Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: 1hX1gX8p03nnBFDLyOqss+ajICK+F2vnnHRk8s9BszQ=
Subject key identifier: C5:6D:16:33:38:15:80:F9:7C:BC:14:30:26:86:F9:EB:CC:EA:A9:F6
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 019CAC468883C1CD8A48274428720B19FBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 02:00:29 +0000
Manifest this update: Mon 02 Mar 2026 02:00:29 +0000
Manifest next update: Tue 03 Mar 2026 02:00:29 +0000
Files and hashes: 1: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: ZntzIebKuQwxa3vT26HPsrJv72cn62UwK8CHLweC+lo=)
2: fhF1gg6tTaPV39pNHXzapn66B-4.roa (hash: 2B1HxgzGj1c2eVd/8cGSVbgWEoR1+FiouVzHrmQHR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:88:83:c1:cd:8a:48:27:44:28:72:0b:19:fb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Mar 2 02:00:29 2026 GMT
Not After : Mar 3 02:00:29 2026 GMT
Subject: CN=c56d1633381580f97cbc14302686f9ebcceaa9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:8d:91:74:25:49:c8:c0:1b:66:b9:74:13:
1c:7b:a2:48:bc:1f:7f:38:e0:4b:7e:ac:e0:fa:4d:
8c:1f:93:9b:18:98:c0:25:78:cf:56:89:c1:6d:15:
65:9a:37:c1:da:86:cd:8b:ec:13:a9:39:ba:9d:9c:
bb:d3:60:a4:97:c7:ce:5e:8f:2d:9e:73:21:22:c8:
6d:80:8b:2c:43:e6:b2:62:96:d1:a8:17:74:c8:42:
5a:24:35:77:8e:b9:b8:97:a4:2d:1a:fc:52:87:60:
85:d1:cb:0d:dd:c1:8a:68:d0:54:87:c3:99:df:bb:
e2:25:a0:5b:1d:5f:2f:68:34:d2:42:8e:34:66:bf:
39:35:ca:19:a0:df:96:f3:43:e7:1a:cd:fb:3a:6e:
2e:2e:e8:ce:76:12:51:ca:ce:73:17:83:86:a7:59:
a7:fd:99:75:0b:cc:dc:61:40:0a:0c:a6:83:99:75:
c1:3b:75:26:59:ce:2e:c8:4e:02:38:ae:d1:73:83:
1f:ea:e5:7f:8e:c8:88:14:7b:a9:b5:10:b8:2c:61:
e2:e7:b3:2d:39:c3:a2:a7:58:0d:d1:ef:96:e2:46:
bf:7d:3f:51:63:25:9a:92:8c:2c:b7:1c:f9:b8:e5:
1e:e8:e8:e8:10:e9:98:e8:6c:ae:b7:36:12:86:57:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6D:16:33:38:15:80:F9:7C:BC:14:30:26:86:F9:EB:CC:EA:A9:F6
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f7:02:5b:3c:63:63:36:0a:85:c0:3f:2b:82:1e:f5:89:a9:
6d:93:11:ba:65:43:f7:9a:46:78:6b:a2:9a:88:54:68:b6:88:
49:aa:f9:7a:76:34:e2:04:78:32:72:5d:eb:62:bb:32:66:76:
c8:ad:10:1b:4f:84:8f:b4:00:2a:95:a9:82:a6:4e:6f:a3:4b:
51:01:11:c5:ba:36:e4:2e:5e:eb:f9:e5:35:fa:ac:1b:bc:f5:
19:56:71:bd:a6:23:3d:4b:46:12:74:61:24:05:8a:9f:5b:bd:
54:df:f9:ff:f1:1c:05:24:78:94:d8:0e:38:f6:87:8a:93:1a:
1e:0b:68:dd:8b:4e:5d:d4:bd:c7:aa:54:47:cb:6c:30:c4:4d:
4b:15:b2:4e:60:30:c3:1e:b4:7a:60:2a:fc:8b:a3:40:52:75:
0f:a6:75:9f:a2:9e:c7:51:e7:25:73:47:d9:33:5f:c7:7d:f0:
b2:98:7c:fd:1f:56:2d:17:0e:e0:f3:bc:6e:03:b7:87:af:12:
ca:4d:56:9d:86:74:88:e2:e3:2f:38:2b:90:79:be:d0:17:e3:
a0:45:ca:61:68:aa:a8:b4:fa:ef:62:4d:9f:e3:d7:d5:66:76:
69:91:1a:cf:02:eb:3d:e7:b4:1f:07:57:da:79:3c:23:ab:c5:
f5:31:a4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:43 2026 by rpki-client