Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: S3lvREJxGdfCorIq4HOogNzmOQV2SdJCG8YUk0xKa5E=
Subject key identifier: 04:F2:75:18:B2:3F:B0:DA:29:C8:51:DE:4D:82:AC:56:23:09:3C:A9
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019CADFE4B6544BAC233759A4026D859AA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 091E
Signing time: Mon 02 Mar 2026 10:00:49 +0000
Manifest this update: Mon 02 Mar 2026 10:00:49 +0000
Manifest next update: Tue 03 Mar 2026 10:00:49 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: xMBOc72zNlhQ8N5NrmTe0lWARPdswqhbofQcAqRvqyo=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:4b:65:44:ba:c2:33:75:9a:40:26:d8:59:aa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Mar 2 10:00:49 2026 GMT
Not After : Mar 3 10:00:49 2026 GMT
Subject: CN=04f27518b23fb0da29c851de4d82ac5623093ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:3a:7c:dd:ce:5a:d6:12:62:d6:6a:f3:77:
c8:e5:2a:d9:df:92:15:48:4e:73:a9:7d:45:04:6c:
5f:32:eb:fd:59:34:53:0a:03:b3:a5:b9:3f:c4:99:
a1:62:b4:89:47:ee:53:b4:74:36:6a:1b:cb:33:ec:
d6:df:8b:97:ff:f1:d8:b7:fe:51:2d:71:b3:62:5a:
2d:9a:27:b0:6a:25:26:19:c1:f0:ff:c0:26:e8:d9:
62:e6:43:56:48:41:57:d6:f6:be:1c:b0:cf:92:25:
05:45:03:cb:9d:64:73:56:0f:a4:f3:5e:c0:60:73:
36:d9:4a:5a:31:09:31:10:ee:63:0e:9b:91:79:32:
30:b8:e2:ed:47:53:8d:4b:d0:54:fc:f5:b3:31:03:
8c:72:1a:b5:31:34:d6:1a:8a:7b:16:d5:11:49:9a:
76:e5:c5:c1:98:72:ba:f9:9f:7b:fa:29:1c:fd:90:
2c:74:aa:af:4f:f3:60:00:5d:1f:81:b5:4b:0e:a0:
03:95:10:37:98:a8:d2:5a:58:1b:c4:68:09:d8:95:
c5:d8:b4:2a:1f:9d:64:81:d6:d6:1d:45:09:96:fb:
a9:97:34:80:c9:55:4c:4d:f1:d5:c9:35:c2:aa:fd:
33:03:51:80:c5:cd:b1:6f:07:54:0f:83:ee:c1:12:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F2:75:18:B2:3F:B0:DA:29:C8:51:DE:4D:82:AC:56:23:09:3C:A9
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:82:d5:42:ff:9e:b6:aa:6c:a5:5d:66:c7:a7:87:c5:d5:
2b:dd:49:a5:2a:bd:cc:b3:a7:82:61:d5:cc:67:69:02:65:64:
60:3b:a2:1a:9c:ff:e2:0a:db:55:5d:54:84:b3:b8:9a:cd:1d:
e2:84:ec:6f:9b:92:90:34:16:27:21:ca:a7:85:78:62:43:6d:
e4:e9:a0:08:8e:33:72:a4:83:a9:92:db:12:f8:9d:28:79:62:
ab:da:49:72:c8:a4:e7:e5:bb:ed:32:39:f2:63:2b:c0:b0:89:
7f:ff:f5:de:77:90:10:7a:66:91:1a:4e:42:18:38:94:3d:0b:
90:03:a5:52:99:e3:11:2a:eb:fc:0b:36:62:ce:53:f0:6e:7a:
cc:13:da:11:46:c0:36:6b:9c:d7:89:db:b8:f1:1f:a0:01:3b:
90:a7:46:1f:2d:e3:e3:35:87:4e:49:28:a4:f6:af:a5:50:10:
c0:b5:20:87:44:14:61:06:bf:31:ed:2c:14:5a:32:5b:64:d4:
9f:46:6a:5c:78:89:19:fe:7d:e8:89:e9:e3:03:c6:4d:3f:24:
c5:99:b2:76:94:40:b4:71:c3:d2:18:10:89:ef:af:8c:ca:0a:
85:38:f7:65:00:4c:c2:3e:e8:06:b9:41:1e:2b:9b:07:74:6b:
a6:28:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:21 2026 by rpki-client