Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
File: KRKNnU8aVulw-HRtaCesESD5Jmc.mft (raw, json)
Hash identifier: FQyw4RorZrxEq4XXEFkVAFiG+mr7kGESXUdQ6UU1g98=
Subject key identifier: 0E:DE:61:DB:20:CC:38:28:92:AB:98:91:48:9C:83:7D:10:83:CD:16
Authority key identifier: 29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
Certificate issuer: /CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Certificate serial: 019F93C8D86CEC43B42DA35774A6EA66AFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
Manifest number: 04CD
Signing time: Fri 24 Jul 2026 11:00:41 +0000
Manifest this update: Fri 24 Jul 2026 11:00:41 +0000
Manifest next update: Sat 25 Jul 2026 11:00:41 +0000
Files and hashes: 1: 8KaJwIuZexyBoZjYRmZrjQf9lJQ.roa (hash: LrRg49gpH/+ELMxEyexBUIqT8W2t/5VIfE4dXyblhxM=)
2: KRKNnU8aVulw-HRtaCesESD5Jmc.crl (hash: YmSxThtK3G57Yj3vyARQiwnPHmN5vKNfCep/7W4tDKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:d8:6c:ec:43:b4:2d:a3:57:74:a6:ea:66:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Validity
Not Before: Jul 24 11:00:41 2026 GMT
Not After : Jul 25 11:00:41 2026 GMT
Subject: CN=0ede61db20cc382892ab9891489c837d1083cd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:ba:87:32:a4:b2:42:33:ae:9b:2c:3b:06:
3c:b9:d1:68:1d:a0:e9:39:b9:b0:ba:9c:7e:e8:bc:
8e:40:ab:c2:2c:1a:cf:33:f8:8d:b2:5f:99:c5:e0:
65:bb:0d:ef:b6:cd:94:e3:cb:7f:b0:4e:69:45:c9:
4e:9e:b9:7d:11:bd:d7:65:07:0b:1b:e6:3a:e9:ff:
f1:2e:c1:5d:c4:bf:15:c4:80:42:ae:67:be:01:52:
7d:54:3e:dd:6a:02:02:24:1b:af:f8:5b:56:a6:7a:
cc:e3:3a:a4:17:ca:46:7c:c6:42:16:42:96:14:71:
ac:f5:9c:23:db:69:ae:35:e2:76:82:2c:cf:9d:e3:
45:1a:6a:c3:73:f1:19:bc:59:f0:26:f8:0d:ad:98:
0a:4b:d1:27:ba:19:5f:e4:96:0a:5c:95:9e:94:de:
0a:ef:a8:3e:c2:d9:a8:8d:c3:d0:d3:3e:a5:34:1c:
29:44:5e:72:5b:3c:92:3d:a7:68:22:21:f7:3b:f7:
43:57:57:02:67:bb:5a:0e:1b:10:ba:9a:ef:53:0f:
fe:8d:bc:cf:7d:a9:10:bd:bb:b1:b8:e0:3a:3b:46:
e6:ba:03:9d:ff:9f:66:ed:cb:50:57:11:31:54:62:
1b:04:9a:71:48:3a:9e:47:2a:15:32:07:4d:2d:92:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:61:DB:20:CC:38:28:92:AB:98:91:48:9C:83:7D:10:83:CD:16
X509v3 Authority Key Identifier:
keyid:29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a0:70:a4:b9:10:a5:4e:55:64:99:a9:88:b6:89:b6:f7:cf:
b5:1e:fb:e5:34:89:3a:27:bf:02:0c:18:2b:9e:3f:e3:f7:aa:
17:31:09:da:a4:85:a7:35:37:c0:07:a0:e4:09:f0:f8:b8:53:
09:8a:3d:54:67:b4:11:3d:41:8b:41:a0:fa:2c:2b:cb:67:92:
50:02:c9:b9:3a:f6:d3:cb:fc:f0:e4:91:49:ee:0a:ba:b6:8b:
5a:bd:01:11:35:c8:e7:a2:c5:07:89:a9:e5:22:74:e4:6b:ad:
a7:6f:bc:bc:5d:04:69:2f:52:f4:2f:1c:f1:db:bc:a6:6e:47:
e4:45:3d:33:9a:a3:d7:2a:a3:4e:4c:c8:a9:6a:af:99:85:05:
11:08:af:69:4b:22:21:15:05:b3:ea:dd:97:2b:64:68:1c:fb:
98:91:6d:5a:90:55:ab:2e:e0:d6:e2:55:0e:26:f6:67:9e:92:
2c:a4:3b:38:65:49:da:f9:e2:6a:f7:34:3b:93:bd:06:0c:78:
a9:a5:3b:2c:ae:53:93:ba:38:d3:fe:a0:56:75:c6:8c:c4:f8:
b4:85:44:62:e7:c5:3d:98:57:7f:cc:2b:8b:9e:5e:29:3d:31:
44:4e:e7:44:fd:6c:31:83:bc:0f:4d:1f:5f:5b:40:23:a6:27:
47:80:1a:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyNhs7EO0LaNXdKbqZq+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTI4ZDlkNGYxYTU2ZTk3MGY4NzQ2ZDY4MjdhYzExMjBm
OTI2NjcwHhcNMjYwNzI0MTEwMDQxWhcNMjYwNzI1MTEwMDQxWjAzMTEwLwYDVQQD
EygwZWRlNjFkYjIwY2MzODI4OTJhYjk4OTE0ODljODM3ZDEwODNjZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoG6hzKkskIzrpssOwY8udFoHaDp
Obmwupx+6LyOQKvCLBrPM/iNsl+ZxeBluw3vts2U48t/sE5pRclOnrl9Eb3XZQcL
G+Y66f/xLsFdxL8VxIBCrme+AVJ9VD7dagICJBuv+FtWpnrM4zqkF8pGfMZCFkKW
FHGs9Zwj22muNeJ2gizPneNFGmrDc/EZvFnwJvgNrZgKS9Enuhlf5JYKXJWelN4K
76g+wtmojcPQ0z6lNBwpRF5yWzySPadoIiH3O/dDV1cCZ7taDhsQuprvUw/+jbzP
fakQvbuxuOA6O0bmugOd/59m7ctQVxExVGIbBJpxSDqeRyoVMgdNLZKOmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7eYdsgzDgokquYkUicg30Qg80WMB8GA1UdIwQY
MBaAFCkSjZ1PGlbpcPh0bWgnrBEg+SZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JLTm5VOGFWdWx3LUhSdGFDZXNFU0Q1Sm1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xMTQ3N2MtODQ1Mi00YWJiLTkxNDct
ZjBiMDljMGM5MGM3LzEvS1JLTm5VOGFWdWx3LUhSdGFDZXNFU0Q1Sm1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8xMTQ3N2MtODQ1Mi00YWJiLTkxNDctZjBiMDljMGM5MGM3
LzEvS1JLTm5VOGFWdWx3LUhSdGFDZXNFU0Q1Sm1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaBwpLkQ
pU5VZJmpiLaJtvfPtR775TSJOie/AgwYK54/4/eqFzEJ2qSFpzU3wAeg5Anw+LhT
CYo9VGe0ET1Bi0Gg+iwry2eSUALJuTr208v88OSRSe4KuraLWr0BETXI56LFB4mp
5SJ05Gutp2+8vF0EaS9S9C8c8du8pm5H5EU9M5qj1yqjTkzIqWqvmYUFEQivaUsi
IRUFs+rdlytkaBz7mJFtWpBVqy7g1uJVDib2Z56SLKQ7OGVJ2vniavc0O5O9Bgx4
qaU7LK5Tk7o40/6gVnXGjMT4tIVEYufFPZhXf8wri55eKT0xRE7nRP1sMYO8D00f
X1tAI6YnR4AadA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:18 2026 by rpki-client