Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: 89Aze41Q8XD8bnfzu6y1cgG/2x0zf2wEzgAKoPhfuxA=
Subject key identifier: B0:1E:D0:4D:CD:24:98:0D:D5:19:65:36:4C:44:DD:DD:C6:CC:95:E2
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019CAA58E6DEEFC398379F6E2E19A60ADCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 100E
Signing time: Sun 01 Mar 2026 17:01:18 +0000
Manifest this update: Sun 01 Mar 2026 17:01:18 +0000
Manifest next update: Mon 02 Mar 2026 17:01:18 +0000
Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=)
2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: SU24xFd/04ffk/sh2N+jcV6IccYy+tWny5TAdutME0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e6:de:ef:c3:98:37:9f:6e:2e:19:a6:0a:dc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Mar 1 17:01:18 2026 GMT
Not After : Mar 2 17:01:18 2026 GMT
Subject: CN=b01ed04dcd24980dd51965364c44ddddc6cc95e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:e7:ef:2e:6b:2a:cc:3e:a3:02:f7:6d:cd:
24:d6:9d:fa:d7:dc:3b:44:ae:f6:2b:74:26:7b:05:
71:df:48:27:76:84:a2:df:c4:da:c1:20:11:76:80:
fe:7a:cc:48:2e:66:5d:25:1f:27:86:86:b8:0d:a5:
91:75:6d:0c:82:b1:65:e4:7d:11:68:3c:f8:0d:d6:
c3:b7:69:ff:88:84:50:0d:ab:a1:25:4b:7b:b6:a4:
3e:b9:4a:56:4e:76:c1:7a:e7:db:b6:3e:fd:c6:75:
a7:1f:c6:12:9d:76:78:2b:07:e5:35:f2:05:72:b5:
a7:2b:f4:5c:17:17:20:77:9a:2f:42:52:48:b2:47:
4b:dd:25:3d:d9:ab:ee:5f:3a:eb:51:c6:79:26:cf:
77:04:21:9a:fb:8d:e8:ba:91:8e:38:36:99:a3:e8:
eb:d0:74:50:1c:ad:0f:d1:73:cb:7b:84:de:8d:3c:
53:de:4b:8f:dd:cc:b0:89:e2:48:3f:13:8f:d9:c0:
ba:3d:fb:49:7b:57:23:0a:9c:ce:9c:92:c9:25:f3:
4a:9c:a4:e7:6f:a0:fb:db:11:80:36:71:ca:ce:33:
be:bb:23:e5:d3:77:a8:84:13:8d:d8:f1:35:ff:40:
bc:b0:54:82:03:16:ae:39:07:11:83:2c:2e:98:e9:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:D0:4D:CD:24:98:0D:D5:19:65:36:4C:44:DD:DD:C6:CC:95:E2
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f0:ca:17:84:95:6e:32:f0:ca:7b:7c:23:67:50:61:7d:84:
4b:d7:6b:56:ce:c7:92:e2:57:9e:a1:39:e6:97:69:9a:4b:1d:
4d:d8:d4:46:d5:36:ba:cb:06:54:6b:d2:e4:3d:dd:45:e7:30:
8a:c7:23:c4:cb:22:87:3c:f5:b0:db:e8:96:50:18:ba:44:39:
80:76:35:99:83:53:e5:c4:0f:37:69:e1:f5:fd:2b:aa:9d:4c:
1c:1c:49:c1:61:e6:88:fc:04:cd:b6:75:87:e3:6e:66:02:48:
28:f5:4e:2b:4e:38:1a:de:6f:b6:7e:07:36:3c:60:d0:38:88:
4f:fa:f2:81:a7:17:00:db:a9:2a:77:d4:41:e8:dc:6b:47:eb:
7f:db:d7:39:b3:e4:71:16:09:24:00:7f:30:58:73:d2:35:61:
9d:40:4b:f3:17:0e:e6:73:6d:60:ac:cd:72:6f:37:62:ac:bd:
35:2f:58:8c:b6:c5:d7:13:34:e4:5b:e7:e6:43:66:cf:db:e7:
19:02:6f:67:c6:88:19:f2:c9:68:d8:91:95:08:19:80:2b:7d:
4a:ab:0f:ef:7d:69:80:41:bd:8f:0c:d9:dd:f8:cb:24:54:cf:
4b:0a:2f:83:ea:22:51:f2:58:d9:03:55:59:91:ff:ac:4d:a9:
80:e9:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:53 2026 by rpki-client