Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: XhPTe1zhzydweXYM755OQv00lfWm4oBcM0WKJ5LaFCQ=
Subject key identifier: 45:6D:40:61:37:13:25:69:74:29:FD:DF:0D:A7:31:12:12:A5:4F:CC
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019D9AABA7556DE3D5690FE1D6635DEB907A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 134E
Signing time: Fri 17 Apr 2026 09:00:33 +0000
Manifest this update: Fri 17 Apr 2026 09:00:33 +0000
Manifest next update: Sat 18 Apr 2026 09:00:33 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: smnMyeUNGn0CpoIVHJ42hdifEbrezupH2gc6T3G5Mz0=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a7:55:6d:e3:d5:69:0f:e1:d6:63:5d:eb:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Apr 17 09:00:33 2026 GMT
Not After : Apr 18 09:00:33 2026 GMT
Subject: CN=456d4061371325697429fddf0da7311212a54fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:30:44:db:41:74:58:8e:04:af:47:82:95:
94:45:f1:84:71:c1:f2:fe:a2:ca:3a:0f:f0:71:8d:
1d:f8:60:d0:29:dd:8e:d5:f1:2c:61:b2:d8:bc:5a:
26:3d:56:43:8d:bf:07:62:46:cb:0c:27:7e:e9:32:
c9:d6:7c:2f:61:9a:4c:7d:2d:3c:ce:e1:9a:a7:6c:
4d:7c:54:65:3f:11:dd:cd:51:7a:53:14:0a:9b:4a:
f3:0a:6d:3c:58:6c:c2:f8:42:b1:bb:dd:f1:43:57:
bb:0c:ef:6c:18:fa:16:3c:1b:d0:e3:7a:49:ce:32:
1c:15:07:2e:87:f2:5d:1a:16:20:ac:76:90:7b:d6:
6b:83:84:f7:cc:8c:93:7f:ec:a6:51:75:ce:f5:bc:
05:c7:af:e8:23:70:20:c8:6f:99:d0:64:5f:57:7b:
be:b2:05:26:42:d8:4b:cd:d4:17:b8:dc:48:a3:51:
0f:1c:ab:bc:ce:43:24:97:bb:1e:e1:78:71:f2:1e:
93:f1:b5:1a:aa:67:7e:33:56:21:ea:53:a2:53:82:
77:7c:9c:0f:b5:c6:ba:17:3c:42:71:35:be:df:fe:
fe:95:5b:b6:52:af:1c:3d:6c:53:97:ef:c9:81:e8:
33:d4:53:62:e7:c7:a0:74:13:5a:46:cf:54:5d:a7:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6D:40:61:37:13:25:69:74:29:FD:DF:0D:A7:31:12:12:A5:4F:CC
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cd:5b:b5:9a:ab:e9:b3:e0:15:53:8c:b1:e5:73:07:c7:bf:
66:22:35:1a:95:bc:66:3f:09:50:82:88:b2:b4:16:61:11:ef:
6c:64:a0:04:6e:06:8d:c7:4f:f3:08:34:23:6a:fc:ff:48:de:
af:59:68:bf:81:15:5f:c5:46:53:40:b2:1d:4d:e4:d6:ef:b8:
f4:53:e1:3f:bb:62:a0:9c:ec:4e:f4:41:48:a4:bc:7b:fa:e8:
41:7c:fa:d7:7d:b3:2b:b6:05:d5:3c:2c:39:59:19:3a:b6:0b:
ab:a9:47:60:20:d9:37:9f:8e:8c:9d:bb:09:b1:c9:55:32:42:
24:00:11:01:ac:e0:2f:7b:cf:cb:fd:c9:ce:d3:9b:28:32:ba:
af:f9:45:d0:08:db:40:ce:de:b7:91:45:73:49:93:03:61:b9:
13:13:a9:4a:9c:7d:bc:d5:cb:f4:1b:d7:d7:f1:a9:2e:15:c8:
84:19:34:56:66:f2:73:bb:cb:71:3d:59:90:5d:74:3a:60:5f:
c3:3d:c0:04:1c:8e:12:00:d1:cb:f1:c9:36:4e:e7:fa:67:f4:
d0:80:c8:04:01:70:3f:ff:a8:6f:31:a1:9e:51:76:d2:bf:cb:
4f:b4:ce:ab:cb:eb:50:13:63:56:07:95:22:db:65:3e:79:a7:
38:9d:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:07 2026 by rpki-client