Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: gStJLICiGoqkTsPgbUNFefoVYrz9JB1e1kXmcCDD22o=
Subject key identifier: CB:BF:AA:CD:EB:08:9D:20:3B:96:DB:70:8B:8A:1D:C9:C0:F9:17:1F
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 019E216DA188FA11CCEA30C3D8635D371A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 1616
Signing time: Wed 13 May 2026 13:01:33 +0000
Manifest this update: Wed 13 May 2026 13:01:33 +0000
Manifest next update: Thu 14 May 2026 13:01:33 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: 1n0+ULoCo38cf+fVgXcpT5xjJiudkn7emQEmTVNAUcE=)
2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:a1:88:fa:11:cc:ea:30:c3:d8:63:5d:37:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: May 13 13:01:33 2026 GMT
Not After : May 14 13:01:33 2026 GMT
Subject: CN=cbbfaacdeb089d203b96db708b8a1dc9c0f9171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:bf:27:97:49:8b:86:3e:6e:e5:51:ea:f1:
bb:b8:f0:c1:f3:1f:f7:e4:59:9b:13:a5:96:02:b7:
74:5b:b0:22:00:41:33:ad:78:f7:34:dc:85:7e:d1:
3a:b1:f8:e3:7f:96:33:19:d2:1c:e4:63:ba:8d:ca:
88:9c:9b:fe:4c:af:ab:24:78:fd:37:dc:54:4b:c8:
cf:ed:62:45:e7:2d:8e:79:a9:6b:d0:ba:19:55:36:
03:6b:aa:d1:a9:95:b2:5a:85:d8:8f:4b:7b:ac:36:
79:b0:36:12:b5:33:2c:0a:ab:5c:9d:13:19:e1:e7:
d6:30:f1:e4:91:23:f9:db:32:10:3a:8d:8c:44:0f:
f3:42:f8:b9:16:c3:88:1d:37:f2:d8:d5:84:3c:9f:
31:84:2c:a2:cb:f2:9f:f1:39:84:ea:eb:87:db:1f:
15:70:c2:d3:95:1b:a0:df:57:dd:51:20:0f:20:b2:
dd:66:c2:25:05:32:ed:38:57:8c:1c:3e:e3:15:07:
13:ba:f8:ae:2f:73:d0:8d:15:93:aa:99:83:ad:b7:
27:8e:32:4d:5e:de:32:7a:2a:93:da:e3:b5:83:f9:
99:2a:e9:5c:1d:5a:88:12:af:d4:c2:ca:d1:ff:3b:
64:33:ff:ec:97:b8:cc:a1:79:8a:11:88:3c:06:db:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BF:AA:CD:EB:08:9D:20:3B:96:DB:70:8B:8A:1D:C9:C0:F9:17:1F
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:76:cf:7e:75:18:b6:85:af:b5:c6:eb:28:3c:4e:d0:af:7d:
88:68:d0:1c:7a:b4:b7:af:f1:f6:1b:6a:5c:ff:da:c5:26:48:
b1:0b:37:6a:4a:57:48:d4:50:91:b5:b1:4e:ec:c4:66:90:c4:
34:85:64:d0:61:c4:d3:73:b3:d3:0d:55:f6:f0:84:80:5b:05:
37:dc:fa:e3:79:24:e8:03:31:87:4f:04:21:e8:2e:be:ce:af:
7a:e1:28:4a:4b:8c:d6:ac:92:17:8b:38:6c:09:e1:5a:93:c6:
fa:b3:f2:c5:e9:fd:a8:86:e1:9b:c5:80:67:7b:a8:e2:68:75:
85:84:98:5d:23:d9:7c:d1:65:2b:fd:93:b6:d3:fd:6e:df:07:
a7:68:4e:b0:e8:9f:20:ad:16:50:49:2d:1e:bd:39:a6:a6:d1:
6e:94:de:62:92:26:89:e1:3d:fb:b8:61:01:af:19:74:89:58:
af:e6:3f:a4:e1:d2:13:39:f2:cc:24:7b:ca:bf:48:1e:27:cc:
01:0f:fb:6e:c7:24:8e:92:90:b0:8c:56:95:e6:36:82:4b:7a:
b1:32:82:a0:2a:31:26:54:de:9b:62:d8:6a:94:b9:65:82:05:
93:62:06:52:cc:b0:b4:e2:d0:c1:a2:25:f9:79:dc:06:df:0f:
26:d0:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:04 2026 by rpki-client