Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: 9+xBBduYsUEgI7pcdqCHReMmcKzW1ecdQ+mAhOtvXc8=
Subject key identifier: E0:A9:B6:A3:C6:24:ED:29:CD:75:52:E7:AF:DC:04:55:78:26:B3:80
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019CAA590823A7D4C14B9CFA1E9542882C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0EDB
Signing time: Sun 01 Mar 2026 17:01:27 +0000
Manifest this update: Sun 01 Mar 2026 17:01:27 +0000
Manifest next update: Mon 02 Mar 2026 17:01:27 +0000
Files and hashes: 1: 6e697LuZ9jS9gA2F89nGR0cFK-I.roa (hash: ci7j6TFk0kfg5Gm37B2a5yzK2NylCLyZsggMovKNNBs=)
2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: VJ1QpSW1v+8kavAfdTUgDAkZf2aFxr86z9BUGdA6M/I=)
3: TMapBMpm5rX0-gIoWzb76bSTSuI.roa (hash: R4mwMpiCVjsTtSxaIqIQla1zIyz7FbLUvXLev4eE1XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:08:23:a7:d4:c1:4b:9c:fa:1e:95:42:88:2c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Mar 1 17:01:27 2026 GMT
Not After : Mar 2 17:01:27 2026 GMT
Subject: CN=e0a9b6a3c624ed29cd7552e7afdc04557826b380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:7e:92:4d:6f:20:6f:9e:10:6a:5c:15:f0:
b9:67:32:ff:01:e2:40:1c:50:e0:a0:4d:a9:15:1a:
ce:63:1b:10:7f:b5:23:39:7a:6e:17:27:36:8c:4f:
0f:b7:97:32:ff:d9:fb:cd:a5:49:3b:7c:73:8f:4c:
18:c0:86:72:f0:a3:5f:1f:3a:b0:28:d9:7b:3e:a6:
db:8f:1f:85:55:10:0c:cc:76:27:c1:1a:ab:51:56:
80:03:df:1d:36:fe:99:78:72:4a:41:ea:79:24:3e:
01:78:2f:13:dc:d6:f4:11:03:f7:8c:cf:2c:a9:d7:
2f:06:27:75:be:2c:ff:ed:56:e0:7e:e0:32:95:ac:
08:3b:3b:a9:04:4a:8d:9a:b2:65:8e:b8:b4:0f:69:
37:be:18:99:3b:42:aa:27:c5:17:ba:cc:58:37:91:
af:ea:d4:07:b3:87:24:76:72:c8:ab:0f:9d:c6:3b:
2d:22:a3:93:09:06:c0:2e:8b:12:6a:e5:7f:f5:5c:
39:a7:43:76:85:97:02:98:92:f2:7a:fe:ac:e8:fd:
e0:35:19:60:74:5d:49:6d:d1:fd:d7:1e:49:b4:82:
d9:46:cb:e0:1e:75:79:e6:41:25:af:7f:76:23:5f:
70:2b:1b:16:b0:7f:9d:c3:f8:7b:1a:71:68:b8:78:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:B6:A3:C6:24:ED:29:CD:75:52:E7:AF:DC:04:55:78:26:B3:80
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e0:7e:1b:48:1b:32:82:15:0d:7d:ce:23:ff:ac:7f:d7:99:
7c:c9:86:cf:4e:f9:72:07:d9:76:b9:73:f8:c4:dc:a5:25:9f:
6a:f1:b6:ea:6b:9a:3e:ab:9d:fa:b1:67:be:86:0c:89:df:13:
9f:ac:a3:ef:d1:7e:a1:a9:27:53:06:63:c2:c9:ca:c6:29:f7:
c2:54:32:fd:37:12:62:3e:68:64:e2:50:ae:1a:43:60:c2:1b:
8f:06:bc:97:75:ce:1e:1c:23:27:9a:ce:81:95:7e:07:dd:2a:
84:ca:20:b4:a3:c2:3f:5c:4f:48:49:9d:c0:46:4e:f6:79:b2:
a1:47:66:79:45:dd:0d:ee:b6:d8:a1:51:0a:80:58:45:05:0a:
f7:94:28:6b:98:62:04:44:d0:9d:ae:1c:cb:08:2b:04:34:36:
8c:6d:87:d4:d8:83:fd:e8:f6:d5:d8:dc:64:82:08:b8:15:91:
07:a1:6f:76:5f:d9:09:fc:54:de:22:ae:5d:50:c8:41:03:78:
fc:5c:d9:18:e2:e8:50:f0:f6:9b:65:13:10:8a:95:78:4e:d4:
56:47:93:cc:8d:1f:54:71:7a:39:ce:78:87:22:05:ab:2f:03:
20:16:f3:92:6b:df:20:a6:40:64:55:d3:90:b1:73:2f:1b:eb:
fe:54:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:07 2026 by rpki-client