Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: xg1FzjLaX+v4LZWOx8l7QBeDJbvpRbvDcoM+6v2rlNY=
Subject key identifier: 24:24:D4:13:17:38:3B:5E:81:66:E4:FB:C2:38:10:21:E9:BD:18:2B
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 01A1070179128510FF67DCCC87001632E63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 1796
Signing time: Sun 04 Oct 2026 13:01:39 +0000
Manifest this update: Sun 04 Oct 2026 13:01:39 +0000
Manifest next update: Mon 05 Oct 2026 13:01:39 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: G3sPCvN0w9N+TPHOayCksz3jW/G2sTVA2qPJatXh7fw=)
2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:79:12:85:10:ff:67:dc:cc:87:00:16:32:e6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Oct 4 13:01:39 2026 GMT
Not After : Oct 5 13:01:39 2026 GMT
Subject: CN=2424d41317383b5e8166e4fbc2381021e9bd182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:6c:f8:98:5a:39:2f:3a:99:5f:1b:0e:3c:
a9:4d:7f:bd:ea:5f:19:ca:75:06:70:cb:3f:e5:6e:
09:2f:0c:f2:58:d8:a4:38:67:d8:e2:d2:07:e3:54:
34:ca:4a:0d:70:f0:02:8c:22:77:e5:48:39:3a:1b:
c3:08:50:b0:3b:ef:43:e5:14:cd:09:6d:be:e6:8f:
af:9b:a4:57:a1:4a:07:f2:fe:f5:e2:bd:f2:82:23:
e3:37:f8:81:58:30:dc:00:7e:5f:90:b8:b7:94:81:
b5:bf:d2:aa:47:94:37:d9:6e:c4:a0:57:e0:5b:04:
ed:db:5d:2a:f7:55:80:13:e1:5b:89:aa:f5:34:ff:
1a:53:27:ce:23:b4:6a:59:8d:a6:97:82:ad:00:33:
aa:28:23:19:7e:81:79:67:86:04:78:2d:9a:a3:18:
b9:22:02:09:18:0b:e6:e2:43:c5:64:88:b7:0c:7e:
32:b4:8f:90:75:6d:4a:a5:bb:9e:a6:df:a5:51:20:
29:96:f8:b3:47:cb:68:41:17:8f:8c:80:e4:c8:3f:
8f:a0:cc:b1:1e:b6:6d:55:5e:5e:eb:e3:b8:01:af:
db:27:f9:c0:0d:d5:3b:cb:94:12:3f:8e:f8:fc:03:
f1:2c:72:9a:f4:69:57:94:24:54:eb:f4:ea:7a:99:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:D4:13:17:38:3B:5E:81:66:E4:FB:C2:38:10:21:E9:BD:18:2B
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bf:0a:c2:05:71:c2:09:50:4c:98:1e:4e:57:67:66:43:4b:
14:d6:76:35:af:c6:b6:6f:8d:4a:c8:42:b1:1f:82:e0:c5:61:
02:f4:9b:19:a6:27:02:f1:4d:99:f4:54:b4:65:c1:7e:cf:64:
9a:d5:2d:03:a4:b1:a6:b6:d4:c0:70:fa:86:12:93:f9:6a:d6:
95:31:11:4d:21:f2:75:b5:b5:fe:92:91:4a:ad:82:0c:bb:99:
d7:3d:cb:43:9e:d7:5e:8e:5d:df:71:aa:02:6a:a3:0d:f1:1c:
30:2c:09:1a:c6:cc:b1:20:a4:e3:76:9d:06:9b:0f:31:87:02:
50:70:fc:9a:81:03:6d:a0:50:ba:a4:5e:35:c9:38:81:41:25:
a2:29:9c:7f:ec:1b:31:4c:ed:aa:36:89:7c:77:95:e8:bb:7d:
66:72:b2:92:de:c0:2a:ff:44:65:9e:80:16:14:32:58:62:03:
07:c3:75:41:ea:86:2c:ce:83:aa:b6:54:ba:bf:a2:3a:44:55:
10:4c:1b:e2:5b:58:ac:aa:c5:4c:f8:07:9d:f8:3e:05:99:8b:
2d:4c:bb:2e:ee:42:2a:92:72:39:f3:de:92:6c:29:a0:64:f2:
48:ba:28:b3:04:bf:4d:7c:bb:fd:f5:31:29:40:cb:5d:82:9a:
88:d3:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:18:14 2026 by rpki-client