Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: xSIJzkSmKY7Velj0Qv3Vi5FBPNJERwE5DJse9fPsj/U=
Subject key identifier: 6A:9E:93:4B:91:F8:C0:BD:33:FD:02:29:29:CD:CC:A0:53:00:58:B4
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 01A128435951AB14BC139BFD5F9CECC8AEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 1525
Signing time: Sun 11 Oct 2026 00:01:04 +0000
Manifest this update: Sun 11 Oct 2026 00:01:04 +0000
Manifest next update: Mon 12 Oct 2026 00:01:04 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: 5xZOnq6gIEkkOfEeeyeBtx//IVhDDGsSY7zo4wmJJMk=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:59:51:ab:14:bc:13:9b:fd:5f:9c:ec:c8:ae:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Oct 11 00:01:04 2026 GMT
Not After : Oct 12 00:01:04 2026 GMT
Subject: CN=6a9e934b91f8c0bd33fd022929cdcca0530058b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:da:e0:cb:f4:1c:a3:05:91:a6:e1:61:a4:
dc:e8:77:1a:e5:c2:e5:ad:97:ce:25:35:2f:43:2d:
1a:a1:55:8c:45:dd:99:97:46:09:fa:db:1f:fd:ec:
c5:ab:cd:44:72:21:da:81:e4:53:d4:a0:57:00:8e:
e3:64:e3:91:e0:50:13:b3:8f:56:d6:0a:e4:9f:ef:
89:4c:6e:a6:5f:6f:1f:66:5b:d6:ac:9f:1d:dd:66:
fb:3a:61:e3:b0:60:a0:23:d0:2c:d5:0b:9b:ed:1f:
3d:f8:92:f4:e4:0d:3c:a6:2a:d9:86:1d:8b:bd:00:
68:23:9e:2a:4f:0b:f0:35:e9:8d:42:44:d1:33:0d:
33:96:50:00:cb:41:51:15:63:0c:f8:29:1b:a3:37:
10:a6:8e:41:69:8c:eb:f8:57:64:8c:83:8b:0c:31:
e9:96:6f:7b:42:79:64:04:92:ac:58:b4:40:3d:d1:
f5:65:8f:ad:9c:56:66:49:f2:a1:73:09:57:aa:e4:
41:7f:ea:79:b0:9e:19:e0:e1:75:5a:fb:d3:d0:c4:
b6:9b:5a:68:80:06:1b:78:85:8f:23:53:2d:c0:ab:
91:76:be:81:c2:0f:4e:37:73:e9:7c:9f:1b:e1:a5:
7d:f6:30:27:a4:86:e2:74:b5:40:90:6d:c7:f6:37:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:93:4B:91:F8:C0:BD:33:FD:02:29:29:CD:CC:A0:53:00:58:B4
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c4:0d:7b:9b:1c:30:85:41:85:9a:9e:49:93:df:8a:04:cd:
39:54:fb:53:54:8f:3f:a6:10:78:30:eb:30:d1:22:5d:14:64:
a1:6f:cf:b7:de:aa:98:98:44:dc:c2:42:a9:54:24:5a:af:09:
7f:db:13:22:17:1a:9e:c2:9d:f3:c5:2f:9f:1c:5d:43:27:fb:
33:cc:25:3a:0e:dc:d1:c0:7d:62:b2:89:69:9d:0b:d4:38:2d:
eb:89:3e:25:96:c3:20:b5:d4:c2:8d:5f:41:a7:fd:4a:f4:27:
d2:42:27:60:fb:db:01:94:0e:3c:f4:2c:49:34:83:25:df:62:
b3:ad:c2:bc:a2:82:5f:34:73:5b:10:bd:03:d6:a2:0d:91:18:
bb:e2:6f:ed:52:e4:4e:5e:0e:2b:12:c5:9f:55:60:0d:75:ae:
8e:80:1d:f8:2d:23:9a:91:ab:b6:cb:d4:e3:14:1d:a8:90:12:
39:85:0c:1e:a3:1b:e4:35:20:24:81:70:a8:92:3c:a3:80:b7:
9e:dc:e2:cb:74:5b:c7:0b:6d:8c:e8:7a:9c:61:eb:b5:9a:e6:
1b:16:3c:be:82:78:01:3e:2f:56:b1:62:e2:4b:0a:76:a8:19:
e9:ef:4e:f2:18:92:76:4e:a8:b7:e4:1d:da:ac:e5:67:65:55:
27:42:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:43:25 2026 by rpki-client