Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: s/i/vp0PED1L9xjRCPt4DJqwGz4XxiZpQY6QP2n7Z9c=
Subject key identifier: 1E:B4:E2:95:2A:EC:04:65:36:81:AE:6B:01:E1:4E:DC:0C:01:A4:37
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019F939252E2AB14144A6AB0E6ED19622B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0A9E
Signing time: Fri 24 Jul 2026 10:01:07 +0000
Manifest this update: Fri 24 Jul 2026 10:01:07 +0000
Manifest next update: Sat 25 Jul 2026 10:01:07 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: OFyn2IXNkHdDPVncehKxTwNR1UzC1TeA34bfiqomwe4=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:52:e2:ab:14:14:4a:6a:b0:e6:ed:19:62:2b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Jul 24 10:01:07 2026 GMT
Not After : Jul 25 10:01:07 2026 GMT
Subject: CN=1eb4e2952aec04653681ae6b01e14edc0c01a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:b9:e2:58:63:23:50:da:f3:e6:91:b4:0c:
25:17:e5:c7:fd:7f:17:2a:29:e3:b8:cf:51:26:a4:
88:b8:20:19:30:42:c7:0a:cc:3d:fa:cb:d0:90:ec:
c5:c1:55:3a:f9:66:63:10:de:a2:70:70:c7:e9:9a:
17:03:0c:56:6d:de:e7:0d:53:7e:b3:b5:f8:8d:08:
36:5b:e0:dd:d6:de:b5:b3:05:4d:14:85:bd:b7:fb:
7d:64:9f:bb:de:01:c9:0c:62:76:e0:77:72:33:b1:
f1:d9:4b:46:32:90:a8:35:98:2b:3b:71:5b:fc:f8:
a4:29:c0:95:ad:ce:9f:75:40:1d:ed:50:5a:af:6e:
cd:d0:6f:04:6a:2a:c7:b1:d9:37:f1:c6:af:5b:ea:
30:3a:09:43:33:7c:e7:da:c0:93:3b:9e:0f:56:1d:
49:93:c5:46:02:e8:d4:b9:7c:bb:d0:2a:f4:a3:ee:
94:c0:aa:b8:ee:59:0d:a2:73:44:6f:5c:b9:b6:d0:
e4:6f:3c:d9:55:30:e5:01:0c:cf:81:2d:50:39:1c:
50:2b:a5:12:59:8e:81:5c:be:b5:4b:ec:7c:ea:d8:
18:4b:d3:41:97:f1:79:a8:9c:1d:ac:ef:71:99:3a:
ba:95:3d:2d:9e:df:93:f2:42:63:63:ef:0e:fa:a1:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:E2:95:2A:EC:04:65:36:81:AE:6B:01:E1:4E:DC:0C:01:A4:37
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7d:28:ae:1d:26:f2:fa:f4:ba:f5:f7:47:85:4d:f5:f4:fb:
03:b4:13:6c:af:04:6f:fa:46:9d:27:9b:11:c1:a1:54:69:db:
e9:da:be:77:70:42:37:8d:d9:64:f8:53:2c:67:f0:01:b1:d6:
36:87:b2:2f:53:59:b3:9b:1f:56:42:75:3b:e7:ff:f7:bc:ef:
aa:d6:93:77:84:49:e1:7a:ad:7c:e4:a5:3b:b8:20:40:c0:a8:
2c:04:10:ba:4a:a7:a5:de:c9:e0:cd:29:86:c6:9d:53:9b:e2:
d9:4d:ea:09:44:d4:d1:95:2b:73:b9:52:5a:1a:9a:ed:e5:f3:
75:56:cb:42:d9:cf:07:47:aa:30:87:ba:8d:27:00:ae:eb:39:
10:8a:2f:f3:10:1b:8a:69:d3:cf:0e:04:58:16:77:f5:06:0a:
da:f3:38:72:c0:53:1b:d2:e7:d7:73:30:12:7f:98:f9:d0:2d:
f4:f9:46:6e:45:a9:77:f7:c6:eb:ef:44:ce:2e:63:c7:e0:64:
d3:bf:79:54:db:ea:6d:a6:5d:d7:e2:d5:89:eb:63:22:db:ae:
fe:50:6e:6c:34:df:da:35:c5:1c:ea:7c:f6:ba:62:fa:ef:56:
87:df:0c:9d:9a:a1:91:34:b2:d1:3e:14:18:c2:72:e6:15:4d:
61:83:4c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:02 2026 by rpki-client