Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: huLxlM6c2eLcheRj9ykZMspkJqwtmJzSTpGD5PcX4Hc=
Subject key identifier: 54:CE:84:E0:2F:54:20:8A:2E:1C:94:0E:6B:4D:97:51:FE:3D:CA:9D
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 01A0FCEB32AF15FCD2FEF1B945F80A385BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 124B
Signing time: Fri 02 Oct 2026 14:01:07 +0000
Manifest this update: Fri 02 Oct 2026 14:01:07 +0000
Manifest next update: Sat 03 Oct 2026 14:01:07 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 1ZcDyPkh+l2eJFn8v+PQpxRraqeBkSQF8xjrXZRBL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:eb:32:af:15:fc:d2:fe:f1:b9:45:f8:0a:38:5b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Oct 2 14:01:07 2026 GMT
Not After : Oct 3 14:01:07 2026 GMT
Subject: CN=54ce84e02f54208a2e1c940e6b4d9751fe3dca9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:4b:53:6f:81:10:d7:68:cb:15:6a:2c:7f:
9e:92:33:b0:79:a2:43:95:36:81:26:cd:1a:70:11:
25:99:c9:8b:1a:15:cc:70:2a:87:f0:58:20:4a:84:
7b:3c:78:d7:42:b5:88:a1:5d:58:68:01:3e:b2:02:
bb:e2:e7:ae:00:22:bf:e3:67:7f:97:e8:5e:d2:ea:
a1:66:68:0e:5d:53:d6:2e:63:31:15:6f:bc:0b:31:
f8:db:da:bf:c4:a5:5a:ea:aa:7f:46:a3:2d:e3:19:
28:48:fc:b0:cb:e8:a9:0a:d8:a7:b1:7f:ab:b6:9f:
55:73:a4:92:0a:3b:fa:2f:6e:0f:49:44:c7:9f:81:
1e:c0:3c:4a:79:fb:b3:28:c1:ad:43:02:35:b9:af:
df:43:72:ed:e8:3d:11:65:bf:1d:9a:e6:c9:6a:d7:
7a:dd:b3:38:4c:5a:56:b2:3a:83:c5:34:8b:4d:05:
10:c6:40:91:25:13:ce:e5:4a:66:34:ae:f6:d4:15:
ad:6b:0f:b1:0f:a2:e4:af:af:40:6f:87:53:0c:58:
d0:ef:4d:7c:7a:ff:cf:87:42:df:66:db:b4:94:11:
35:80:fa:82:03:7f:54:46:0a:da:5f:f5:45:09:fb:
08:64:61:29:eb:5d:e0:f1:f0:91:96:b8:a9:e0:e8:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CE:84:E0:2F:54:20:8A:2E:1C:94:0E:6B:4D:97:51:FE:3D:CA:9D
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fc:92:3b:93:e7:b2:fb:c9:dd:55:b9:42:f6:8a:1a:50:f6:
95:21:19:b6:6f:a7:51:8d:32:88:9b:f6:95:ff:ae:95:29:60:
32:2f:f8:c0:cf:07:04:48:84:2e:8e:9e:29:d0:f7:18:b5:9d:
3f:52:81:1d:bd:32:ad:f4:56:91:9c:7b:ba:d9:3a:4b:75:e5:
bf:53:81:40:f5:46:d4:01:e2:f9:7f:19:cc:6d:c0:99:3b:68:
05:3f:07:7c:be:14:d4:f0:c8:c4:85:e8:76:f9:fe:db:cf:53:
45:28:ae:1c:ba:52:72:2d:e0:22:e7:5e:b7:da:a2:af:a5:0a:
dc:a0:9a:82:c6:1e:0a:41:f3:77:90:d7:93:36:5e:47:d6:1e:
e7:49:a7:a7:da:04:29:31:8f:3a:e7:f8:8d:d3:bf:ef:52:0b:
f8:da:e8:e4:71:fb:4b:0d:6c:55:69:05:7a:7a:65:4b:cc:d4:
06:0c:59:67:24:a9:6b:35:c6:fd:44:85:2b:34:0a:3e:e0:eb:
80:62:21:36:22:d2:92:9a:fc:b0:58:de:c0:d3:46:b2:57:1f:
4c:63:eb:f3:5b:05:5d:83:cf:ea:72:46:53:5f:f3:1d:f3:5f:
69:ba:23:00:eb:8b:e9:67:1f:0d:61:f1:2d:26:9d:48:02:ac:
a9:d4:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:09:44 2026 by rpki-client