Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: 9T6H8P4OMUeg8hyAfq2sHRLffHBFhceTzICpflravRY=
Subject key identifier: C0:42:F2:67:5A:0D:90:02:FD:BB:C7:8F:0B:94:28:FF:D7:AE:AB:9E
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 019EC0DB24213DE0D26C29B630F1F59CDDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 0B02
Signing time: Sat 13 Jun 2026 12:00:47 +0000
Manifest this update: Sat 13 Jun 2026 12:00:47 +0000
Manifest next update: Sun 14 Jun 2026 12:00:47 +0000
Files and hashes: 1: PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa (hash: 24ateHwuMk5CGZJvNYulALkvFpYFOYXvbKO8p0Z7NPQ=)
2: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: NKZB4P9LQPA0bBVKzwydeEK+8S5FuYHV+CdFWGraiCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:24:21:3d:e0:d2:6c:29:b6:30:f1:f5:9c:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: Jun 13 12:00:47 2026 GMT
Not After : Jun 14 12:00:47 2026 GMT
Subject: CN=c042f2675a0d9002fdbbc78f0b9428ffd7aeab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:79:ad:2e:c1:e2:1a:37:04:bd:58:53:f0:
11:89:65:78:81:c0:95:b3:a6:d6:e0:cb:48:c6:52:
6f:89:41:5d:92:8b:89:fb:8b:48:59:5f:b5:94:46:
af:6a:68:c6:db:ce:45:5f:ab:70:93:52:4d:2f:a2:
d9:88:3a:a7:1e:5a:04:b6:dd:33:b0:7b:4f:33:14:
36:9f:fa:83:bc:67:c4:69:7c:68:bb:c7:10:1c:a6:
f6:25:40:c3:05:c7:36:26:ba:15:18:cf:3e:d6:2a:
5d:7d:df:bf:da:70:8c:dc:f2:e9:a9:17:91:24:8e:
df:4a:03:e5:b2:11:b7:c5:f9:f8:74:8e:2c:77:56:
66:f0:0f:62:eb:17:e9:23:e7:5d:2b:9a:8b:be:c9:
3a:fc:22:e6:8f:59:c9:09:7c:db:46:44:b0:10:72:
3f:53:97:cd:06:c3:c9:77:61:58:e8:3d:1f:b6:b0:
a4:02:f1:09:93:83:81:50:36:9a:f2:ab:8a:1a:32:
34:a4:06:e5:70:1b:69:de:53:d4:2e:81:40:63:8b:
d7:15:e0:69:27:e3:6a:ee:66:32:63:1c:b7:53:f8:
5b:01:87:da:fa:0c:7f:1a:9f:59:45:7a:33:aa:b6:
90:92:03:e6:d6:0d:c6:3e:91:36:6a:79:4a:05:ba:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:F2:67:5A:0D:90:02:FD:BB:C7:8F:0B:94:28:FF:D7:AE:AB:9E
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:f4:ea:a1:f2:96:66:09:db:2d:16:d4:05:9e:c0:d1:72:
d2:86:16:ef:4d:80:d7:1e:96:3b:0e:95:1b:f4:87:e8:12:a4:
c5:77:fd:53:df:ad:04:b1:3d:88:4e:e9:c5:9e:8b:0a:5a:3d:
ea:e9:3b:e0:4d:8b:fc:a6:56:0d:f4:c1:d0:f7:7e:96:a7:4f:
e4:e9:26:78:97:8d:dc:cb:e7:1f:ba:54:73:c0:59:0f:21:19:
52:81:35:bb:52:d1:fd:5f:5a:8b:c5:b8:ce:69:b0:a2:40:04:
c5:54:5e:13:fa:e5:dd:49:cc:05:09:81:3f:2a:74:4d:24:be:
06:29:46:66:99:c3:c0:d3:39:95:33:e5:a7:65:c7:a7:35:55:
c6:2f:c4:cf:71:bd:91:36:a4:64:af:66:32:be:83:cd:9d:5b:
74:91:85:fa:b4:e3:b9:d9:fc:48:f3:8f:0f:da:f9:c3:f2:10:
dd:3b:62:cc:94:43:e9:3a:c6:80:30:3a:e6:3c:28:f3:91:28:
b5:d2:e3:8f:87:ff:57:d8:21:28:54:f9:7a:bb:17:ff:41:de:
28:51:69:17:59:32:ae:29:59:29:bb:dc:58:56:00:e3:7e:a9:
88:75:64:53:7c:7f:0f:9f:26:39:b9:23:eb:f0:8e:07:8e:9e:
d3:72:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:39 2026 by rpki-client