Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: ru3ePZg7+gMW6MVrFctbNxJ6zO1JuJrasnD/ttZKEeY=
Subject key identifier: 7D:FD:DA:DE:37:8C:3F:12:F0:EA:4E:30:8E:29:C9:B5:84:CF:56:03
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019D97AADEBD2B3B36F8E9FA8BF92C38AA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0997
Signing time: Thu 16 Apr 2026 19:00:50 +0000
Manifest this update: Thu 16 Apr 2026 19:00:50 +0000
Manifest next update: Fri 17 Apr 2026 19:00:50 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: isIptrO+THZ4bN8KiDo6v737fMUiqjLJOaA2VHkoxDU=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:de:bd:2b:3b:36:f8:e9:fa:8b:f9:2c:38:aa:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Apr 16 19:00:50 2026 GMT
Not After : Apr 17 19:00:50 2026 GMT
Subject: CN=7dfddade378c3f12f0ea4e308e29c9b584cf5603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:8d:c6:f9:f7:4b:d5:15:4f:62:54:34:7f:
cd:99:9a:4f:a8:67:44:dc:4d:4d:48:85:d6:8a:2a:
35:55:f9:9b:c9:67:df:ec:19:b2:2b:64:1a:55:18:
0c:01:4e:f0:6b:19:7a:bf:b9:c0:d7:0c:38:50:08:
e5:3d:1a:bb:18:c1:37:44:e3:f7:43:88:30:1c:68:
72:71:21:3b:eb:8c:99:3c:15:7c:6f:71:1b:c6:04:
9f:27:ad:e8:d0:22:10:36:09:06:ca:4d:54:36:b7:
9c:67:50:6c:ab:84:ae:95:3c:6d:28:c2:d2:fd:10:
bf:dd:8c:ee:22:0c:f6:98:86:67:29:93:48:39:d9:
46:ce:80:2d:ed:60:fa:3e:e6:62:04:1a:30:9f:2e:
bc:bf:66:e2:7a:70:45:39:00:fc:38:12:f1:e1:3e:
99:f8:d6:15:6d:7a:06:4b:8b:24:3d:81:37:b1:2c:
52:24:47:54:48:2f:de:32:4f:d5:8f:4c:ea:78:16:
0b:08:4e:02:8d:4c:10:f0:1a:a2:b8:22:89:94:3d:
49:ff:26:09:10:33:b8:56:9d:f4:11:d7:38:20:ad:
b1:13:65:b6:24:37:37:f8:a2:ab:d9:bc:12:af:a2:
dc:e9:1d:8e:33:0f:90:6a:eb:1f:08:8e:e9:61:dc:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FD:DA:DE:37:8C:3F:12:F0:EA:4E:30:8E:29:C9:B5:84:CF:56:03
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:49:32:45:49:cd:44:61:f8:4c:d1:6b:f4:c5:33:b1:51:44:
09:b6:de:f3:7f:df:09:8b:67:3c:76:36:f7:a3:5b:16:eb:1d:
23:45:89:b4:75:06:c5:5c:55:6b:1e:8e:c4:44:79:f9:c1:85:
a8:9f:36:e1:56:6d:b9:7d:bb:65:c1:31:77:5c:28:75:89:f9:
38:21:fd:fd:a3:10:fa:20:ca:97:2f:76:0e:49:d9:cd:c4:c1:
9c:8f:a5:67:02:fd:33:de:45:b5:1f:55:cd:13:07:2b:41:d2:
bb:cc:c1:2a:24:3d:40:aa:93:cf:0b:08:de:26:88:dc:7a:47:
26:90:a8:e7:69:08:3d:4d:09:46:ea:2f:a0:f4:d7:a2:0b:35:
31:e9:da:4a:d1:c0:95:36:4d:4c:99:47:f8:b3:4b:25:a9:6a:
09:d8:92:da:cd:4d:65:4c:7c:31:5c:32:96:4f:1c:97:d8:9e:
95:71:6c:09:30:a8:45:98:6c:97:c9:9c:88:cd:14:7d:f0:7c:
e5:8a:cd:3f:72:be:0b:dc:30:f2:d6:07:b5:57:d7:b0:43:01:
b7:77:c0:bc:44:5c:03:2c:2e:67:87:78:51:af:5a:05:4d:5a:
21:47:d8:05:36:03:e5:ae:34:be:cf:e0:c5:1e:77:8e:66:cb:
1c:73:80:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:55 2026 by rpki-client