Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier: XC/+n5SgHB3vAHh/MORba+Ah5kv9AxmNArNi4Hqur54=
Subject key identifier: D9:A3:61:95:02:83:F8:84:45:67:0F:15:6C:C9:E6:75:70:66:05:85
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 019D2628B3EA18AEAE79CBD603EECBBDEB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number: 0926
Signing time: Wed 25 Mar 2026 18:01:34 +0000
Manifest this update: Wed 25 Mar 2026 18:01:34 +0000
Manifest next update: Thu 26 Mar 2026 18:01:34 +0000
Files and hashes: 1: K7PeM5xfo05axN2Pw4MNUnPXg2E.roa (hash: 8t3HOlRbSuXE7tmZfNWVtM8ThLqUo2orryIYWRO3MhU=)
2: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: A/WgSZ7zmQjHTWFtlFSUD7CQx4ia04UBFtp8v/6KeAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:b3:ea:18:ae:ae:79:cb:d6:03:ee:cb:bd:eb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: Mar 25 18:01:34 2026 GMT
Not After : Mar 26 18:01:34 2026 GMT
Subject: CN=d9a361950283f88445670f156cc9e67570660585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:ac:dd:3f:30:89:e8:ea:87:17:fa:bb:d4:
e2:6d:39:cc:ba:6a:e9:6f:4f:55:be:93:e5:0c:da:
a6:5e:12:3c:7d:c9:04:d1:7f:e7:18:e0:5a:eb:4f:
ac:59:93:c7:26:42:a6:aa:be:22:14:05:57:e0:08:
3f:4c:98:0f:ea:38:fe:88:c6:a0:4f:31:08:02:17:
c3:18:bb:09:75:6d:c2:f9:d2:b1:18:3a:92:4e:d3:
c3:b8:1f:78:90:43:62:14:cd:c6:6b:7c:62:de:91:
8a:bd:c3:98:ac:46:a8:c1:8d:cb:4d:46:e8:83:d0:
ee:8d:06:c0:ba:54:ca:62:39:2c:e1:8c:98:7b:2d:
a6:db:ae:77:f6:cb:0b:9d:c7:3e:dc:45:7c:e1:65:
1d:dd:c7:94:c3:25:cc:fd:96:47:3b:34:6e:07:8f:
03:0f:bc:cb:eb:e3:4d:e4:62:a1:2a:57:d2:c3:09:
f1:2a:98:9b:38:cb:f3:e0:2c:3a:49:01:1e:7b:4a:
2a:1f:b2:f6:f5:2b:ff:64:53:c1:1f:8d:ad:73:e3:
6e:43:02:be:6e:7a:19:7c:f7:91:d4:c1:54:84:d4:
1b:72:10:3b:33:4e:42:71:da:11:5d:2b:f6:f6:bb:
a3:df:5a:bc:5c:64:34:fd:d0:a8:99:35:8b:72:d8:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:61:95:02:83:F8:84:45:67:0F:15:6C:C9:E6:75:70:66:05:85
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7c:d7:66:0c:1e:dc:05:b7:8f:49:6a:39:89:9a:95:21:5c:
1b:f5:6d:14:d5:86:49:b1:d6:de:c2:8e:f9:58:72:1d:8f:a3:
d6:5d:e7:35:37:90:8a:21:f9:88:80:16:52:b9:d7:6d:4b:f3:
35:0e:7c:db:f4:c3:92:82:38:0e:ea:bb:d6:95:f3:25:d5:69:
dd:64:6c:04:1f:81:a3:95:1a:11:bc:87:46:e3:86:67:1c:19:
32:00:78:b2:80:a3:29:75:a6:c9:c7:38:d7:5f:73:da:a9:68:
af:34:9c:57:04:ec:03:da:a5:89:68:be:ef:9a:e5:fc:06:cf:
cb:e5:75:f9:06:32:48:45:20:51:d4:91:f9:eb:0a:cf:a9:ce:
e2:19:b2:a9:22:24:03:98:23:fa:f5:9a:66:f0:04:3c:fe:72:
bf:bb:bb:73:1f:27:63:1f:d4:5e:f9:ba:22:80:bc:eb:66:7c:
9c:12:81:77:ce:94:e1:61:a7:c6:ae:9f:69:8b:41:e4:bf:44:
df:f5:dc:2f:87:df:33:3a:b2:98:51:c9:b6:55:fa:58:9e:ee:
00:1f:18:a1:7b:a5:d0:75:32:7f:9c:20:88:a7:e4:c5:aa:fb:
f8:ec:61:f9:86:2c:b4:e0:02:f7:b4:a4:9b:5e:bb:9e:f9:ee:
44:f4:53:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:02 2026 by rpki-client