Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: 3T3VCdDD+pU2yj1waUaujjVDnguJB263fMiFxHhP8eU=
Subject key identifier: 09:47:0D:6B:60:4D:2D:CE:54:64:31:62:F3:E2:BF:BA:29:68:E4:C8
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019E1FECD1C672C9C2E5CDDBBFE707D43700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 1393
Signing time: Wed 13 May 2026 06:01:14 +0000
Manifest this update: Wed 13 May 2026 06:01:14 +0000
Manifest next update: Thu 14 May 2026 06:01:14 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: diskXaHQeROfzcl8iP6agBJISTaEFgAgBkXSmCn9vSI=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:d1:c6:72:c9:c2:e5:cd:db:bf:e7:07:d4:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: May 13 06:01:14 2026 GMT
Not After : May 14 06:01:14 2026 GMT
Subject: CN=09470d6b604d2dce54643162f3e2bfba2968e4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:d4:e6:0c:d9:c2:a2:8f:56:b9:2a:ab:80:
48:e9:af:ac:40:10:44:c9:ab:07:dc:d3:38:fc:31:
b8:59:79:81:be:1b:62:50:cd:02:1b:d3:26:e9:f5:
40:a7:d0:d5:ff:13:9e:5b:4c:30:da:6e:28:db:b0:
e9:1f:48:59:8f:6d:23:7d:0f:c0:40:13:d1:b5:ca:
d9:cd:2d:8b:9a:05:c7:71:cb:86:4c:30:0b:e6:69:
cd:af:41:96:96:9d:08:5a:92:52:1d:ac:5a:1a:b9:
a9:bb:93:98:7a:00:32:9e:30:9c:09:d0:69:bb:cd:
02:83:7a:bd:20:e7:19:a0:e5:9d:8f:bb:ae:dc:18:
7e:2d:1c:c3:9c:8f:36:02:d9:5e:a5:81:f1:ba:c6:
b4:f0:f8:54:81:29:b5:b5:c0:aa:81:15:63:93:dd:
f6:78:2e:6c:7d:1f:29:3e:0b:84:d4:7d:7a:4a:dd:
ca:b7:21:49:a3:c0:e7:ef:d6:95:19:aa:2b:91:68:
c7:3c:8b:b6:1f:61:29:11:06:8d:97:79:b6:e2:3a:
ea:6d:5b:94:bf:68:49:a9:2e:be:40:05:d0:d8:41:
17:cd:ec:40:55:1a:35:75:e9:ec:f9:98:31:79:b4:
57:fc:4a:50:38:8f:7d:4d:6b:ed:3b:b2:c8:a5:20:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:47:0D:6B:60:4D:2D:CE:54:64:31:62:F3:E2:BF:BA:29:68:E4:C8
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:04:e0:84:c6:df:ab:f7:7f:71:b8:d3:5f:b7:65:44:3f:90:
63:c0:e9:b6:fe:e1:0f:76:96:91:e6:14:e8:70:cc:da:bb:16:
65:63:ef:b3:78:8e:18:af:93:b1:48:9d:6d:56:bb:86:a2:bc:
54:9d:0e:85:c1:12:c5:f0:52:b4:2b:2b:e3:1a:d8:74:b6:6f:
0b:d2:84:3e:33:4c:0f:b0:78:aa:e4:6a:49:5e:65:5c:db:10:
e4:d9:28:8b:c4:b1:3e:23:20:e5:61:94:1f:7e:f3:03:8d:6a:
51:4f:85:1c:3c:e0:85:c6:96:e4:05:1f:b8:9a:97:29:36:83:
ff:57:67:7a:b5:41:e1:4f:19:fd:9e:84:96:52:68:39:06:5d:
e7:9c:bd:59:e9:86:1d:49:dc:8f:25:63:d1:c3:f7:a8:80:f8:
bb:01:cb:43:2f:70:71:ac:77:18:a7:ec:64:69:61:61:5f:b1:
c1:c0:b4:a2:4a:e7:7c:8d:d0:fd:ea:39:b4:e4:82:56:ca:e9:
c6:77:f2:da:aa:3a:90:27:53:03:97:9b:7f:ff:b4:6d:f8:35:
db:f3:2d:0b:34:5f:5a:13:a4:0e:e1:d2:d9:88:ac:9d:c4:ef:
94:91:2b:a3:87:8f:e2:2f:f5:a5:24:f9:1a:03:c8:b4:a8:ff:
7c:64:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:53 2026 by rpki-client