Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: 9ZL15nWzE38UOiqReQgmXI+hbmEb1pdLpSAYzWNqtZU=
Subject key identifier: 31:C6:E7:9E:0A:A9:CA:28:55:8A:6C:20:2D:28:17:3F:0B:A7:99:C6
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019CAB33E072F0D49F02F0B3EB4C853B1360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 176C
Signing time: Sun 01 Mar 2026 21:00:29 +0000
Manifest this update: Sun 01 Mar 2026 21:00:29 +0000
Manifest next update: Mon 02 Mar 2026 21:00:29 +0000
Files and hashes: 1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: XoVUeXmOTEZwNaAQsShbrgXYk/0ocp6sd0GwrVZrTzY=)
2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e0:72:f0:d4:9f:02:f0:b3:eb:4c:85:3b:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Mar 1 21:00:29 2026 GMT
Not After : Mar 2 21:00:29 2026 GMT
Subject: CN=31c6e79e0aa9ca28558a6c202d28173f0ba799c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:6c:13:d8:9b:99:07:fc:47:f7:3e:59:78:
b4:3a:07:cb:a6:a6:be:81:2c:08:0e:d9:d7:ce:76:
f4:ed:a5:a7:bb:66:15:e7:e1:7a:7c:11:a7:fa:77:
6e:06:75:8d:67:93:2b:38:c0:46:13:cb:8d:f3:1b:
0b:53:ef:c8:52:04:8a:03:0c:86:b7:87:10:13:7c:
15:fb:4f:83:0f:0b:cf:00:f1:b4:a3:69:aa:31:2c:
cb:73:1f:1c:26:05:00:2e:23:12:5f:cb:b8:8f:3c:
79:dc:07:3a:c5:53:38:a3:ab:59:08:f0:d1:e3:a4:
c3:72:a8:3f:3c:3b:cc:c1:78:96:cf:71:46:4b:9d:
85:6f:21:f9:99:43:dc:11:6e:03:40:ae:aa:10:02:
89:58:24:b2:c2:26:c7:17:1e:d9:b4:a6:99:22:d1:
b7:51:ed:dd:e9:94:e2:3b:e1:91:ed:57:1f:68:87:
a2:dc:59:50:4c:26:1a:f2:5f:a1:92:b1:2b:45:d4:
a8:c6:20:00:ac:7d:86:60:fe:4f:7c:9c:29:05:02:
1e:50:78:a7:a5:e3:db:6b:65:d7:af:57:92:db:94:
59:06:b8:82:11:28:33:ec:92:49:6d:ff:3b:01:11:
d5:cb:a8:e0:5e:73:82:7e:a2:13:c2:bf:a7:98:83:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:E7:9E:0A:A9:CA:28:55:8A:6C:20:2D:28:17:3F:0B:A7:99:C6
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c3:5a:a3:bf:33:37:7d:aa:6b:05:1f:0e:97:61:ed:b6:e6:
8b:04:12:70:4d:88:d3:be:b8:2d:ae:80:e1:1e:d0:59:8e:7e:
ae:18:56:cc:eb:cf:4b:75:30:f3:05:f8:40:56:0a:30:f1:98:
2e:57:2d:5f:b3:5a:69:a8:25:b4:ce:b9:05:9f:9b:eb:99:7f:
48:e8:48:a4:25:cd:a0:5f:e7:60:7d:27:89:19:26:67:08:14:
71:3b:f0:05:5d:79:0c:f8:23:1b:04:dc:57:e5:fa:97:4b:c5:
61:80:62:5f:75:a2:1b:88:88:38:a6:e8:25:20:59:ca:8a:00:
86:a6:6e:59:c3:9b:5f:e1:d2:b4:3c:d1:88:23:ca:0d:27:6b:
1a:2d:c1:1b:a6:29:26:5d:02:02:09:0e:88:66:3c:6b:0f:a5:
ce:9c:64:6e:c5:85:25:cc:fe:ab:7d:d1:2a:d3:23:35:e3:c2:
8b:21:79:c1:3a:43:bb:1d:1b:9e:27:e8:31:71:93:bd:b1:59:
f1:d1:c3:bb:94:e3:a4:5d:8c:23:62:e1:87:c1:07:43:7c:67:
15:98:4c:86:92:11:1e:d0:c8:a9:bc:ef:49:d8:e2:be:71:c9:
07:c1:4b:82:53:bd:f3:2a:29:50:1b:3b:9c:82:9e:1e:ce:39:
19:b8:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:41 2026 by rpki-client