Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: ah/0gsuJoQFr9zeu6BCXaJu5w6vt5Bp/l8GPUjNJgHo=
Subject key identifier: EE:D5:56:A7:AA:F3:C1:FB:43:BF:9A:7D:4D:20:BF:A1:D0:88:1B:54
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 019CABD9677E0DBE9CDE300C967169CF8BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 09EE
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa (hash: 24ateHwuMk5CGZJvNYulALkvFpYFOYXvbKO8p0Z7NPQ=)
2: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: FSvbn23FRtvFzNbLHMA7yUEmu8RlBpGDW1v27yQcKr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:67:7e:0d:be:9c:de:30:0c:96:71:69:cf:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=eed556a7aaf3c1fb43bf9a7d4d20bfa1d0881b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:94:5b:3a:d8:2a:2a:62:5b:5f:5f:10:4d:
95:54:32:31:d9:df:94:b8:8a:fa:80:42:dd:13:33:
ca:70:ea:4d:2b:af:0a:9e:4c:15:0d:9c:ad:43:4a:
3b:d5:ee:97:ca:20:a8:c3:16:df:41:53:45:f8:12:
91:3f:8d:6d:46:4c:6b:2f:3f:00:41:41:27:71:92:
f7:d8:f1:b6:9f:3b:fc:40:d5:eb:3a:a7:ad:44:9d:
66:3d:75:fe:d7:22:eb:1c:0c:42:26:02:65:b4:be:
e3:7d:e2:d9:5d:0f:e0:f9:c5:4a:ef:4b:f2:b9:0f:
fa:53:95:e2:36:7a:ec:67:ea:98:b0:08:48:dc:d7:
66:4d:d9:30:45:51:a7:e4:54:7c:43:bc:ad:11:7a:
2c:40:5b:f0:19:04:a5:d1:cd:b8:42:a2:15:91:7e:
ec:9f:d8:54:33:fa:c2:d5:95:2c:d7:5e:ba:55:09:
7a:7a:9b:3a:05:cf:0f:35:34:92:b8:8a:37:ab:d5:
66:b0:6f:5b:87:37:90:46:cb:5c:8a:31:44:89:92:
fa:98:cd:ba:0f:80:15:fe:2d:5b:de:fb:a6:67:41:
1a:dd:62:09:2c:2c:46:64:8d:a2:e4:6c:61:73:a2:
1e:90:b8:41:b0:3d:b1:2e:02:5b:90:1e:11:a3:2b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:56:A7:AA:F3:C1:FB:43:BF:9A:7D:4D:20:BF:A1:D0:88:1B:54
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4a:e5:f1:23:ec:6c:99:51:86:fd:45:3a:1b:48:8f:27:97:
78:03:7a:49:16:60:70:4b:31:6e:12:9b:cb:61:64:7a:b1:89:
f3:d4:9f:dc:71:2b:f2:ff:e7:09:0d:c7:8c:30:3d:37:39:ba:
fa:bf:4c:1c:ea:a7:ac:24:69:32:a7:8f:93:f0:31:da:bc:fc:
b4:63:60:75:c1:d5:c6:f1:2d:36:e9:b3:65:94:73:b2:13:fd:
6e:db:5f:b0:a4:50:72:80:19:78:0f:96:e7:3f:4b:94:3a:4a:
a0:61:9f:00:9a:a1:2e:1b:1c:3a:38:62:03:0b:60:d0:e7:df:
87:ac:14:06:d4:65:12:66:ec:d9:2b:6b:9f:67:99:9d:ee:ce:
ef:98:8e:24:47:22:0e:21:c5:cd:5f:69:fb:f1:76:89:86:5b:
09:19:f3:b7:65:4c:40:78:e2:b7:43:b0:ea:89:53:17:3b:cc:
2b:59:b1:d1:60:e7:c7:dc:ae:84:43:e4:90:bd:4e:71:05:7f:
c1:71:65:29:9b:8c:74:5b:77:93:2e:c9:b9:e1:6e:78:1a:c1:
1a:43:f9:cb:46:23:8c:b2:ba:a8:de:1a:a6:ff:cf:91:fb:d1:
cc:3a:57:49:66:8b:8b:d3:d0:ab:87:53:51:a6:20:54:45:11:
d2:ff:22:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:54 2026 by rpki-client