Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: EHCnNx353oV7E05OZkB64pmmjwmSgtzTKZvMOBhPJVs=
Subject key identifier: 4C:BD:BF:11:34:0C:87:4C:1E:E3:AB:AB:ED:F2:A9:78:35:A2:48:F4
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019EC300D6953B117823F10D138B4DBAD197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0A32
Signing time: Sat 13 Jun 2026 22:01:12 +0000
Manifest this update: Sat 13 Jun 2026 22:01:12 +0000
Manifest next update: Sun 14 Jun 2026 22:01:12 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: oV3BYipNK1zOZfkGuRCgsx6EFWAMdif3lCYvNp8zaa4=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:d6:95:3b:11:78:23:f1:0d:13:8b:4d:ba:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Jun 13 22:01:12 2026 GMT
Not After : Jun 14 22:01:12 2026 GMT
Subject: CN=4cbdbf11340c874c1ee3ababedf2a97835a248f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:5d:ba:4c:31:b7:29:3f:02:a8:fa:c7:fa:
73:c7:5b:72:b7:1a:65:29:bc:48:e9:3c:80:1f:dd:
e1:a4:17:03:ec:31:a2:9c:96:19:dd:be:dd:1a:b4:
1a:b2:34:60:e5:0d:b5:27:57:21:66:b2:71:21:81:
4f:bb:3a:9c:7b:4f:f4:8b:9e:39:20:31:24:6d:15:
92:7f:fd:eb:a0:69:89:d7:7e:a5:80:d2:6e:b5:35:
10:97:8e:8a:ff:ad:1e:aa:57:54:1b:8c:03:f8:59:
57:9a:32:ca:e0:72:40:9f:45:9b:df:1a:0f:90:a2:
68:43:34:9c:d4:5e:63:ff:01:33:2e:6c:ec:cb:9a:
69:19:93:c7:3d:61:3c:07:66:43:28:d7:85:ab:12:
92:90:7f:1e:be:49:2d:7f:74:97:31:ea:b6:a2:65:
86:7c:39:23:a1:5e:c5:2e:fb:94:19:43:f5:13:7e:
60:b9:f2:77:95:28:31:51:af:14:65:2a:bb:c4:d1:
72:e3:df:fb:26:f5:2b:6c:89:a8:0f:e8:71:9b:8b:
e9:b4:e3:4e:30:20:d0:66:c7:bf:05:55:f1:83:f1:
49:c1:e7:9f:c1:19:e0:75:2f:86:6a:72:67:2c:13:
b6:3a:39:84:4b:99:a9:32:6e:60:f1:1d:ee:bc:13:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:BF:11:34:0C:87:4C:1E:E3:AB:AB:ED:F2:A9:78:35:A2:48:F4
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7b:32:de:51:de:c9:10:51:22:9a:25:3a:b1:eb:ad:1c:31:
b6:8e:3f:00:9d:9a:bf:1d:dd:7b:79:c9:30:3d:77:cb:fe:89:
9f:68:bd:e8:ba:90:d3:ca:06:dc:12:18:04:b6:ec:a6:bc:4f:
97:9f:e3:af:49:59:f1:5e:9f:93:12:83:f9:f2:f8:5c:64:c0:
d1:51:09:ac:d9:c0:0d:0f:a1:df:15:c8:f3:86:da:f7:aa:74:
d2:91:2e:9e:2d:39:df:1b:53:9b:41:55:11:64:25:0e:f9:0a:
b2:c5:10:3c:dc:c0:dc:aa:18:99:13:0f:96:d5:6e:5a:8f:db:
cf:d0:01:5e:83:80:8c:37:4b:2b:88:34:3b:96:a1:e7:7d:27:
6a:6a:8b:0e:c5:61:f2:85:7f:d6:62:2a:5e:06:1d:d6:41:3e:
83:5b:80:a4:aa:71:58:b2:0d:e7:3e:7b:2f:49:dc:e7:83:c4:
9e:ca:48:36:ee:6b:ac:00:e1:c7:6b:01:80:e2:ed:01:ad:3b:
0d:5f:25:33:f5:5d:b6:65:54:74:b5:41:95:80:f4:ad:dd:20:
0a:fb:8e:c9:6e:3f:2c:0f:fe:ba:39:bf:b9:4f:68:61:7f:37:
f5:1a:35:b5:56:a2:4e:81:2c:7a:95:c8:54:cf:44:de:d6:15:
67:f8:53:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DANaVOxF4I/ENE4tNutGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjYwNjEzMjIwMTEyWhcNMjYwNjE0MjIwMTEyWjAzMTEwLwYDVQQD
Eyg0Y2JkYmYxMTM0MGM4NzRjMWVlM2FiYWJlZGYyYTk3ODM1YTI0OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYxdukwxtyk/Aqj6x/pzx1tytxpl
KbxI6TyAH93hpBcD7DGinJYZ3b7dGrQasjRg5Q21J1chZrJxIYFPuzqce0/0i545
IDEkbRWSf/3roGmJ136lgNJutTUQl46K/60eqldUG4wD+FlXmjLK4HJAn0Wb3xoP
kKJoQzSc1F5j/wEzLmzsy5ppGZPHPWE8B2ZDKNeFqxKSkH8evkktf3SXMeq2omWG
fDkjoV7FLvuUGUP1E35gufJ3lSgxUa8UZSq7xNFy49/7JvUrbImoD+hxm4vptONO
MCDQZse/BVXxg/FJweefwRngdS+GanJnLBO2OjmES5mpMm5g8R3uvBOEvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy9vxE0DIdMHuOrq+3yqXg1okj0MB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3sy3lHe
yRBRIpolOrHrrRwxto4/AJ2avx3de3nJMD13y/6Jn2i96LqQ08oG3BIYBLbsprxP
l5/jr0lZ8V6fkxKD+fL4XGTA0VEJrNnADQ+h3xXI84ba96p00pEuni053xtTm0FV
EWQlDvkKssUQPNzA3KoYmRMPltVuWo/bz9ABXoOAjDdLK4g0O5ah530namqLDsVh
8oV/1mIqXgYd1kE+g1uApKpxWLIN5z57L0nc54PEnspINu5rrADhx2sBgOLtAa07
DV8lM/VdtmVUdLVBlYD0rd0gCvuOyW4/LA/+ujm/uU9oYX839Ro1tVaiToEsepXI
VM9E3tYVZ/hTyA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:43 2026 by rpki-client