Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: k/6jekdQuAmzHlnqo81egjamzn+c9ovUVwCzei5C8Zo=
Subject key identifier: 6D:79:6F:E2:BE:C0:93:47:98:28:A1:78:5C:47:3A:88:59:40:D7:4F
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 019F9624BA27B2C7C6B9E7A573A0D47E0BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 16D7
Signing time: Fri 24 Jul 2026 22:00:16 +0000
Manifest this update: Fri 24 Jul 2026 22:00:16 +0000
Manifest next update: Sat 25 Jul 2026 22:00:16 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: KN9DWGJJbjIBFGQDmBL441QYFNRlxW5vQa4gn6Csa7Q=)
2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:ba:27:b2:c7:c6:b9:e7:a5:73:a0:d4:7e:0b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Jul 24 22:00:16 2026 GMT
Not After : Jul 25 22:00:16 2026 GMT
Subject: CN=6d796fe2bec093479828a1785c473a885940d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:62:06:61:ec:a6:97:77:ca:38:2c:24:e7:
1c:74:44:dd:52:bb:e8:e6:9a:4a:e8:1c:e3:55:3a:
8e:a9:f1:02:1c:5b:57:88:13:84:26:9c:3b:91:7b:
71:76:7c:ab:20:23:13:87:d5:54:b3:cd:f5:60:26:
36:2c:d3:89:b8:de:d8:9d:33:ed:16:f8:04:a0:a9:
1b:68:e4:ef:c1:f3:b1:8d:80:3a:aa:74:ae:e1:ed:
3d:ca:80:2c:ac:7f:ce:17:e4:0e:4d:29:51:19:bd:
6d:52:2d:1f:ae:45:13:99:8d:07:5e:b7:59:94:8e:
e3:0d:3b:0f:33:d7:59:4e:73:9c:5e:6d:34:48:08:
70:93:e4:6d:b1:24:84:00:0a:d0:1f:d6:9d:ab:26:
ac:4e:c2:5f:84:b2:82:c7:68:d5:63:e1:25:b3:f6:
5f:78:27:d5:2d:09:79:69:71:59:2d:d3:1e:94:d1:
33:d3:aa:45:30:3b:b1:2a:cc:83:37:11:fb:3d:52:
47:47:83:bf:b1:17:94:69:bf:f7:6a:ec:44:e0:a5:
f3:ef:94:2e:6f:bc:b9:f7:ef:30:ff:53:ed:00:8c:
5e:eb:24:fe:ba:5f:f1:ca:9e:08:35:07:1d:9e:f7:
eb:aa:42:09:39:76:31:de:0e:48:86:d6:71:79:13:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:6F:E2:BE:C0:93:47:98:28:A1:78:5C:47:3A:88:59:40:D7:4F
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:aa:ae:a5:a2:82:3c:e8:74:af:2e:f1:70:7b:2e:d7:a0:
06:59:c3:4f:79:b6:ec:f3:00:c0:e1:dd:64:7d:0e:df:ea:64:
d3:2c:f5:2a:26:26:35:b9:46:3f:22:a7:55:25:2c:de:77:89:
75:54:50:77:14:56:f1:30:ef:ce:dd:b8:94:14:ab:84:0f:06:
ea:48:4b:0d:8d:c2:11:15:06:18:23:c2:77:f4:bc:f5:0c:2b:
35:61:6c:1f:58:fd:47:dc:7e:72:f7:33:26:c7:ca:d6:bb:1c:
a4:9c:9b:58:a7:67:52:bc:64:c6:cd:00:80:d5:f5:a3:68:67:
be:bd:e4:50:9d:8a:58:91:b6:b9:ab:6f:74:89:7a:d7:4e:ca:
60:6a:2a:90:39:e1:ba:f0:b6:3b:c9:ce:e3:b8:41:ea:d8:b1:
2d:13:d6:93:8b:da:99:6b:e0:a6:c5:6f:1f:09:79:c9:08:02:
ee:17:70:72:75:9d:fb:43:39:57:46:55:c9:78:0e:49:e4:4b:
34:09:c6:b4:7d:1c:b9:e2:71:90:bb:e8:bf:30:f2:73:3a:de:
6e:b3:ed:97:ee:c6:3b:12:3d:3b:32:d9:82:fe:46:a2:25:bc:
a6:bb:60:bf:5b:a6:1e:42:46:fe:dd:ea:de:02:4e:24:fa:4a:
5d:0d:cf:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJLonssfGueelc6DUfgvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj
ZjdhZDAwHhcNMjYwNzI0MjIwMDE2WhcNMjYwNzI1MjIwMDE2WjAzMTEwLwYDVQQD
Eyg2ZDc5NmZlMmJlYzA5MzQ3OTgyOGExNzg1YzQ3M2E4ODU5NDBkNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FViBmHsppd3yjgsJOccdETdUrvo
5ppK6BzjVTqOqfECHFtXiBOEJpw7kXtxdnyrICMTh9VUs831YCY2LNOJuN7YnTPt
FvgEoKkbaOTvwfOxjYA6qnSu4e09yoAsrH/OF+QOTSlRGb1tUi0frkUTmY0HXrdZ
lI7jDTsPM9dZTnOcXm00SAhwk+RtsSSEAArQH9adqyasTsJfhLKCx2jVY+Els/Zf
eCfVLQl5aXFZLdMelNEz06pFMDuxKsyDNxH7PVJHR4O/sReUab/3auxE4KXz75Qu
b7y59+8w/1PtAIxe6yT+ul/xyp4INQcdnvfrqkIJOXYx3g5IhtZxeRP3BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG15b+K+wJNHmCiheFxHOohZQNdPMB8GA1UdIwQY
MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt
ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj
LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaziqrqWi
gjzodK8u8XB7LtegBlnDT3m27PMAwOHdZH0O3+pk0yz1KiYmNblGPyKnVSUs3neJ
dVRQdxRW8TDvzt24lBSrhA8G6khLDY3CERUGGCPCd/S89QwrNWFsH1j9R9x+cvcz
JsfK1rscpJybWKdnUrxkxs0AgNX1o2hnvr3kUJ2KWJG2uatvdIl6107KYGoqkDnh
uvC2O8nO47hB6tixLRPWk4vamWvgpsVvHwl5yQgC7hdwcnWd+0M5V0ZVyXgOSeRL
NAnGtH0cueJxkLvovzDyczrebrPtl+7GOxI9OzLZgv5GoiW8prtgv1umHkJG/t3q
3gJOJPpKXQ3P+g==
-----END CERTIFICATE-----
Generated at Sat Jul 25 04:10:59 2026 by rpki-client