Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: n94G/ZQDZRmgsCIciMChBgwV7/SoUZlBnaFdl85p6W8=
Subject key identifier: 44:CD:44:6C:F6:28:1A:95:5A:3D:DD:17:98:41:EF:68:0E:9D:F1:35
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019D97E1C0D4B3FC06053D0324EDFD290D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 1089
Signing time: Thu 16 Apr 2026 20:00:47 +0000
Manifest this update: Thu 16 Apr 2026 20:00:47 +0000
Manifest next update: Fri 17 Apr 2026 20:00:47 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 0xMvUjsq/Wh8yYPvUt0joGzTFxyBo0LuB8o8ZRTFlIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:c0:d4:b3:fc:06:05:3d:03:24:ed:fd:29:0d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Apr 16 20:00:47 2026 GMT
Not After : Apr 17 20:00:47 2026 GMT
Subject: CN=44cd446cf6281a955a3ddd179841ef680e9df135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:12:dd:0c:ac:c5:58:74:66:b5:fa:99:b2:
d7:90:64:6c:fb:e2:ae:9c:d9:2f:8b:1d:e6:b2:51:
11:bf:f4:9c:02:dc:e7:02:ec:c0:3b:4c:5e:c0:df:
2f:de:d1:ff:cf:dc:e9:bf:e2:45:85:54:65:4f:fd:
e4:99:42:6f:9a:96:9a:44:b4:70:51:f6:6e:ca:3d:
ee:21:c0:9d:4d:7a:77:70:24:11:62:7f:dd:cf:9d:
57:a5:46:9f:85:df:ad:ef:2e:bd:99:2c:f7:5f:55:
78:c5:7d:5c:98:17:10:e2:2f:36:e7:d9:22:8f:a7:
89:1c:ce:67:dd:de:1b:3f:33:d2:98:1d:44:65:e6:
de:4b:cb:8f:c7:2e:47:00:c7:06:21:f0:28:84:64:
5e:f3:37:15:81:ee:6a:f4:79:7b:35:8c:9e:57:0e:
ee:30:3d:f5:b6:c9:32:20:c7:ff:1d:00:a6:c4:5c:
ff:d4:66:64:99:d1:b5:8a:ba:5b:b6:4e:3b:b1:96:
bf:6f:d0:cb:8a:42:7f:37:4d:57:5b:a5:36:dc:03:
e1:0a:76:67:8a:2e:a9:52:fb:55:4d:f2:4c:23:4e:
56:fb:b3:bc:36:d6:47:d7:79:b7:cf:b2:6a:3c:e9:
95:a8:b3:0d:46:2e:8c:ff:97:c0:80:06:db:6d:cd:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:44:6C:F6:28:1A:95:5A:3D:DD:17:98:41:EF:68:0E:9D:F1:35
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:36:4d:88:58:10:57:dc:ad:69:72:f9:8d:4d:b4:ea:23:
ed:d2:d5:43:bc:dc:47:85:25:ef:76:75:22:9c:14:a2:0d:d5:
50:34:af:b0:6e:ce:c5:1e:80:80:c2:c3:70:1f:e0:ef:f1:0c:
c0:1b:7a:2c:5c:5d:02:09:6c:65:15:d4:ea:f0:6f:84:0b:98:
8d:4c:27:a4:c9:5d:ca:95:d5:d9:83:e5:9b:a8:5c:6c:ef:f1:
ac:75:31:4d:c8:f0:9f:de:51:1d:ef:43:50:4f:fe:50:2c:f6:
6a:09:84:32:7b:e7:cd:98:ca:5d:08:0b:06:b2:bf:4e:1e:27:
ab:79:14:93:38:8c:b9:25:df:94:ad:92:65:0e:ef:96:12:2b:
36:23:3c:bf:d0:22:b6:ec:e1:e9:57:17:ad:b4:94:65:8b:1a:
8b:50:ba:19:d9:81:48:40:67:31:c6:3e:9d:a4:47:b0:ad:88:
50:1b:1a:f2:9c:a1:a4:51:b1:97:c3:90:f7:26:70:f1:f2:04:
b6:e5:cb:8b:a5:02:79:a3:25:ca:b0:76:8b:7b:e7:1a:96:36:
32:ee:50:0d:67:c6:8d:9b:c2:db:57:13:4e:a6:98:ef:98:6f:
ae:a3:7e:25:5d:54:c5:52:78:81:1b:c9:f1:89:8a:44:54:69:
01:39:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:11 2026 by rpki-client