Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: WzbWlL2lXSD79ONDz45vJ/6GKvjW1DBFl0a5M/k2yxE=
Subject key identifier: FD:D7:2E:09:C8:4F:FF:FC:C6:74:1B:68:72:5F:AB:8A:EE:C3:FA:FD
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019E20C84549056888C07791150AA9EA813E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 09DE
Signing time: Wed 13 May 2026 10:00:56 +0000
Manifest this update: Wed 13 May 2026 10:00:56 +0000
Manifest next update: Thu 14 May 2026 10:00:56 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: hvTsVqnHX9lZvy6A0F1aKxgZZ4HOZmQEH0R908aOlrs=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:45:49:05:68:88:c0:77:91:15:0a:a9:ea:81:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: May 13 10:00:56 2026 GMT
Not After : May 14 10:00:56 2026 GMT
Subject: CN=fdd72e09c84ffffcc6741b68725fab8aeec3fafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:5b:47:46:2c:4a:b2:40:4b:c4:f6:62:6f:
d2:65:07:8f:e7:9e:10:f3:a3:14:f0:0c:98:26:ad:
51:dc:a5:e8:cc:dd:f0:05:16:12:3c:e4:ec:6e:79:
0e:02:8a:67:5c:e4:88:c6:2b:ff:90:00:90:45:08:
5a:5d:f1:fd:3f:15:8a:96:3f:5a:af:fb:cd:fa:6c:
05:8c:a5:e6:20:ea:78:69:4f:19:26:73:ae:ba:7d:
36:67:8b:79:4c:5f:6a:ef:da:0d:2b:0c:5e:54:c8:
be:8e:cb:09:90:53:4d:95:8c:ed:bf:18:ae:28:05:
f2:81:06:6f:de:5b:db:4d:ab:3c:00:52:ca:60:1a:
ea:00:0a:61:1f:06:fe:2a:8a:68:7e:d6:51:7a:b3:
b6:84:46:f3:b5:7d:8b:e9:99:a8:d2:5e:8e:2d:0a:
8f:d5:83:47:b0:78:c7:f2:3c:88:bb:10:42:ed:7e:
3c:60:38:26:94:1c:74:f8:71:9d:d7:51:f4:f7:7c:
4e:81:af:c5:46:9f:1f:f9:5f:9c:70:3e:4b:db:ce:
9e:8e:48:ed:16:a2:ee:e7:19:b5:32:17:d9:a8:fc:
7c:dd:3a:d9:6b:ed:47:1e:0d:4b:c7:dd:b8:92:00:
a7:f4:7e:6f:ca:df:de:f3:51:f6:dd:b7:ce:ed:a1:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D7:2E:09:C8:4F:FF:FC:C6:74:1B:68:72:5F:AB:8A:EE:C3:FA:FD
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:90:4c:00:4c:03:b1:c0:bb:62:bc:a3:ec:77:66:e7:3b:78:
a9:9b:21:f5:35:4a:f3:f9:5f:30:4b:ca:07:c7:31:c5:d7:e7:
fe:a3:ac:8e:4d:2b:24:4d:45:48:70:9a:28:27:c6:ad:4e:9e:
4d:3f:31:1c:29:2e:10:e2:4a:0f:bb:65:35:42:0f:1c:08:72:
82:42:a6:19:43:5c:c8:9a:03:fc:a8:a5:54:72:d4:85:0d:96:
d8:5e:6c:66:0e:38:7e:3e:1f:be:9a:81:0c:c4:6a:c5:c6:bb:
ac:53:64:43:60:9f:22:e8:e6:b4:4d:ad:7a:b8:96:ef:04:ec:
bc:30:18:5b:ee:d8:f4:5d:73:e3:6f:d2:0c:6b:f3:75:a5:e3:
5d:28:c4:6c:59:a8:29:51:d6:00:c0:bc:7c:31:55:47:93:da:
5f:cf:3c:23:ed:72:06:fa:ac:a9:08:9d:98:2f:ab:db:e6:14:
a7:4b:4d:ef:8f:87:fb:dd:ec:35:97:99:55:66:98:98:3e:78:
a5:96:28:dd:7a:b3:88:0c:5e:ac:7c:32:34:1c:ef:6c:78:dd:
06:75:f1:12:cf:00:61:49:f0:94:0c:67:3a:d0:5d:f3:c2:72:
b3:bf:06:d1:ac:c9:3d:e3:2e:46:e9:14:8e:47:a3:ed:e7:12:
05:46:7c:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyEVJBWiIwHeRFQqp6oE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjYwNTEzMTAwMDU2WhcNMjYwNTE0MTAwMDU2WjAzMTEwLwYDVQQD
EyhmZGQ3MmUwOWM4NGZmZmZjYzY3NDFiNjg3MjVmYWI4YWVlYzNmYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1ZbR0YsSrJAS8T2Ym/SZQeP554Q
86MU8AyYJq1R3KXozN3wBRYSPOTsbnkOAopnXOSIxiv/kACQRQhaXfH9PxWKlj9a
r/vN+mwFjKXmIOp4aU8ZJnOuun02Z4t5TF9q79oNKwxeVMi+jssJkFNNlYztvxiu
KAXygQZv3lvbTas8AFLKYBrqAAphHwb+KopoftZRerO2hEbztX2L6Zmo0l6OLQqP
1YNHsHjH8jyIuxBC7X48YDgmlBx0+HGd11H093xOga/FRp8f+V+ccD5L286ejkjt
FqLu5xm1MhfZqPx83TrZa+1HHg1Lx924kgCn9H5vyt/e81H23bfO7aHzdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3XLgnIT//8xnQbaHJfq4ruw/r9MB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpBMAEwD
scC7Yryj7Hdm5zt4qZsh9TVK8/lfMEvKB8cxxdfn/qOsjk0rJE1FSHCaKCfGrU6e
TT8xHCkuEOJKD7tlNUIPHAhygkKmGUNcyJoD/KilVHLUhQ2W2F5sZg44fj4fvpqB
DMRqxca7rFNkQ2CfIujmtE2teriW7wTsvDAYW+7Y9F1z42/SDGvzdaXjXSjEbFmo
KVHWAMC8fDFVR5PaX888I+1yBvqsqQidmC+r2+YUp0tN74+H+93sNZeZVWaYmD54
pZYo3XqziAxerHwyNBzvbHjdBnXxEs8AYUnwlAxnOtBd88Jys78G0azJPeMuRukU
jkej7ecSBUZ8qQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:01 2026 by rpki-client