Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: XBc/zKIDKXthBdhEopkJlSC3FRyXuk88xM2RaZCu1ss=
Subject key identifier: 0D:D9:AF:22:81:97:C3:D6:2E:5E:D6:11:4D:66:30:83:A6:02:E9:DC
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019D27A94DA9AFC5E9018533B69D3FD39EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 095D
Signing time: Thu 26 Mar 2026 01:01:40 +0000
Manifest this update: Thu 26 Mar 2026 01:01:40 +0000
Manifest next update: Fri 27 Mar 2026 01:01:40 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: L5ya5DeDuZ6LAKbCd45nnOYci+Yq/wAL3fvUZfPV/Y8=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:4d:a9:af:c5:e9:01:85:33:b6:9d:3f:d3:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Mar 26 01:01:40 2026 GMT
Not After : Mar 27 01:01:40 2026 GMT
Subject: CN=0dd9af228197c3d62e5ed6114d663083a602e9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:6e:ec:b6:50:00:6a:05:bd:4a:0e:41:7c:
34:15:cb:81:a1:53:69:57:89:74:5e:da:7f:b1:f4:
c4:c8:a1:b2:9c:6f:a0:e5:d8:0d:a8:13:aa:cc:b1:
9e:df:2d:9e:72:d5:78:23:a4:cf:d1:45:f8:4c:6b:
0f:f7:05:70:68:47:17:9e:a5:26:e6:20:da:f2:1c:
ef:4d:97:e8:02:6e:f8:da:de:61:19:f1:3b:71:c9:
37:4d:f3:3b:21:5d:0a:75:8d:7f:38:8a:b1:72:5d:
f6:66:b5:8b:f8:ea:b1:1e:6b:8c:53:b6:38:f9:f6:
c6:1e:a9:e9:af:4b:ed:7b:1a:12:e0:0e:42:b0:2a:
fa:90:52:29:f3:c5:c1:32:ef:35:77:40:98:5c:a4:
04:1f:95:0b:29:58:8d:a1:2b:0a:ee:88:56:f6:2a:
3a:02:37:d8:49:aa:51:43:97:df:b6:83:6a:45:ba:
b2:5a:ec:5e:57:3d:be:14:13:a8:21:23:2d:35:22:
49:68:bf:33:f8:e9:b8:de:ff:d6:fb:26:33:e7:d5:
a4:27:35:14:8b:f0:bf:13:b1:ad:97:d3:45:de:c2:
6d:ac:71:c0:eb:de:25:d9:35:2b:54:78:d5:97:b4:
a3:15:d7:7c:27:98:ef:be:3b:60:81:ef:1f:f3:c2:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:AF:22:81:97:C3:D6:2E:5E:D6:11:4D:66:30:83:A6:02:E9:DC
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:64:1c:b3:00:6e:0b:40:0b:2b:a2:7a:a7:bd:14:81:6c:36:
1d:61:05:b7:eb:bf:4c:c2:f9:3f:0f:06:64:e0:70:e6:a4:72:
81:1d:92:a7:d4:7a:15:52:d5:c2:1b:30:1a:1a:c7:60:e9:87:
fa:6e:54:e9:8f:3e:2b:5c:bb:9f:86:cc:0b:26:f2:4d:28:55:
39:f2:7f:c7:86:ac:a1:44:e2:b8:8d:38:d1:26:9c:8d:9a:48:
98:c2:b0:b0:78:6d:30:29:25:4d:c3:b3:7b:bb:87:3b:80:7f:
7c:8a:4d:55:35:90:7c:31:ff:89:e0:09:08:5f:90:b5:6e:bc:
c7:09:b9:1f:dd:77:8a:2d:4d:44:4b:22:0a:9c:f4:a4:72:3d:
93:69:e9:d3:29:95:7e:d7:25:c8:b1:f1:9e:55:09:8a:c7:7e:
ca:65:d8:3f:92:d6:81:2f:87:7c:7a:68:a6:51:ba:3e:c5:23:
48:19:4c:fd:f6:9b:c7:3d:9c:15:56:74:23:14:7a:a7:23:c0:
31:31:d0:e7:b3:03:d8:d0:99:a5:05:f1:4a:f5:a7:ff:d5:65:
fb:04:99:37:c2:a4:74:00:bc:d4:93:85:d1:8d:fd:c7:d4:78:
70:a0:43:b5:66:d5:99:6c:89:49:6f:a1:24:2f:e8:6f:37:a3:
7c:b3:f0:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqU2pr8XpAYUztp0/0561MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjYwMzI2MDEwMTQwWhcNMjYwMzI3MDEwMTQwWjAzMTEwLwYDVQQD
EygwZGQ5YWYyMjgxOTdjM2Q2MmU1ZWQ2MTE0ZDY2MzA4M2E2MDJlOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8xu7LZQAGoFvUoOQXw0FcuBoVNp
V4l0Xtp/sfTEyKGynG+g5dgNqBOqzLGe3y2ectV4I6TP0UX4TGsP9wVwaEcXnqUm
5iDa8hzvTZfoAm742t5hGfE7cck3TfM7IV0KdY1/OIqxcl32ZrWL+OqxHmuMU7Y4
+fbGHqnpr0vtexoS4A5CsCr6kFIp88XBMu81d0CYXKQEH5ULKViNoSsK7ohW9io6
AjfYSapRQ5fftoNqRbqyWuxeVz2+FBOoISMtNSJJaL8z+Om43v/W+yYz59WkJzUU
i/C/E7Gtl9NF3sJtrHHA694l2TUrVHjVl7SjFdd8J5jvvjtgge8f88IE3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3ZryKBl8PWLl7WEU1mMIOmAuncMB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGQcswBu
C0ALK6J6p70UgWw2HWEFt+u/TML5Pw8GZOBw5qRygR2Sp9R6FVLVwhswGhrHYOmH
+m5U6Y8+K1y7n4bMCybyTShVOfJ/x4asoUTiuI040SacjZpImMKwsHhtMCklTcOz
e7uHO4B/fIpNVTWQfDH/ieAJCF+QtW68xwm5H913ii1NREsiCpz0pHI9k2np0ymV
ftclyLHxnlUJisd+ymXYP5LWgS+HfHpoplG6PsUjSBlM/fabxz2cFVZ0IxR6pyPA
MTHQ57MD2NCZpQXxSvWn/9Vl+wSZN8KkdAC81JOF0Y39x9R4cKBDtWbVmWyJSW+h
JC/obzejfLPwhA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:05 2026 by rpki-client