Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: iaSxVUSQbCJwgWpCVw5gjzYpnmRA7WX8zYRdBA21D+g=
Subject key identifier: 02:99:8D:DE:FB:15:E5:B2:21:87:A2:34:14:26:16:7D:44:A5:95:74
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 019D9962544C2B25EB7E793F089F01DDF347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 0A69
Signing time: Fri 17 Apr 2026 03:00:51 +0000
Manifest this update: Fri 17 Apr 2026 03:00:51 +0000
Manifest next update: Sat 18 Apr 2026 03:00:51 +0000
Files and hashes: 1: PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa (hash: 24ateHwuMk5CGZJvNYulALkvFpYFOYXvbKO8p0Z7NPQ=)
2: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: GBJNARU4PjfAaArk3UE0wvXUaWI1fIbDXzpThlk9GpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:54:4c:2b:25:eb:7e:79:3f:08:9f:01:dd:f3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Apr 17 03:00:51 2026 GMT
Not After : Apr 18 03:00:51 2026 GMT
Subject: CN=02998ddefb15e5b22187a2341426167d44a59574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:36:50:2d:e5:3c:15:2d:9c:3c:53:ef:99:
d8:01:63:30:2c:2f:44:0a:02:28:c9:85:2d:45:a6:
06:6a:44:73:43:89:bb:df:f8:9f:ed:43:4c:97:47:
b5:bf:71:49:a5:ad:72:69:4d:68:42:dc:67:dc:e6:
2d:32:ca:9c:bd:1b:09:68:fb:9b:62:f2:6c:bd:9e:
a6:60:70:63:8b:77:fc:3b:b7:a6:bc:a6:78:6e:22:
54:5a:c7:09:3e:60:3d:89:f8:ac:39:53:7d:46:d9:
6c:0d:97:b8:d5:7b:88:79:03:85:d5:62:aa:2a:ca:
37:91:8f:be:25:3e:bf:61:05:0c:cb:bd:e7:b0:32:
72:f4:2b:be:92:70:21:5c:55:ce:09:4c:e7:ce:67:
1c:ab:26:c3:4a:f7:b5:de:24:c4:8c:a0:66:af:e1:
24:1d:c2:7b:58:ff:11:ac:50:1e:0e:13:c9:b0:9c:
67:2c:8e:aa:a5:50:85:36:ed:99:bc:2f:45:46:0e:
07:7a:04:45:39:f7:c2:78:68:dc:5e:47:72:04:64:
39:e2:1e:8d:9e:0e:46:81:5b:fd:9a:82:f3:68:aa:
ca:d7:0b:6e:c3:eb:df:7d:71:8d:2d:2c:18:58:7b:
ce:f3:16:7e:29:50:33:96:f5:27:ee:22:60:89:ad:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:8D:DE:FB:15:E5:B2:21:87:A2:34:14:26:16:7D:44:A5:95:74
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:85:dd:47:f3:54:1e:e7:28:4f:d8:1c:72:c5:fb:cf:af:8d:
a8:36:c9:1b:b7:34:ce:9c:3e:21:26:32:90:76:3a:da:eb:c1:
33:fe:b9:6e:ab:cb:84:ba:07:a9:96:a1:a1:c0:e8:6f:aa:f1:
0b:95:31:24:d1:59:fd:84:dc:ae:8b:3a:ac:f0:ff:7a:98:3f:
b2:9f:0a:29:88:1e:ed:d6:af:56:78:e1:de:0d:44:bd:af:6d:
8f:48:9a:6a:ce:3d:aa:3d:ef:ab:68:53:de:87:29:4c:4a:1f:
12:1b:97:bc:07:17:75:49:53:ca:a8:55:60:ea:24:e6:ef:a2:
31:17:39:45:1d:a7:75:d9:23:13:ec:d9:b6:8b:4d:f1:aa:e9:
f2:f8:2d:65:b1:6a:0c:11:44:e7:fb:bf:c3:ee:f3:e7:3b:bb:
a5:b9:a9:26:83:fe:24:8c:88:f6:05:d2:0f:43:c9:04:9b:8e:
da:07:a9:10:e4:b8:56:44:b6:30:20:53:11:93:7d:8e:95:58:
84:b4:69:63:34:75:41:b4:af:eb:05:38:92:06:d5:b1:4f:47:
96:c3:2a:21:52:7d:be:f5:66:23:d1:8d:f2:a6:e1:7e:09:a7:
46:0a:71:60:fe:33:38:c5:4d:18:13:cc:9d:4a:ed:4c:5f:8a:
7b:47:76:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYlRMKyXrfnk/CJ8B3fNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYWFlNTE0YzVmOTk0MDM5MTQzNTYxNGQ3OTQwNGJlZTEy
MDliM2IwHhcNMjYwNDE3MDMwMDUxWhcNMjYwNDE4MDMwMDUxWjAzMTEwLwYDVQQD
EygwMjk5OGRkZWZiMTVlNWIyMjE4N2EyMzQxNDI2MTY3ZDQ0YTU5NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurI2UC3lPBUtnDxT75nYAWMwLC9E
CgIoyYUtRaYGakRzQ4m73/if7UNMl0e1v3FJpa1yaU1oQtxn3OYtMsqcvRsJaPub
YvJsvZ6mYHBji3f8O7emvKZ4biJUWscJPmA9ifisOVN9RtlsDZe41XuIeQOF1WKq
Kso3kY++JT6/YQUMy73nsDJy9Cu+knAhXFXOCUznzmccqybDSve13iTEjKBmr+Ek
HcJ7WP8RrFAeDhPJsJxnLI6qpVCFNu2ZvC9FRg4HegRFOffCeGjcXkdyBGQ54h6N
ng5GgVv9moLzaKrK1wtuw+vffXGNLSwYWHvO8xZ+KVAzlvUn7iJgia1HfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKZjd77FeWyIYeiNBQmFn1EpZV0MB8GA1UdIwQY
MBaAFPyq5RTF+ZQDkUNWFNeUBL7hIJs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEt
NjdhOThlMjU2Y2M3LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEtNjdhOThlMjU2Y2M3
LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4XdR/NU
HucoT9gccsX7z6+NqDbJG7c0zpw+ISYykHY62uvBM/65bqvLhLoHqZahocDob6rx
C5UxJNFZ/YTcros6rPD/epg/sp8KKYge7davVnjh3g1Eva9tj0iaas49qj3vq2hT
3ocpTEofEhuXvAcXdUlTyqhVYOok5u+iMRc5RR2nddkjE+zZtotN8arp8vgtZbFq
DBFE5/u/w+7z5zu7pbmpJoP+JIyI9gXSD0PJBJuO2gepEOS4VkS2MCBTEZN9jpVY
hLRpYzR1QbSv6wU4kgbVsU9HlsMqIVJ9vvVmI9GN8qbhfgmnRgpxYP4zOMVNGBPM
nUrtTF+Ke0d2eA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:53:01 2026 by rpki-client