Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: z6FNnRkTKNf6GLBmK00siNjeUmvbmtYTeE+aHeo3dtk=
Subject key identifier: C0:49:82:6F:20:F1:A5:56:B0:DC:4C:B3:65:FA:53:98:E0:3F:16:51
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01A0F8D7B5E63BB50B86840968414E855797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0B57
Signing time: Thu 01 Oct 2026 19:01:21 +0000
Manifest this update: Thu 01 Oct 2026 19:01:21 +0000
Manifest next update: Fri 02 Oct 2026 19:01:21 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: L/TKVUwm8v85hb5d/65ZQuxeASiKA4024EIFj2a2f10=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:d7:b5:e6:3b:b5:0b:86:84:09:68:41:4e:85:57:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Oct 1 19:01:21 2026 GMT
Not After : Oct 2 19:01:21 2026 GMT
Subject: CN=c049826f20f1a556b0dc4cb365fa5398e03f1651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:00:e4:ef:34:8e:f3:44:84:2b:db:2a:2a:
86:1b:3c:37:10:8b:e6:af:db:49:cb:cb:3a:20:0e:
47:ea:55:72:ca:19:2d:91:31:29:83:f9:d9:31:d2:
90:b8:dc:89:db:ef:8d:27:51:6d:04:b6:6f:4a:39:
07:d0:04:38:a4:da:a4:07:1b:0d:98:80:4d:91:80:
82:f5:6b:3a:28:aa:a4:0d:61:f8:18:8d:9f:41:9f:
88:15:be:a7:46:78:c7:bc:36:73:40:e4:1a:d0:e7:
63:88:cc:7b:69:23:38:50:df:24:8f:93:73:b1:81:
13:ce:32:4d:2d:3d:0d:54:de:3b:21:a8:d1:63:26:
1c:b2:a0:ee:50:2e:01:5e:ca:a6:7c:0f:68:4a:4d:
c5:d9:e8:e8:b2:a6:84:8d:17:4a:8a:50:d4:01:76:
d4:f1:b8:af:c6:10:75:57:55:8a:3c:09:3e:d1:dc:
6e:4e:2f:05:8f:1f:f3:1a:83:23:48:9e:5d:b8:3e:
6a:97:b4:81:cc:89:e4:8f:54:01:68:71:17:11:c1:
71:1b:c0:4f:d9:54:8e:99:3d:eb:63:e1:8b:b3:21:
59:30:91:39:ef:d7:0b:17:d2:26:0d:4f:f8:34:63:
d3:0c:af:95:87:5a:45:e3:29:1a:c7:45:dd:ec:71:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:49:82:6F:20:F1:A5:56:B0:DC:4C:B3:65:FA:53:98:E0:3F:16:51
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:16:e3:13:05:eb:8e:9f:44:cb:e9:5e:66:cb:ae:7d:f9:78:
d4:2a:c1:9f:00:d6:f5:3e:e2:e9:2d:3a:56:9e:f1:ce:54:ac:
e7:5b:93:0e:1d:ea:ff:6b:44:4d:25:16:c9:b2:2f:22:2d:1b:
ac:61:e3:39:bd:2e:fe:1a:82:b7:53:14:9a:f0:09:c8:c0:a5:
e1:2d:9d:1b:2f:09:94:5a:c7:be:48:60:0f:a6:9f:91:a3:03:
0a:73:51:d7:83:ea:34:e4:be:d7:a4:d0:2b:13:10:83:18:26:
15:ba:76:84:4d:c5:74:09:b7:d8:90:e1:2c:87:2f:03:ed:43:
af:4f:92:48:a2:8a:f1:f5:4e:33:81:bd:ac:5b:99:59:a5:29:
27:98:a2:fd:5a:08:18:54:53:73:f4:20:61:c4:5c:83:77:5f:
f1:5d:58:11:79:0f:7a:27:bf:4a:1a:5c:b4:c6:86:d9:97:c1:
c6:df:9e:b7:0a:12:91:1e:5b:9a:8a:44:29:f3:11:e7:9c:94:
ef:28:ed:d3:15:92:49:7b:50:60:ce:05:c2:41:9c:47:f6:b5:
6a:f1:03:50:1c:1b:00:2b:a5:d3:cf:d2:c0:68:4a:a2:ee:54:
bb:73:f3:77:df:a6:30:61:99:79:1f:15:6e:41:70:76:99:79:
1e:19:e3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD417XmO7ULhoQJaEFOhVeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjYxMDAxMTkwMTIxWhcNMjYxMDAyMTkwMTIxWjAzMTEwLwYDVQQD
EyhjMDQ5ODI2ZjIwZjFhNTU2YjBkYzRjYjM2NWZhNTM5OGUwM2YxNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi0A5O80jvNEhCvbKiqGGzw3EIvm
r9tJy8s6IA5H6lVyyhktkTEpg/nZMdKQuNyJ2++NJ1FtBLZvSjkH0AQ4pNqkBxsN
mIBNkYCC9Ws6KKqkDWH4GI2fQZ+IFb6nRnjHvDZzQOQa0OdjiMx7aSM4UN8kj5Nz
sYETzjJNLT0NVN47IajRYyYcsqDuUC4BXsqmfA9oSk3F2ejosqaEjRdKilDUAXbU
8bivxhB1V1WKPAk+0dxuTi8Fjx/zGoMjSJ5duD5ql7SBzInkj1QBaHEXEcFxG8BP
2VSOmT3rY+GLsyFZMJE579cLF9ImDU/4NGPTDK+Vh1pF4ykax0Xd7HF8ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBJgm8g8aVWsNxMs2X6U5jgPxZRMB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRbjEwXr
jp9Ey+leZsuuffl41CrBnwDW9T7i6S06Vp7xzlSs51uTDh3q/2tETSUWybIvIi0b
rGHjOb0u/hqCt1MUmvAJyMCl4S2dGy8JlFrHvkhgD6afkaMDCnNR14PqNOS+16TQ
KxMQgxgmFbp2hE3FdAm32JDhLIcvA+1Dr0+SSKKK8fVOM4G9rFuZWaUpJ5ii/VoI
GFRTc/QgYcRcg3df8V1YEXkPeie/ShpctMaG2ZfBxt+etwoSkR5bmopEKfMR55yU
7yjt0xWSSXtQYM4FwkGcR/a1avEDUBwbACul08/SwGhKou5Uu3Pzd9+mMGGZeR8V
bkFwdpl5HhnjcA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 08:34:10 2026 by rpki-client