Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: zbqouny+pY3/b+hmL7O3xMq9Hu6/iyP6AUV37xTnRuM=
Subject key identifier: FA:9E:09:27:8D:F3:76:7B:0A:A8:24:89:DD:9C:20:D8:57:23:C9:A9
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019DA37888665AD27D30597012B3ABB596AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0F5C
Signing time: Sun 19 Apr 2026 02:01:18 +0000
Manifest this update: Sun 19 Apr 2026 02:01:18 +0000
Manifest next update: Mon 20 Apr 2026 02:01:18 +0000
Files and hashes: 1: 6e697LuZ9jS9gA2F89nGR0cFK-I.roa (hash: ci7j6TFk0kfg5Gm37B2a5yzK2NylCLyZsggMovKNNBs=)
2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: /8SmFAQJ9JON8qeYf7MZMmqhyoOHQW/udH4Ww3PuzD4=)
3: TMapBMpm5rX0-gIoWzb76bSTSuI.roa (hash: R4mwMpiCVjsTtSxaIqIQla1zIyz7FbLUvXLev4eE1XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:88:66:5a:d2:7d:30:59:70:12:b3:ab:b5:96:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Apr 19 02:01:18 2026 GMT
Not After : Apr 20 02:01:18 2026 GMT
Subject: CN=fa9e09278df3767b0aa82489dd9c20d85723c9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:b8:97:9d:2a:2f:6d:1f:34:0a:37:79:b8:
96:d9:84:9c:ad:73:25:66:96:4a:3a:9e:c0:83:40:
1d:20:f9:7f:38:d6:f3:7f:bc:60:21:70:68:20:32:
97:7d:74:fe:57:fe:9e:35:85:03:ad:5b:b7:23:3e:
34:20:b8:81:a2:68:84:02:4c:d0:7a:67:63:94:17:
be:4c:bc:45:fc:22:89:20:92:76:fc:3e:d9:76:bb:
be:3b:b0:60:73:b5:6a:28:69:05:41:10:19:11:92:
ad:61:77:1e:1e:63:06:fd:a8:b5:8b:52:32:9e:ee:
ed:94:14:a6:ca:20:f5:07:d8:f3:75:29:a1:70:f1:
22:f3:03:72:c9:a9:b4:1d:bf:46:a6:e8:b0:0a:41:
fe:04:73:a7:01:c3:75:96:b4:68:f5:4a:78:e5:3d:
4c:56:61:54:a1:1e:d9:5f:a1:35:7d:6e:52:9a:a8:
4b:f9:a5:d5:1d:dc:a9:0f:cf:47:ea:74:04:87:11:
2b:e7:09:d6:0f:bc:6c:ff:8e:5a:b6:8f:d0:3a:ca:
df:e8:87:b4:dd:e8:08:10:23:e8:30:fb:13:af:62:
98:eb:c0:7d:31:66:a8:48:f6:9d:b7:b3:33:d6:b7:
39:b7:6a:41:67:00:b3:e1:f7:c8:73:36:ca:fe:67:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:09:27:8D:F3:76:7B:0A:A8:24:89:DD:9C:20:D8:57:23:C9:A9
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:40:2f:4c:35:1c:7f:46:45:00:01:ea:8b:0b:08:f2:11:b7:
e5:25:e2:8b:4f:71:ff:f2:37:cf:0c:fc:98:2f:d5:67:a3:70:
00:ef:3f:8f:fb:0a:47:3d:65:f3:d0:e1:7c:d5:51:6c:49:ef:
e9:c9:0f:23:37:3d:64:14:61:b8:60:22:9f:a5:5b:a4:78:cc:
56:46:49:da:70:17:14:20:d4:3b:7e:01:75:36:76:f1:3c:0b:
14:b2:df:4f:06:9e:be:97:5d:b6:16:78:87:69:e0:42:61:50:
12:d7:00:fb:29:70:0f:28:6f:16:b7:d5:bb:82:8c:c4:db:8c:
2b:b5:e2:f8:7d:1e:95:47:b1:90:ba:2a:e8:53:18:61:c0:77:
6b:86:43:21:0d:c3:15:4c:27:26:f0:14:a0:8f:b1:36:87:b1:
16:5e:2b:8e:bc:01:90:63:4b:1c:b5:80:8b:c3:bd:7b:5f:cc:
9c:f2:c3:ba:8c:e6:9e:28:96:9d:c2:28:1a:ed:b3:1c:92:21:
a1:eb:a8:94:6e:6b:62:2c:2b:40:79:2a:bf:05:f1:fc:bc:44:
6f:5c:9f:20:06:a8:7e:30:b3:c5:d9:14:02:c8:f6:34:95:98:
bd:d8:62:71:63:c0:94:d5:80:19:36:d1:0a:22:ce:15:17:c3:
67:f2:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:29 2026 by rpki-client