Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier: TDqsr4pouPuBT4PE9KK09M3m6RtPZucsb4GsjbFys+Q=
Subject key identifier: 3F:1F:DB:E6:4C:C8:02:39:5A:FB:27:FE:21:C7:54:0F:79:BF:87:29
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial: 019CAC4766808D90FD7EDEDD0E44CFDB7593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:26 +0000
Manifest this update: Mon 02 Mar 2026 02:01:26 +0000
Manifest next update: Tue 03 Mar 2026 02:01:26 +0000
Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: 3m2tsg8A1UsDQngAPj9a+fBq7fx03PMMEiKmDVqkPEw=)
2: tFjiAtBO9U55a6Xkgw-0Lewen6w.roa (hash: Ab4KI/0wBP7Je2+K1QY9msj3vGabiImZGpVEtrWZ558=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:66:80:8d:90:fd:7e:de:dd:0e:44:cf:db:75:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
Validity
Not Before: Mar 2 02:01:26 2026 GMT
Not After : Mar 3 02:01:26 2026 GMT
Subject: CN=3f1fdbe64cc802395afb27fe21c7540f79bf8729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:2f:b8:c6:c6:de:04:5c:79:32:e0:75:c0:
11:6d:4b:be:47:9e:17:2a:c6:28:82:84:ad:29:6d:
c6:6a:52:54:69:20:73:5c:77:4a:c3:57:28:db:14:
02:41:54:85:07:7d:45:76:6b:a5:0e:c6:f5:75:fc:
59:7c:c1:49:2d:75:21:73:a0:93:a1:a3:f1:79:34:
b6:fb:2e:e0:a6:4d:16:a9:2f:64:12:44:e1:1f:8e:
4c:12:ea:0f:09:2d:1f:e2:3f:4c:c0:75:3e:42:ec:
34:9b:61:b2:d1:0c:6f:c1:69:78:64:19:a1:92:2e:
63:c9:ce:77:47:ca:02:03:c4:29:c7:0c:0f:cd:6a:
dc:13:32:c7:1f:a9:b3:67:2a:27:81:e0:07:d3:5c:
1c:f0:5f:ff:2b:7e:f9:02:d0:e2:53:49:10:23:e8:
f6:0b:9f:12:7f:e9:66:f7:c2:f8:35:13:2b:66:15:
76:61:af:48:df:30:89:bb:55:7c:02:f4:7d:69:48:
9d:19:7b:af:fb:2f:10:03:89:d7:ff:0a:59:33:f2:
f8:7b:a2:2a:9d:24:b2:4f:1a:8b:5c:cc:e2:3e:79:
60:c6:57:7f:7d:e3:f6:c6:09:a7:a3:93:5b:66:47:
23:7e:5b:b5:9d:6e:59:19:1c:aa:88:17:8e:03:43:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1F:DB:E6:4C:C8:02:39:5A:FB:27:FE:21:C7:54:0F:79:BF:87:29
X509v3 Authority Key Identifier:
keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:60:b2:9a:c4:a4:39:2d:bc:63:7c:66:1c:d8:33:e8:7a:36:
6f:3b:ed:bc:2c:6b:76:e6:b0:b5:ec:73:07:77:35:3c:a3:85:
97:62:00:bb:d8:2c:73:7f:f6:81:99:0b:c4:c3:b0:5a:73:64:
1b:51:36:5d:95:98:0a:f0:e9:d7:13:86:b9:a8:4a:58:00:e6:
28:78:fc:a0:4f:63:3f:e3:9d:74:18:58:79:fc:8f:e3:94:30:
23:a8:d1:fa:a6:a3:08:e0:a3:10:92:0f:c6:24:79:50:38:18:
20:78:d2:f5:81:90:5f:01:df:e7:3e:b7:2e:1a:9c:c0:53:08:
ef:0a:5d:fd:4d:d9:ff:ea:fe:35:d6:fc:59:69:c7:5e:13:84:
22:64:1c:ac:22:5e:28:ac:89:d7:e6:30:5a:89:94:ad:3d:fa:
de:c9:d7:fa:83:ca:52:bb:c3:50:09:5a:4d:92:f5:83:23:bc:
15:45:e6:b1:26:92:9e:c2:12:44:14:62:06:50:7a:37:49:08:
69:ef:a3:e4:38:07:85:82:67:c7:c9:48:20:70:97:e7:1f:df:
17:8c:52:31:d8:3d:98:66:6a:43:f2:76:5f:e5:09:88:73:f2:
f9:9b:f1:ea:40:75:5a:7f:0e:fc:b1:ab:28:45:99:12:d0:2f:
ec:f8:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:03 2026 by rpki-client