e:88:9e:a1:9c:03:c5:8d:1e:b8:ae:
fd:a8:4e:42:dd:0f:0e:99:b3:9f:30:55:c1:0c:de:
e1:81:15:45:16:90:9b:5c:97:db:f0:bc:5a:aa:71:
87:89:35:fe:20:3b:ff:d1:27:f7:d9:b2:2f:cb:48:
4e:20:fd:85:c3:88:68:71:20:78:b0:df:c2:3d:36:
da:92:18:f5:3e:a4:9b:8d:8e:1b:ed:b6:8f:d7:73:
31:73:65:f9:8b:ef:6b:92:b5:70:87:7d:90:b5:fc:
fd:58:55:4d:82:41:fb:4a:75:77:f2:50:02:11:d0:
9a:0c:70:4e:68:e2:b7:db:3d:d8:05:3f:38:a7:2d:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:79:88:08:49:57:CD:EB:DB:87:82:39:93:D9:66:E9:C4:86:A6
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:30:b1:8b:cb:65:15:4b:ee:ff:07:d2:f4:f0:72:65:8e:4d:
11:2d:f5:24:26:30:56:f1:f7:11:31:10:e6:93:24:10:f2:92:
12:05:7b:9f:f6:6e:76:a7:92:39:08:3b:5b:9c:25:97:de:3a:
77:f0:9a:c9:8f:25:5d:0d:af:b5:2c:ef:a9:12:21:40:25:5d:
21:b2:59:f8:5d:b8:98:d3:0c:c5:8d:47:59:e6:a7:d0:99:a4:
69:06:04:89:c0:cf:46:a3:08:32:e1:bf:4c:62:11:fe:19:33:
d4:0d:1e:22:9c:30:47:bd:3a:6d:16:14:0a:d1:ac:f2:3d:9a:
71:b2:23:35:51:59:90:29:46:68:87:25:65:24:ec:8f:92:da:
da:46:ee:96:07:a8:b4:ab:e5:0b:1a:96:5b:94:8c:27:c7:5a:
2f:40:df:d5:dd:57:bb:61:44:f0:32:2d:5d:39:8b:cb:91:2c:
96:aa:36:b1:d0:0f:e0:48:77:dd:d2:75:54:59:db:4e:b6:65:
34:4f:00:e4:87:b3:ed:41:cb:04:a2:1e:97:84:97:d9:3b:9d:
a5:58:d5:10:21:2a:79:67:54:20:7f:96:a6:b5:57:97:5f:72:
1a:fb:82:76:be:11:59:b9:e1:f8:b4:87:d7:d3:39:f2:8e:a5:
2a:43:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:39 2026 by rpki-client