Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: anDQV73craOxRfRKoG/v/gbILM3OAS036wPDQVQB3R8=
Subject key identifier: 80:28:1F:95:8E:0C:4C:D2:66:D7:D1:EB:22:3D:B7:59:A0:61:5F:2E
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019FACAD30CB919C01272AFD38BB8C3CFD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0AAB
Signing time: Wed 29 Jul 2026 07:00:59 +0000
Manifest this update: Wed 29 Jul 2026 07:00:59 +0000
Manifest next update: Thu 30 Jul 2026 07:00:59 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: ln47/svcvPUcaW54C9sSUUrcVpeY+/hY5UXWs37rJis=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:30:cb:91:9c:01:27:2a:fd:38:bb:8c:3c:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Jul 29 07:00:59 2026 GMT
Not After : Jul 30 07:00:59 2026 GMT
Subject: CN=80281f958e0c4cd266d7d1eb223db759a0615f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:73:25:e5:c1:f0:38:a1:24:84:db:7b:97:
1c:59:7e:24:29:fd:fb:5f:72:77:e5:4f:41:ee:0c:
15:41:eb:11:08:d0:d7:d1:9e:de:5b:97:16:f3:75:
81:77:cc:05:32:b1:4c:82:4b:48:de:b7:5d:62:c2:
56:16:1b:0e:b6:be:c8:46:04:a3:49:d2:1c:7a:a5:
4f:95:44:28:c8:eb:50:5b:b8:8a:2d:c9:00:a1:3b:
33:2c:2d:1f:b3:ba:ab:c4:9b:ae:b9:6b:03:9f:e1:
be:6b:5e:a6:3b:b2:cd:13:67:a4:6b:a0:d6:a9:64:
2f:65:68:5a:d6:e1:52:6f:c1:04:19:7e:8e:c1:95:
da:c0:21:25:b0:90:43:f9:ad:28:58:ec:44:e6:f6:
5d:79:5f:a3:ae:34:d8:73:76:a4:85:e0:38:ba:36:
be:85:06:03:c7:7a:85:08:87:f1:93:fc:e7:75:5b:
f5:90:c7:46:29:6e:e7:54:1a:f7:c5:71:0c:4c:0d:
0f:a9:bf:21:18:d2:5b:a4:d4:26:cd:f0:b0:3d:bd:
eb:c0:51:54:32:16:7d:45:3c:59:a5:2b:6a:80:2a:
86:89:84:5c:e1:b8:24:57:56:72:34:01:36:d1:da:
96:b2:38:c0:a6:6b:4b:d6:da:4b:47:56:43:72:36:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:28:1F:95:8E:0C:4C:D2:66:D7:D1:EB:22:3D:B7:59:A0:61:5F:2E
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ae:24:90:4a:d0:c4:b5:ee:2d:b7:1f:9b:34:54:c7:64:aa:
6c:78:bb:be:b1:d7:af:c7:79:f4:c8:c1:70:42:ee:fd:70:2a:
bd:33:fa:22:30:7f:bc:2b:e5:34:6d:eb:40:db:23:51:50:bc:
a8:66:ac:45:ee:98:cb:84:17:45:f4:9e:4b:57:4a:d7:c3:9b:
25:c2:f0:ef:36:26:60:f8:00:2e:40:57:c4:19:cd:21:87:65:
61:9b:5c:9c:b8:48:bc:25:4c:f9:55:84:b2:55:00:c9:c9:ca:
39:bd:9a:f1:0a:3a:25:7f:ce:0a:a6:98:ec:9e:f6:a7:bc:16:
b2:fe:6b:22:0d:fe:08:74:02:4f:e4:a7:3f:94:da:44:bc:03:
14:0a:46:04:87:23:1c:10:6e:2f:8f:fc:08:64:75:97:8e:97:
52:63:fa:1d:b0:ce:e5:e5:72:7c:c3:e8:9b:6e:7e:a4:ba:eb:
40:c8:ec:f3:d5:0e:db:ef:78:c0:3a:f6:e1:ba:5c:5c:5b:c3:
14:96:af:ff:9a:01:b3:59:78:f3:36:e2:fe:96:b5:61:b1:0e:
ea:a4:2f:d8:7d:d2:ef:35:50:fa:73:df:f6:f4:73:72:88:a2:
c0:ce:c5:d2:5c:2a:66:35:b6:a1:8b:50:fd:34:f2:08:b7:4d:
6a:4b:65:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srTDLkZwBJyr9OLuMPP0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjYwNzI5MDcwMDU5WhcNMjYwNzMwMDcwMDU5WjAzMTEwLwYDVQQD
Eyg4MDI4MWY5NThlMGM0Y2QyNjZkN2QxZWIyMjNkYjc1OWEwNjE1ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUZzJeXB8DihJITbe5ccWX4kKf37
X3J35U9B7gwVQesRCNDX0Z7eW5cW83WBd8wFMrFMgktI3rddYsJWFhsOtr7IRgSj
SdIceqVPlUQoyOtQW7iKLckAoTszLC0fs7qrxJuuuWsDn+G+a16mO7LNE2eka6DW
qWQvZWha1uFSb8EEGX6OwZXawCElsJBD+a0oWOxE5vZdeV+jrjTYc3akheA4uja+
hQYDx3qFCIfxk/zndVv1kMdGKW7nVBr3xXEMTA0Pqb8hGNJbpNQmzfCwPb3rwFFU
MhZ9RTxZpStqgCqGiYRc4bgkV1ZyNAE20dqWsjjApmtL1tpLR1ZDcjZwbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAoH5WODEzSZtfR6yI9t1mgYV8uMB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARa4kkErQ
xLXuLbcfmzRUx2SqbHi7vrHXr8d59MjBcELu/XAqvTP6IjB/vCvlNG3rQNsjUVC8
qGasRe6Yy4QXRfSeS1dK18ObJcLw7zYmYPgALkBXxBnNIYdlYZtcnLhIvCVM+VWE
slUAycnKOb2a8Qo6JX/OCqaY7J72p7wWsv5rIg3+CHQCT+SnP5TaRLwDFApGBIcj
HBBuL4/8CGR1l46XUmP6HbDO5eVyfMPom25+pLrrQMjs89UO2+94wDr24bpcXFvD
FJav/5oBs1l48zbi/pa1YbEO6qQv2H3S7zVQ+nPf9vRzcoiiwM7F0lwqZjW2oYtQ
/TTyCLdNaktl7Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:41 2026 by rpki-client