Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: ZG4YymuNkRcbVp+9d4chjSgf1q12Vf/tsESiANmOuoo=
Subject key identifier: CD:A2:18:44:7B:6E:D9:1A:CA:C0:4D:C2:79:F8:49:64:3C:74:E7:C1
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 019D284D93703B98AE6C78BAA6331B2120AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 1595
Signing time: Thu 26 Mar 2026 04:01:05 +0000
Manifest this update: Thu 26 Mar 2026 04:01:05 +0000
Manifest next update: Fri 27 Mar 2026 04:01:05 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: QO1Unj1nqGbnbxfRY4joFehcYFVm0Q0mkrankxM6dIM=)
2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:93:70:3b:98:ae:6c:78:ba:a6:33:1b:21:20:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Mar 26 04:01:05 2026 GMT
Not After : Mar 27 04:01:05 2026 GMT
Subject: CN=cda218447b6ed91acac04dc279f849643c74e7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:f6:2c:2e:9c:cf:35:ff:ce:d4:68:b4:3a:
49:ab:ec:42:48:a0:be:e3:05:2d:74:a4:26:6a:7c:
97:3f:4d:3f:ab:88:60:9f:65:ef:ab:d3:5e:f1:84:
eb:7b:31:75:ee:85:89:a3:d5:92:25:1d:ca:bd:9f:
08:38:0b:f1:76:7a:10:8a:50:7b:fa:86:b8:30:26:
cd:42:14:ed:5c:77:f0:f2:47:73:e0:f9:f9:76:df:
39:05:66:79:f7:e7:61:7c:e3:82:23:8c:4f:e8:8f:
f0:53:f4:f5:a0:f0:94:d6:55:30:54:13:3d:78:11:
a7:06:65:0a:15:7d:b7:ff:0e:9f:ff:1d:85:dd:4b:
9d:54:f3:16:ba:f7:7d:75:f4:fa:2c:c5:73:ff:c7:
37:ee:7c:04:de:3d:7c:f9:9b:2e:61:94:8f:ab:20:
9f:6c:0a:8a:0c:04:c1:f8:82:ed:67:75:b9:cb:36:
25:55:9a:c8:a4:42:ec:8c:50:b7:f6:f7:03:3f:b7:
56:38:94:71:ac:26:e5:02:02:8a:44:db:5b:49:70:
d6:d0:0a:a8:82:61:14:c1:1d:dc:6d:27:f8:16:20:
f0:be:4d:e7:11:f5:cc:bc:18:78:22:24:57:58:ee:
37:bb:13:12:60:36:c0:4f:d9:08:27:29:a9:43:38:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:18:44:7B:6E:D9:1A:CA:C0:4D:C2:79:F8:49:64:3C:74:E7:C1
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f0:56:3f:2b:65:3e:dc:36:63:ee:8d:b0:10:f9:07:2b:eb:
21:ad:8a:9e:62:1e:21:b3:62:5c:ee:f4:fe:a6:23:bb:30:5b:
a0:ef:7d:85:09:91:1d:bb:83:52:28:b1:e4:e0:75:0f:7b:a3:
e5:6f:bb:e2:62:59:37:e7:46:d7:2e:ff:b2:20:65:3e:eb:6d:
f8:63:f2:96:a9:17:94:d4:49:ae:c6:26:93:5e:1f:e4:59:3e:
85:cb:c1:bf:cd:a7:be:d5:16:58:cf:9c:c0:28:b3:4a:09:c1:
90:77:b5:d0:06:e7:f4:04:27:e1:fe:56:5a:5b:72:00:29:b9:
87:52:00:05:27:c3:0f:de:81:b5:0c:4d:e7:c1:fa:5f:57:f5:
00:bd:f7:9e:cc:bf:6e:0e:9a:e7:e4:d3:49:af:39:ff:6e:1b:
83:14:1f:57:85:a2:c1:ca:b0:8d:8b:47:49:9f:fa:ec:eb:c3:
73:bc:a1:81:9e:6b:7c:c7:b8:00:a6:c8:08:af:4a:df:78:c6:
3a:57:db:b0:12:bb:d3:d0:0c:c6:44:89:e5:ab:71:f3:f4:b3:
e2:b5:85:4f:63:7f:29:a4:49:26:5b:98:a3:82:3b:bb:54:3b:
48:96:8d:ed:e3:6e:61:c9:a2:ec:13:d7:95:84:42:d3:c9:0b:
5c:6e:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:12 2026 by rpki-client