Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: FCbYgQgcaN0hD8X66LEPeVFXICwkUNxnRqMXUm1ymS8=
Subject key identifier: 30:85:06:D3:30:4D:0D:CF:BF:C9:94:E9:B4:B9:0E:37:AF:E3:95:BF
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 019D27E01C64A1915F7377EC0338D8423099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: yfQKmHCrAm2E2ZNr6rH62UqieYjum4wGFMZWsa7CP7w=)
2: plvMMrmZnAh_cyeI-ARrIth21Cc.roa (hash: fkJT+3dTmiuNLjsJK683zGKByk+fcJe0nRAhf6uv61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1c:64:a1:91:5f:73:77:ec:03:38:d8:42:30:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=308506d3304d0dcfbfc994e9b4b90e37afe395bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:be:68:fe:ed:38:ac:9b:e4:17:3c:a6:89:
f1:3b:58:f2:4e:44:65:03:1d:06:42:14:36:bb:01:
52:2b:7e:d7:d2:59:1d:d9:db:15:2e:d9:a6:1a:44:
99:df:be:02:92:c3:c4:0d:7f:27:f7:9d:27:44:cf:
26:ef:d3:bf:6d:0a:ab:be:fc:92:fd:df:b8:52:02:
dc:5c:f3:3a:61:0a:eb:b9:09:69:3f:e3:32:2b:a1:
6c:48:ff:46:f6:d5:a3:21:3b:8d:2d:15:6c:3a:8f:
dc:f5:f8:de:92:74:b8:36:59:32:ed:3b:5b:4f:78:
e2:77:9d:1a:1a:5f:12:07:10:d9:ae:09:18:38:32:
41:f7:54:d4:32:ab:e3:ef:98:06:7b:77:4d:48:c7:
fc:1e:9d:d6:c9:f7:11:95:af:0c:44:b0:ff:66:e3:
60:1b:19:c7:75:e0:b9:78:46:6b:31:a0:b0:50:29:
f6:30:f7:02:f6:7c:5b:77:d0:3a:78:7d:c0:5f:cf:
a9:1b:86:c6:3e:b2:49:7f:64:75:0a:fd:22:20:7a:
c5:3a:fa:58:82:49:8d:cb:68:9c:44:4f:69:f0:60:
b6:f1:3f:18:72:f1:49:13:5b:ee:78:14:c6:74:40:
a2:95:5e:23:bd:e8:3c:fa:00:a5:3c:ef:70:d6:1e:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:06:D3:30:4D:0D:CF:BF:C9:94:E9:B4:B9:0E:37:AF:E3:95:BF
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c9:3d:94:c6:b2:f9:c5:03:c1:fd:f9:ba:e8:bc:e0:23:4e:
3a:e4:b9:d3:3a:88:00:4a:c3:16:56:68:6c:aa:5a:06:3c:3d:
ef:76:13:a4:67:1a:2a:8c:f0:4b:41:c8:69:5e:7f:79:ff:eb:
8c:b1:cd:de:4f:4e:6c:1f:c6:8c:a8:d1:b3:04:8f:29:db:0e:
da:3c:50:5c:a5:11:35:05:b9:30:9b:57:dc:f4:4e:04:81:52:
19:c9:a2:d0:b3:fc:89:09:c5:aa:c0:06:b4:bb:44:87:b5:8e:
65:50:fc:65:74:36:49:21:88:56:44:27:a2:75:c1:8b:2b:b7:
6f:28:6a:e8:9f:49:6b:d3:b9:83:0e:2d:1f:c8:54:45:b0:4f:
9a:b4:50:21:1f:09:6d:a2:35:3f:f9:8e:c4:49:81:10:5a:a1:
03:b6:76:78:06:b6:d7:fd:b6:ba:52:13:80:bd:52:7f:ba:94:
6e:c9:18:81:30:9f:c3:da:9f:76:e3:a7:36:c1:45:8d:b5:14:
48:a3:5e:3d:c2:61:98:4d:ad:e4:a0:97:65:4d:b5:5a:44:25:
7b:5a:2a:9f:bb:3d:15:bf:1f:fa:b6:cb:5e:47:8d:e0:55:fe:
a7:f8:ce:63:99:34:6d:4a:6f:df:80:ce:c9:1c:ca:a4:75:c6:
b1:86:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:24:10 2026 by rpki-client