Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: Fy1sOl6I9ZIPyFRDc74r1fh1t9HxvYtZHfl7wjzSzeE=
Subject key identifier: E1:6E:D6:59:13:D4:49:AD:62:BF:C7:87:61:DD:A8:79:BE:01:32:6F
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 01A10ADE517694F371AEFA56FF13D2DF7BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 1798
Signing time: Mon 05 Oct 2026 07:01:44 +0000
Manifest this update: Mon 05 Oct 2026 07:01:44 +0000
Manifest next update: Tue 06 Oct 2026 07:01:44 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: hNm7Htq3DWsRf+E3jKsVPmdhEed3IxplZIhke5+Xs58=)
2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:de:51:76:94:f3:71:ae:fa:56:ff:13:d2:df:7b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Oct 5 07:01:44 2026 GMT
Not After : Oct 6 07:01:44 2026 GMT
Subject: CN=e16ed65913d449ad62bfc78761dda879be01326f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:b6:f8:ff:9f:a3:f4:7d:f2:85:59:63:1e:
fe:6d:1c:3c:c8:0e:fa:04:4c:43:5e:10:4d:5d:b1:
4e:15:c3:20:56:f1:1b:e1:62:bc:c9:6f:21:32:b9:
ec:6c:6a:5f:28:83:62:c2:5b:01:2a:29:48:38:52:
3c:f0:f3:64:72:0a:eb:c9:9d:7f:65:4b:73:8c:68:
00:19:d1:2b:5c:c7:a9:ca:9e:fa:d7:2b:8f:35:48:
90:1b:25:8c:f9:1c:70:30:24:03:78:48:f8:8d:e9:
76:35:79:ab:42:b7:5d:23:e3:74:04:18:24:fc:71:
dd:c2:de:45:29:20:e4:7f:cf:cb:1c:67:ca:32:1c:
35:16:51:19:5b:64:87:e7:cc:29:a4:70:57:cf:11:
13:dd:51:55:22:a2:e8:33:62:8a:7d:e6:fd:e3:73:
2e:66:0f:91:1d:72:ee:f0:67:e2:cf:ea:d0:31:6f:
60:b3:54:40:f7:78:9f:2c:b3:21:02:c1:c6:b2:8b:
82:fc:f1:aa:19:12:dc:c9:1c:c5:0d:7c:4e:bf:bf:
df:66:c5:54:24:8e:b1:9a:f4:2e:fc:12:cf:9c:52:
5b:8a:2d:02:16:11:23:6b:97:b1:7f:13:15:5d:a4:
5b:7f:a0:ed:8d:00:ca:42:0a:38:12:86:be:30:7e:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:D6:59:13:D4:49:AD:62:BF:C7:87:61:DD:A8:79:BE:01:32:6F
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b4:8b:81:9e:dc:3a:2f:db:00:fb:0d:45:ce:33:92:33:4e:
97:b5:b2:3a:ac:23:32:b2:fa:4a:2c:b3:db:89:2a:ac:80:28:
ed:4f:4b:06:77:b1:ce:30:e8:21:c3:39:a3:4b:ea:8a:a4:5c:
13:b5:64:ec:3e:aa:b3:e4:d2:16:82:59:23:31:47:f8:f1:fa:
36:da:5e:f2:46:20:df:16:ed:cd:6b:12:75:47:cf:36:18:43:
74:59:d7:bf:3b:af:0c:26:ac:8d:8b:63:55:1e:dc:6a:cb:1a:
1a:e3:73:a8:b6:a4:58:02:34:ee:38:4a:e0:9a:39:1a:11:60:
f6:c1:aa:66:b1:7f:49:e4:83:2d:7c:c1:7d:6b:d6:71:93:82:
72:01:8f:86:ae:99:dc:f1:86:fa:d6:1d:54:27:b0:7e:e7:f1:
67:ed:a1:12:48:fe:7c:69:b4:c4:ef:da:ca:62:82:c4:6e:fb:
8e:97:10:ac:6b:25:14:d4:02:48:1d:7b:bd:1a:1a:9f:ec:ca:
b9:47:a4:94:8d:d3:31:c9:49:6d:37:8e:7f:74:f0:cb:4a:7c:
c5:04:1c:42:55:84:2b:9e:43:83:32:b8:ae:05:78:b5:91:86:
7f:5d:57:70:00:8a:b5:c0:df:89:e9:1a:5a:56:8f:d2:72:60:
4f:7f:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:43:14 2026 by rpki-client