Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: oaf5H+/eu5HrwXo6Ofvv/ia7wUeNbwmxv1xmyMIMoOE=
Subject key identifier: 8D:2C:D2:B4:70:B5:69:18:30:B1:50:E4:D2:87:45:8A:78:0F:82:C1
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 019D25F1F84C9040E0762D59A6F713E3D621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 17:01:47 +0000
Manifest this update: Wed 25 Mar 2026 17:01:47 +0000
Manifest next update: Thu 26 Mar 2026 17:01:47 +0000
Files and hashes: 1: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: CSFhtITpagfcfPmdfANhXnhmAWoeYrxhv41HX+ukkkY=)
2: fhF1gg6tTaPV39pNHXzapn66B-4.roa (hash: 2B1HxgzGj1c2eVd/8cGSVbgWEoR1+FiouVzHrmQHR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f8:4c:90:40:e0:76:2d:59:a6:f7:13:e3:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Mar 25 17:01:47 2026 GMT
Not After : Mar 26 17:01:47 2026 GMT
Subject: CN=8d2cd2b470b5691830b150e4d287458a780f82c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:c3:8e:07:57:38:29:d0:79:55:1c:86:ae:
f4:fe:6c:3a:cb:26:9f:bd:2c:08:ac:a9:b9:9d:66:
d9:ae:6b:9a:1c:6a:3a:88:61:02:97:bb:9b:b7:1f:
05:51:3a:95:cd:e4:0c:ad:8a:d8:d8:db:84:08:cf:
14:ca:33:6f:8f:0b:7d:d2:e9:2f:5a:95:7c:3f:9c:
24:77:3e:59:5f:1a:31:1f:ce:21:7b:25:05:ed:0f:
8e:95:cb:51:f9:56:ab:9a:5c:75:e0:50:5a:91:37:
d3:3e:db:56:84:b4:41:4c:a7:6b:ff:a9:63:bd:9e:
ed:6a:7b:cb:c0:bb:ce:09:bf:1a:75:e0:57:91:eb:
2b:84:a0:d5:1d:a5:15:a1:be:20:71:a6:94:8d:f3:
dd:11:25:48:69:ca:01:86:9a:1b:bb:c0:17:19:cb:
27:c0:de:dd:60:26:b6:96:04:ae:39:eb:9b:ed:0f:
51:ca:4e:e2:7b:65:56:01:ac:c7:fe:9c:26:6d:4e:
fc:cf:ed:7e:51:dd:92:dc:a2:5a:c2:fd:9e:5b:b0:
19:e0:c1:ba:58:14:1d:01:ec:90:c2:91:57:63:5b:
90:45:41:3b:9d:42:d4:3d:d1:d4:ac:76:70:48:87:
41:04:cb:1a:d8:b2:79:96:e5:43:cc:ec:06:ab:6e:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:D2:B4:70:B5:69:18:30:B1:50:E4:D2:87:45:8A:78:0F:82:C1
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:32:67:da:ef:25:e1:ea:1f:b1:04:f7:ee:2d:72:12:b9:92:
be:99:50:4a:1a:93:17:c8:86:c7:1b:7c:c2:73:ca:6e:5a:8b:
cf:68:76:08:6d:73:8d:65:02:ce:3b:20:15:0b:9c:2f:24:ee:
26:2d:82:86:ad:0d:df:76:b0:ba:38:03:5f:67:52:0e:3f:b1:
75:2d:c7:17:49:98:46:e7:89:a9:5d:03:54:38:0a:1f:f9:cf:
d2:9a:58:96:05:76:7b:3b:23:b6:e5:28:80:17:49:65:c5:e2:
d7:e9:88:e9:15:8c:2b:b8:36:31:9e:25:92:c9:fd:16:6b:d5:
45:4f:ef:fa:d6:b1:a3:b7:34:35:5d:ac:83:38:7e:c2:04:20:
f7:03:2c:56:21:93:eb:3d:c8:44:2f:f5:04:f5:34:5b:bd:f0:
66:94:35:4d:4a:86:37:2a:f5:bb:e4:e2:a7:15:af:ec:8f:7d:
31:7d:84:92:dc:ad:01:c9:8b:e8:28:ab:a3:4b:0c:81:13:78:
48:67:72:53:eb:5c:f2:cb:4b:ef:4e:5d:26:44:db:92:a3:fb:
4b:d4:67:42:aa:ae:a7:75:29:8a:38:2f:4e:56:13:04:1b:c9:
13:d9:a4:25:4f:5b:23:52:86:38:43:d5:4f:1d:31:2b:9f:53:
e8:3b:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:48 2026 by rpki-client