Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: aQ1s6Uug1ZXZjkv5fUG2PcCBKTLhNJ/xiEATPtNXS7Y=
Subject key identifier: EC:23:AA:0D:B4:6E:43:5C:C9:6D:75:57:7C:A2:D8:CA:F3:2F:0E:03
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01A0FAC61ABAF3FFC455FD41173BD6452C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0B58
Signing time: Fri 02 Oct 2026 04:01:22 +0000
Manifest this update: Fri 02 Oct 2026 04:01:22 +0000
Manifest next update: Sat 03 Oct 2026 04:01:22 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: 9GSCAmszayxzcuqruf8IoQ5rOlBBqQg/p2QuL1/kd0M=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:c6:1a:ba:f3:ff:c4:55:fd:41:17:3b:d6:45:2c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Oct 2 04:01:22 2026 GMT
Not After : Oct 3 04:01:22 2026 GMT
Subject: CN=ec23aa0db46e435cc96d75577ca2d8caf32f0e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:20:be:78:4a:84:fb:b1:04:db:aa:8e:cb:
e9:fc:3c:8f:80:a5:37:69:f3:d1:75:cc:51:8a:ca:
eb:72:22:22:e2:13:74:e2:81:40:ff:30:a4:08:6e:
15:0a:a3:55:84:d6:cd:1c:d3:aa:1c:5f:13:18:5a:
b9:1b:d9:0c:2a:18:15:b1:98:06:74:7d:ab:07:a9:
f8:65:5e:4b:26:7b:7a:23:7b:ae:c0:53:67:af:13:
6e:16:fa:34:fc:32:91:a6:68:e3:af:59:d8:d2:89:
6d:fa:2c:92:94:02:10:22:26:c9:47:49:e2:d0:a0:
d5:12:ec:d9:ce:96:7d:ab:d8:41:ae:a5:20:4b:69:
d6:28:f2:73:b1:e5:99:a3:9c:f1:47:26:3d:fd:32:
74:9b:ee:5d:6f:51:d6:17:4d:e2:b4:c4:9f:f3:cc:
a7:fc:e7:31:59:7d:42:79:6b:7f:de:91:5a:44:e5:
fa:40:eb:40:72:e6:6b:d0:7f:cf:34:d4:a5:45:13:
3b:24:9b:51:c1:d3:a4:0c:8f:0e:cb:75:b3:1d:5f:
86:ec:4e:a4:83:4a:ed:ed:ee:69:6a:01:21:26:f8:
f1:95:d5:73:b9:fb:49:83:47:ab:4c:6c:71:74:d7:
3f:e1:4c:96:a8:b1:22:dd:93:bf:92:18:b0:e5:89:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:AA:0D:B4:6E:43:5C:C9:6D:75:57:7C:A2:D8:CA:F3:2F:0E:03
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0e:87:c8:dd:fc:81:2c:e4:44:03:0e:cf:52:bc:ab:e7:7a:
44:73:2e:70:af:c3:69:c6:70:05:c6:fe:e8:f1:69:b2:c9:fd:
aa:17:f3:3f:69:0b:01:b3:b4:06:fe:a3:96:39:b0:49:f5:79:
3e:07:16:ac:54:52:be:22:92:be:57:df:ac:55:48:d8:d4:30:
18:1b:25:b0:ce:82:76:e1:1f:86:b0:16:b2:6a:d2:15:44:58:
4f:74:19:9c:a5:7f:53:ca:8a:5a:5e:1a:6a:bc:e9:84:de:75:
7a:b6:64:34:21:ec:20:9b:5c:0b:a8:b5:77:f6:9d:fa:4c:5b:
a8:77:d0:48:84:38:97:78:12:2e:7f:30:f5:7b:51:b0:15:b8:
35:66:61:d9:0f:60:eb:90:b1:ce:a1:fe:3a:bb:8b:1b:81:61:
6b:62:ab:71:d0:1f:32:de:0a:5c:31:24:c8:21:08:1a:33:f3:
11:c4:44:00:9c:fd:99:9e:da:52:c9:bb:0e:49:35:62:a1:fe:
a0:8e:70:bf:e5:91:30:1b:56:e5:1e:46:0f:e1:50:62:7f:c1:
49:40:a1:60:4d:f2:b6:57:c2:f1:3c:53:86:f7:d9:b1:5a:c8:
8b:92:b3:87:09:b0:c2:6b:93:fb:86:75:4f:7e:85:53:f6:5f:
df:ee:8b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD6xhq68//EVf1BFzvWRSwNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjYxMDAyMDQwMTIyWhcNMjYxMDAzMDQwMTIyWjAzMTEwLwYDVQQD
EyhlYzIzYWEwZGI0NmU0MzVjYzk2ZDc1NTc3Y2EyZDhjYWYzMmYwZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l4gvnhKhPuxBNuqjsvp/DyPgKU3
afPRdcxRisrrciIi4hN04oFA/zCkCG4VCqNVhNbNHNOqHF8TGFq5G9kMKhgVsZgG
dH2rB6n4ZV5LJnt6I3uuwFNnrxNuFvo0/DKRpmjjr1nY0olt+iySlAIQIibJR0ni
0KDVEuzZzpZ9q9hBrqUgS2nWKPJzseWZo5zxRyY9/TJ0m+5db1HWF03itMSf88yn
/OcxWX1CeWt/3pFaROX6QOtAcuZr0H/PNNSlRRM7JJtRwdOkDI8Oy3WzHV+G7E6k
g0rt7e5pagEhJvjxldVzuftJg0erTGxxdNc/4UyWqLEi3ZO/khiw5Yki6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwjqg20bkNcyW11V3yi2MrzLw4DMB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ6HyN38
gSzkRAMOz1K8q+d6RHMucK/DacZwBcb+6PFpssn9qhfzP2kLAbO0Bv6jljmwSfV5
PgcWrFRSviKSvlffrFVI2NQwGBslsM6CduEfhrAWsmrSFURYT3QZnKV/U8qKWl4a
arzphN51erZkNCHsIJtcC6i1d/ad+kxbqHfQSIQ4l3gSLn8w9XtRsBW4NWZh2Q9g
65CxzqH+OruLG4Fha2KrcdAfMt4KXDEkyCEIGjPzEcREAJz9mZ7aUsm7Dkk1YqH+
oI5wv+WRMBtW5R5GD+FQYn/BSUChYE3ytlfC8TxThvfZsVrIi5KzhwmwwmuT+4Z1
T36FU/Zf3+6LCA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 15:12:47 2026 by rpki-client