Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: W0J8lZNBKBYqnETlNCu4lsE9EWWf3Sykq95iPn3nN0o=
Subject key identifier: 9D:B3:3A:37:FE:86:D2:0F:1E:89:78:36:CE:3C:FB:47:0F:50:83:5D
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01A1273091072CA3ACB2696ED8E01977CEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0B6F
Signing time: Sat 10 Oct 2026 19:00:56 +0000
Manifest this update: Sat 10 Oct 2026 19:00:56 +0000
Manifest next update: Sun 11 Oct 2026 19:00:56 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: 6ApY0hEQqQIBUSUqFxCXdRiEmmZviyhjvApRuK2KFao=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:30:91:07:2c:a3:ac:b2:69:6e:d8:e0:19:77:ce:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Oct 10 19:00:56 2026 GMT
Not After : Oct 11 19:00:56 2026 GMT
Subject: CN=9db33a37fe86d20f1e897836ce3cfb470f50835d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:9b:0d:d2:db:4e:86:a8:0f:88:90:8b:16:
c3:cf:7b:62:48:71:5d:59:f8:33:3c:87:23:60:72:
7f:0b:b3:6c:7e:8d:3d:96:3b:d9:2e:65:2b:22:a3:
88:7c:d3:02:51:4d:d7:b4:49:ba:03:f3:91:ff:b5:
f0:c1:38:cf:fd:0a:34:52:27:e8:1e:00:13:a0:74:
23:4d:00:6c:2f:53:02:1a:ae:84:76:88:b8:93:12:
e8:0f:48:bf:55:3e:df:96:d8:06:16:b8:cd:cb:33:
53:57:81:0d:77:b4:10:42:0d:79:a8:3b:9b:0d:f1:
df:a2:cf:83:89:8f:ed:71:fb:12:28:fa:74:3c:97:
de:b4:6f:7c:da:94:10:61:b6:f0:ae:bd:ba:3b:f2:
76:49:35:24:19:f0:7a:35:35:cd:af:e5:56:3e:3e:
05:32:a6:38:8a:2a:08:59:b4:d1:19:18:5b:5f:92:
a5:31:be:de:d3:9d:82:c6:16:16:02:2a:d7:45:7e:
9b:68:ac:ee:12:49:fa:40:fd:9f:95:22:26:0b:55:
27:83:e8:87:cf:09:65:3d:b5:5e:b1:de:98:1a:74:
52:4c:e2:37:af:fb:b6:f9:51:45:28:1b:95:51:97:
eb:01:42:36:f4:80:2b:b3:d7:c4:6e:92:56:4c:a6:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:3A:37:FE:86:D2:0F:1E:89:78:36:CE:3C:FB:47:0F:50:83:5D
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:aa:b6:2a:ef:67:11:89:2c:e0:16:99:27:6b:fa:6c:d1:b1:
f7:4a:eb:a3:82:a9:a3:4c:c8:57:44:75:51:c8:85:d6:35:c8:
33:30:b6:23:ab:52:f6:10:39:7b:d9:61:34:d3:b7:1c:98:5c:
2e:9a:6d:1c:c6:82:d5:73:97:34:28:b1:94:02:6e:64:71:7b:
7f:4c:9c:8c:22:58:11:a4:47:02:4d:26:f5:c0:26:6c:69:e8:
e7:aa:54:91:5d:85:a0:18:b4:99:b0:bf:db:2f:5a:e7:60:32:
2d:f8:18:32:fd:cf:02:22:93:6f:ea:a3:47:90:51:68:21:bb:
da:c8:85:13:5a:e1:4b:5e:fb:26:97:10:e4:53:c5:28:ac:c7:
62:16:82:d6:02:9b:32:06:d0:fd:5f:99:25:30:60:d3:a8:db:
1b:3a:da:91:64:7a:88:04:5a:61:d2:95:e4:f8:c4:97:b5:ca:
68:6f:f5:cb:f6:e0:bf:d5:21:09:a8:79:30:c2:cb:95:85:9e:
ea:09:bf:13:99:0c:f8:44:1d:c6:f7:30:54:f9:96:68:0d:fc:
da:f0:94:e7:33:1a:7f:82:5a:9d:6a:09:a8:8b:cf:95:91:75:
cc:83:52:ff:ec:29:c9:a4:69:e7:51:b6:6f:6f:65:74:07:d7:
35:21:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:07:45 2026 by rpki-client