Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: Udlfu2S18Ky0cGHJeLwHQmVsvdE/7+J1d2GgwkqkdQk=
Subject key identifier: 95:AB:28:85:CC:9F:B0:28:32:3F:47:51:5C:20:DB:80:41:51:C3:CB
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019D28BBD2ABB5AFC57AE9C335D9F2416AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 17AD
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: ZONLRxFUit9pj7kp54rqX81FudpjJ6ikWIl5ODeW5lo=)
2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d2:ab:b5:af:c5:7a:e9:c3:35:d9:f2:41:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=95ab2885cc9fb028323f47515c20db804151c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:35:61:c1:36:54:92:59:74:93:98:b3:10:
38:72:b9:5e:be:e2:c1:42:a3:0c:54:f9:48:8d:7f:
05:c4:7c:86:8d:e1:57:86:d9:6c:50:1a:c8:84:21:
39:41:19:6d:48:89:0b:38:e7:f2:93:e4:e7:74:0b:
d8:34:cd:60:b9:61:50:13:cc:1e:e0:bf:51:37:7e:
d8:f7:fd:e2:38:98:d4:6d:15:5a:e6:43:9f:ab:8a:
f6:7a:8d:31:e2:b8:ef:cc:75:45:c3:bd:22:1d:14:
3b:06:93:c6:8a:43:8c:33:a4:15:ef:90:80:6f:c7:
52:82:63:5b:8e:ec:b6:db:78:d1:0a:56:cd:e8:96:
ea:fe:b8:b6:f7:5d:a4:67:c0:d0:22:e4:a2:29:ca:
f7:d4:ec:21:d6:36:9c:b8:9d:4f:c7:38:1c:5b:dd:
75:ec:8b:61:04:37:83:85:9a:d9:4e:8d:9d:fc:9d:
97:a7:0b:a4:fd:60:68:89:4c:68:91:fc:9f:dc:08:
7c:4b:0b:7b:e8:6f:2d:1b:bf:98:32:3c:d6:d8:3d:
88:a6:ea:33:35:de:ca:a9:60:0c:2a:a5:ea:32:0a:
da:e3:15:e1:46:6f:1b:05:c6:3b:7b:a0:5f:31:45:
14:9a:f3:26:71:66:54:e2:50:d0:26:99:49:e1:60:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:28:85:CC:9F:B0:28:32:3F:47:51:5C:20:DB:80:41:51:C3:CB
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ca:5c:2b:cb:bd:fa:bd:42:d4:d2:2b:02:63:2a:1b:f3:69:
9f:81:dd:d9:1a:bb:b7:0a:05:1e:65:1f:ef:61:06:57:39:18:
ca:e4:7e:11:d7:8e:d1:13:ea:f8:73:bf:54:8c:48:a9:80:d1:
a9:16:ad:8e:69:33:48:c7:0b:7b:3f:56:f5:e2:77:bf:91:b1:
6b:cb:9d:c6:76:4f:c4:37:08:b9:f6:c8:75:36:01:88:68:d0:
72:82:a5:eb:ac:2b:12:7a:39:df:7f:b0:87:0e:71:9b:9f:b8:
df:a0:ce:60:5a:0c:08:e5:9a:02:03:3a:81:b6:e0:c4:01:43:
d6:43:63:02:48:d5:8f:f1:8c:01:69:7e:1b:68:22:9c:7e:03:
73:01:4e:dc:b6:49:40:85:20:70:1d:39:a1:57:f5:8c:04:bd:
88:8a:8e:f4:46:82:82:8b:f0:ab:0b:a7:f9:53:d5:c4:17:d7:
06:34:e0:94:59:b4:5c:fc:f7:87:27:bc:58:56:1d:f5:ec:3b:
dc:c7:6a:12:3f:c4:90:4b:3e:3e:92:9e:89:42:c8:7c:65:aa:
9a:68:bb:42:e7:e1:ef:d7:e2:0f:92:04:48:a8:d6:4d:4c:fa:
9a:af:66:b2:7c:a2:b1:50:50:96:c7:b7:70:f7:50:26:d4:3b:
26:a0:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:37 2026 by rpki-client