Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: DbadX+ccuKFmjzm1vksCThzwCXmWja5LSvOfRPLcq+c=
Subject key identifier: 1D:C5:3E:1E:DE:4C:56:64:1C:1C:1A:59:F2:3F:3D:1B:15:45:FA:68
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019E1D22EF69B29C3815126CCEAE8720709E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0F9B
Signing time: Tue 12 May 2026 17:01:29 +0000
Manifest this update: Tue 12 May 2026 17:01:29 +0000
Manifest next update: Wed 13 May 2026 17:01:29 +0000
Files and hashes: 1: 6e697LuZ9jS9gA2F89nGR0cFK-I.roa (hash: ci7j6TFk0kfg5Gm37B2a5yzK2NylCLyZsggMovKNNBs=)
2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: G6NdZ/m5LFv7HQ81WBxwlM0zOAQVGmOxE1NYccfldZ0=)
3: TMapBMpm5rX0-gIoWzb76bSTSuI.roa (hash: R4mwMpiCVjsTtSxaIqIQla1zIyz7FbLUvXLev4eE1XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:ef:69:b2:9c:38:15:12:6c:ce:ae:87:20:70:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: May 12 17:01:29 2026 GMT
Not After : May 13 17:01:29 2026 GMT
Subject: CN=1dc53e1ede4c56641c1c1a59f23f3d1b1545fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:19:87:a8:20:c1:7e:57:10:d9:54:0a:4d:
d5:77:2d:41:51:a4:8b:2f:c0:ff:bf:46:6f:da:69:
dd:f4:98:88:e1:ca:32:f1:c2:80:23:b7:96:7a:9e:
61:0a:16:aa:ff:78:f9:34:27:ee:75:84:40:cf:98:
b6:db:b7:a0:c0:c8:a6:30:b3:41:d0:a5:44:97:ca:
b3:3d:68:25:20:40:66:0c:11:33:eb:dd:8a:a8:17:
0e:ae:dd:ee:1e:8a:c2:0a:56:20:8e:2a:57:38:6c:
8b:1f:c7:7f:e4:bd:52:bc:f0:40:04:dd:59:40:2b:
6d:e7:e6:f4:6e:30:e9:a8:66:d2:8c:f2:7e:7e:0f:
b3:8b:ea:79:1b:60:6d:dd:f0:2c:9f:ed:af:ac:6f:
fa:11:a3:fc:f4:ac:a1:f3:31:9c:3f:36:95:33:f0:
0e:bd:b2:6d:1c:50:47:0f:f2:20:50:76:e5:94:ee:
bc:8f:be:ce:b9:46:74:15:04:e9:99:c4:49:d8:a5:
f5:9d:50:96:88:b1:eb:50:de:60:af:a9:53:00:70:
09:43:63:39:00:01:dd:70:dd:e3:50:03:50:11:e8:
16:fe:c3:f5:b8:f9:00:f3:df:75:d1:14:be:ac:c2:
bd:49:10:12:fb:c2:37:96:5c:48:42:16:ee:e1:69:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C5:3E:1E:DE:4C:56:64:1C:1C:1A:59:F2:3F:3D:1B:15:45:FA:68
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:96:02:1c:4e:a6:6f:d5:22:84:36:ee:c0:ac:58:04:9e:52:
7d:52:e7:4b:da:a1:59:ce:7e:b6:7f:21:9d:5f:ca:be:67:b1:
64:5f:15:da:bf:82:f0:5c:ad:a5:0b:0b:31:02:93:aa:6c:af:
37:e3:87:9a:ff:76:99:64:a2:21:85:e9:72:b8:6b:6f:e0:c4:
97:a5:86:e1:4a:37:7e:65:51:27:bd:9f:5b:b9:ec:df:f8:da:
f1:d4:1b:fc:c2:e4:c9:41:bb:b2:a6:18:b4:73:ab:58:30:bc:
9c:df:d4:36:dd:69:f5:a7:fd:e7:dc:67:a7:23:0e:69:fb:f0:
ea:21:d4:e7:83:22:7f:57:55:19:84:dc:c7:86:04:a9:bc:36:
d5:c4:4c:1e:1e:df:3e:e2:fe:6d:82:c8:56:44:99:cd:91:21:
64:b9:1f:02:7a:88:17:43:83:30:b7:7b:17:a2:92:17:56:73:
26:7c:4d:e7:a1:9b:ec:31:d4:72:ca:a9:de:7f:80:fb:80:79:
42:6c:27:5c:50:46:c7:20:90:2a:4c:a1:39:79:f3:c9:b2:fe:
7e:c6:60:ed:bf:41:b6:43:4f:57:0f:1d:47:b2:b0:a7:23:40:
60:79:5a:dd:08:d4:a3:af:c5:59:9b:30:39:e5:66:9a:c3:71:
18:39:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:28 2026 by rpki-client