Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: e+wwKlvtWo4CYpwTBHgaGuBdUINbMpLI/95jGJrWfUE=
Subject key identifier: DE:54:A7:10:2D:39:B3:81:92:26:07:4C:AD:FE:C3:2D:2C:6B:94:1B
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01A1254223C262C96819C8201C22D688EE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 0B6E
Signing time: Sat 10 Oct 2026 10:00:53 +0000
Manifest this update: Sat 10 Oct 2026 10:00:53 +0000
Manifest next update: Sun 11 Oct 2026 10:00:53 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: TF6fmll6a8q5WxpZIuWNY7r4GsNqo4G+Zp0TrYmT/04=)
2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:23:c2:62:c9:68:19:c8:20:1c:22:d6:88:ee:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Oct 10 10:00:53 2026 GMT
Not After : Oct 11 10:00:53 2026 GMT
Subject: CN=de54a7102d39b3819226074cadfec32d2c6b941b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:52:31:1c:a6:97:22:31:1c:87:a0:a0:ce:
94:26:25:a6:c9:40:41:58:60:a4:f1:f7:1e:25:1d:
1c:b2:d8:5b:4c:28:e3:50:42:c0:ca:a4:d1:52:57:
c8:96:47:c1:6d:c3:44:58:1a:a7:41:66:de:0d:5a:
55:d6:49:a9:6a:f4:e1:88:bb:d3:b1:34:9b:62:22:
be:e6:cf:ac:1b:39:ee:9b:71:6f:83:e8:dc:d8:e2:
6d:71:76:96:37:fb:28:a9:a3:c7:56:3e:fa:9e:3e:
43:da:50:eb:a6:12:d6:1f:be:c5:4c:dd:d4:1f:be:
5f:da:b9:d4:0c:75:a8:94:16:e7:cc:08:be:13:85:
7f:10:a6:67:a3:d6:9b:d6:ee:e4:90:f9:15:64:4e:
02:32:49:da:bf:1c:2d:b2:c2:eb:2c:75:3b:31:cd:
d6:f5:2e:37:e8:fe:9b:38:7e:a9:fd:26:32:8e:64:
6c:4a:8d:0b:08:ea:ad:e5:9c:55:bc:9c:1e:0e:10:
38:14:b3:df:49:85:09:c7:ca:7d:5f:ea:87:32:70:
e0:81:7a:f8:92:c1:08:a7:41:c6:55:40:8f:76:6c:
79:f4:70:8e:49:1f:58:eb:d1:96:24:82:ed:68:07:
47:be:14:2e:6d:7c:b1:3c:38:e7:08:09:63:d0:6a:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:54:A7:10:2D:39:B3:81:92:26:07:4C:AD:FE:C3:2D:2C:6B:94:1B
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6c:3e:15:1d:11:52:4a:52:92:2f:5e:f0:82:85:af:06:42:
d6:c4:0d:8c:57:cd:8c:0e:0e:2a:65:b1:5f:32:2d:12:63:66:
e2:f5:92:3b:cd:02:bb:53:a6:18:24:8a:ea:67:b4:4d:d0:da:
c4:3e:69:66:63:c3:fb:86:8d:be:a3:6e:a2:1e:a0:d9:ee:07:
80:97:4a:ad:bf:c0:c8:b4:28:a4:79:08:5f:cf:1d:f1:2d:ec:
12:5e:f4:4b:bf:37:65:56:ef:88:0a:ef:57:81:9c:42:da:02:
99:01:d8:75:36:91:4c:a2:e4:57:c9:aa:b0:9e:08:1b:7d:c3:
f2:3b:68:03:f1:aa:e6:fc:a6:76:74:ee:f0:93:4c:20:50:a9:
f9:7b:51:bc:17:31:39:10:74:c7:18:df:9c:32:75:4d:91:ad:
06:c2:5c:e0:5f:11:35:7d:7e:e8:f8:02:59:f2:51:d5:2a:cb:
0d:7e:92:15:c6:af:c1:c6:08:58:4f:21:19:a8:d0:63:28:b7:
cc:05:f8:f3:4f:5b:f9:31:de:67:01:13:46:d0:04:3f:fb:3c:
99:3c:6b:9f:37:6e:f1:a8:c7:44:28:7c:54:98:9c:e9:98:ef:
f5:f6:02:e8:d1:e6:1f:fb:09:aa:22:d2:e8:75:d4:d5:8d:aa:
73:74:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:08:33 2026 by rpki-client