Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
File: KRKNnU8aVulw-HRtaCesESD5Jmc.mft (raw, json)
Hash identifier: vhjH2GDohKVH0YTQ61R3nVgkp3/iDrQ/zyOz305MvB8=
Subject key identifier: 5B:09:FA:BE:C1:62:C5:46:6E:91:E8:3A:9A:B8:72:F4:7B:F1:F6:5A
Authority key identifier: 29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
Certificate issuer: /CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Certificate serial: 01A13CA5B6B693367BB6C6119FB78A0134B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
Manifest number: 05A9
Signing time: Wed 14 Oct 2026 23:00:55 +0000
Manifest this update: Wed 14 Oct 2026 23:00:55 +0000
Manifest next update: Thu 15 Oct 2026 23:00:55 +0000
Files and hashes: 1: 8KaJwIuZexyBoZjYRmZrjQf9lJQ.roa (hash: LrRg49gpH/+ELMxEyexBUIqT8W2t/5VIfE4dXyblhxM=)
2: KRKNnU8aVulw-HRtaCesESD5Jmc.crl (hash: bCIE9aevjXcZXilOOBNoaLmJf22sCB0GbHhrifuToJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:b6:b6:93:36:7b:b6:c6:11:9f:b7:8a:01:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29128d9d4f1a56e970f8746d6827ac1120f92667
Validity
Not Before: Oct 14 23:00:55 2026 GMT
Not After : Oct 15 23:00:55 2026 GMT
Subject: CN=5b09fabec162c5466e91e83a9ab872f47bf1f65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:92:47:1c:87:41:d5:5b:51:6a:24:12:1a:
47:14:c0:49:1e:28:24:66:ef:92:a9:6b:11:d9:12:
ca:73:3c:09:42:9b:2b:35:da:d3:9f:22:b9:e1:21:
90:8e:b9:60:aa:ff:16:f2:c9:29:13:9b:99:f9:a6:
15:e9:93:c3:75:a6:a9:0e:af:f8:3f:80:0f:21:49:
6a:4d:c7:7d:3b:43:b1:d3:3e:5d:7c:7c:b3:a8:99:
7b:e7:b1:13:30:9e:32:e5:c5:e9:d0:dc:5f:ef:1f:
69:8a:2e:6f:44:20:16:48:e0:b6:55:d1:e7:53:aa:
8f:3a:71:6f:2f:ae:b2:c0:9e:67:35:78:8d:39:dc:
72:63:b2:6b:84:46:54:81:d4:a0:88:2d:f7:35:a1:
2b:44:e1:ec:6b:42:8b:62:49:f5:49:3f:98:60:7f:
54:bd:05:0b:5a:7e:d4:76:8e:ec:8e:3d:73:e6:00:
32:00:82:ae:6f:f6:19:78:cb:ef:07:47:95:e7:12:
64:cd:9b:37:c3:66:da:05:af:6c:0a:64:83:fd:cc:
55:c7:76:e4:01:04:6d:9a:56:80:4b:16:39:54:2c:
c4:10:19:b9:47:28:dc:fa:8a:80:d1:67:d4:d3:d5:
c3:fe:df:c2:5f:af:dd:23:4c:10:05:be:db:46:79:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:FA:BE:C1:62:C5:46:6E:91:E8:3A:9A:B8:72:F4:7B:F1:F6:5A
X509v3 Authority Key Identifier:
keyid:29:12:8D:9D:4F:1A:56:E9:70:F8:74:6D:68:27:AC:11:20:F9:26:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRKNnU8aVulw-HRtaCesESD5Jmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/11477c-8452-4abb-9147-f0b09c0c90c7/1/KRKNnU8aVulw-HRtaCesESD5Jmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b7:e7:56:9a:da:fb:74:56:97:06:a8:81:7a:9c:62:ec:c1:
87:07:dd:ed:91:72:6a:fd:4a:63:02:5d:f7:d4:88:cf:da:cf:
fb:4d:83:a9:00:8d:5e:ea:18:44:af:35:94:2f:65:51:77:c4:
ee:e5:8f:3b:7c:e2:bf:2d:83:85:cd:eb:f2:1c:e1:f7:78:1a:
8e:48:8d:06:20:06:53:41:47:df:e4:6c:80:99:a8:12:b0:19:
40:f3:b9:07:b3:30:15:af:f6:4e:2b:67:1a:18:d9:b1:fd:15:
c2:f0:6d:1d:8d:57:5a:b6:49:e2:e3:4a:33:b6:43:15:49:8a:
f9:65:59:01:8f:57:14:c2:1a:ea:03:f5:d9:1d:3d:22:dc:6a:
39:d3:3f:a3:5b:df:3f:50:74:dc:03:65:36:59:d5:f7:41:bf:
24:a0:67:9f:ed:64:04:40:6b:c4:90:ae:15:ff:c0:33:94:f3:
71:e5:32:0a:fd:82:c5:e8:2d:27:44:fd:45:ad:88:b1:d2:0f:
5d:fd:a0:b0:8c:95:f1:36:aa:07:ed:be:46:6b:e7:ec:6c:75:
7c:ab:76:56:14:38:bd:19:c8:93:da:c7:53:0a:78:90:f8:a4:
4a:26:a2:74:ba:58:a8:6f:fe:19:11:6d:51:ba:b1:ca:08:60:
53:8a:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:31:09 2026 by rpki-client