Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: so+Sd9dctaYs9voYH4ShXfcfSNsoXGhZwKViYa3UcoM=
Subject key identifier: E7:AE:81:ED:4E:BC:FF:3B:F0:C6:CA:0B:53:F0:E1:C8:8A:79:52:66
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 019CABD935FADE777A39008ACD246012F405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0F03
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: YbbakG69j/0/iBpNz4bvTQ/+TLbJIEPscI+gtAeqfjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:35:fa:de:77:7a:39:00:8a:cd:24:60:12:f4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=e7ae81ed4ebcff3bf0c6ca0b53f0e1c88a795266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:61:b4:ea:6a:65:85:b7:df:7e:fa:2c:13:
9e:db:cf:a0:e8:df:75:10:b0:be:be:31:43:1d:28:
7b:1f:3b:ab:9c:bb:fc:0d:54:9a:46:ae:94:c5:5b:
17:15:9b:c3:62:87:9a:37:1b:08:5f:42:98:c1:75:
97:2d:46:f0:fb:b3:da:3e:67:c5:08:5a:88:af:32:
29:f0:b2:fb:ed:81:4c:5b:60:9a:6c:35:15:9a:63:
67:9e:f9:71:ad:64:68:00:63:bd:6f:34:d4:7c:1d:
0b:a6:bf:71:e3:f7:ac:c5:46:b2:c8:a1:e2:5a:9c:
05:5b:6a:0f:ec:4b:ce:86:ca:0c:62:79:e8:0f:ee:
df:06:70:4e:e7:d1:da:ed:99:8b:91:e2:f4:4a:34:
43:6f:bf:6c:22:0d:49:6f:2a:95:7b:4a:93:08:13:
a3:31:44:d8:97:5b:d5:94:56:e0:55:7a:a1:eb:b3:
67:d0:2d:ce:96:0c:71:ba:f2:cb:36:ce:29:33:78:
47:42:bf:38:94:fe:a7:05:cc:c6:7e:5c:ea:e7:50:
c9:23:23:da:51:cd:00:18:a3:79:c3:9d:ab:01:d7:
f9:6b:5b:bb:a1:6a:7a:f2:ea:c0:0a:c7:bf:b0:48:
78:d2:bb:ad:52:3b:8b:cb:44:17:54:3d:bc:bd:63:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:81:ED:4E:BC:FF:3B:F0:C6:CA:0B:53:F0:E1:C8:8A:79:52:66
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:00:45:fb:e0:5e:e5:62:ac:f8:57:63:f6:4c:ec:88:37:8e:
6f:bf:57:ff:48:41:42:ef:84:e8:85:94:82:50:02:a7:10:6f:
47:5c:51:bc:e6:63:d5:f6:b5:65:19:e5:85:5e:4e:bc:5c:fc:
1c:f3:f0:c1:b0:d0:49:d5:e4:bf:83:8a:bc:56:49:28:25:e6:
98:a2:6c:b0:50:d3:9b:e7:b0:e5:1c:1a:bd:04:e0:68:ab:02:
4f:f1:1c:26:32:d7:0f:7b:2f:1d:ef:49:a1:66:9a:ef:3b:a0:
9b:6e:ed:a2:79:68:40:61:b8:56:8c:f4:87:80:23:8e:f8:a7:
ce:1b:f1:ab:1d:b9:a2:d7:96:93:e0:17:0c:ad:a4:bb:66:1e:
96:f8:1d:bd:c6:1b:5a:65:81:9f:24:cf:2f:8d:b4:78:fe:21:
40:86:87:a1:ff:79:58:04:b0:68:95:a5:ce:dc:11:f7:f4:f3:
7d:45:4f:e0:e8:d3:a5:78:20:f7:66:bd:3b:c8:a7:c8:a2:49:
d5:34:1b:77:aa:44:ca:9d:72:25:32:8f:56:01:27:54:c5:4a:
e1:86:7a:e2:47:4f:41:7a:56:6e:00:5d:02:c8:29:ca:d5:e4:
ea:de:e6:1e:cb:b7:a2:2e:f4:fb:aa:7f:ad:19:c7:33:a5:a9:
0e:de:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:53 2026 by rpki-client