Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: JwUf9KtJLSW7UukepfufHDo+mVbxBlSJ47+AlZD8Eyg=
Subject key identifier: E0:ED:01:9E:16:A2:EA:F7:73:A9:71:6D:26:61:D2:B2:E2:32:E6:A9
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019CACB4656104916C81A8C7B78EB8F15CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 04:00:29 +0000
Manifest this update: Mon 02 Mar 2026 04:00:29 +0000
Manifest next update: Tue 03 Mar 2026 04:00:29 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: c2eqeA4Jhapr2zTyhGHtFJpBaS5XyOx0jWAx2ELvLMc=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:65:61:04:91:6c:81:a8:c7:b7:8e:b8:f1:5c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Mar 2 04:00:29 2026 GMT
Not After : Mar 3 04:00:29 2026 GMT
Subject: CN=e0ed019e16a2eaf773a9716d2661d2b2e232e6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:c0:6d:6f:af:8a:81:ed:ee:13:70:ae:7c:
36:f7:db:55:77:56:12:ce:d1:f9:89:e7:9a:7f:d9:
5e:5d:be:b0:fb:cd:c4:04:73:36:f2:06:26:75:e5:
4c:e4:ff:65:52:10:d2:8b:50:97:94:e5:ad:2a:4a:
00:62:71:e8:9e:22:b5:24:ff:d3:85:12:ef:83:bc:
2a:fd:25:5a:df:36:e2:b8:39:df:73:31:18:84:72:
8f:c5:3a:5b:21:2f:b5:40:bf:3a:8d:14:75:d2:8a:
2c:fc:50:59:1a:ba:92:4e:3d:26:0f:92:eb:b7:58:
5e:65:87:97:8c:9c:b3:fa:b9:87:96:f3:63:13:62:
69:e2:3e:10:17:d2:24:ce:76:b4:f1:51:e4:c9:0e:
f2:ed:11:15:c1:88:a2:24:05:3f:df:f0:db:27:67:
77:75:09:60:d0:1d:1d:1b:73:2a:b2:cd:1e:21:28:
a7:dd:94:ee:d8:eb:72:13:20:16:4b:50:46:4d:dd:
ae:a6:8f:a6:6f:de:f2:ac:be:d0:4e:f9:0a:dc:9b:
7b:c1:fe:f8:d1:6a:99:17:6c:b8:4e:42:b6:8e:c8:
85:4b:16:c3:45:0b:67:8d:05:e6:79:da:e0:13:ca:
d0:3a:d8:60:e1:50:dc:e8:73:28:3c:dc:21:05:9b:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:ED:01:9E:16:A2:EA:F7:73:A9:71:6D:26:61:D2:B2:E2:32:E6:A9
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:34:b3:0c:08:a0:b0:83:55:a1:27:fe:4c:e8:f1:42:70:
a3:df:a4:95:b9:e6:44:47:ef:5b:39:63:fd:d6:47:b0:4d:e3:
b8:44:77:ef:94:91:26:fb:cc:b2:22:21:45:96:e3:a9:7e:84:
4b:08:9e:76:0d:b3:c6:cc:84:c6:bf:b0:df:72:82:d1:c2:51:
cb:24:0f:07:4b:0c:87:bd:95:1a:15:c7:86:d1:a0:8f:ca:c4:
11:13:ea:a9:9a:cf:ff:e4:6a:a4:2a:cb:eb:a9:e4:1a:bb:ed:
f6:67:cf:cf:a3:14:18:e2:15:8e:90:e0:44:63:c6:47:e9:66:
7c:c2:12:23:c1:ed:19:4e:ce:cd:0f:b8:ac:63:58:46:15:b7:
01:48:60:0f:f0:d6:6c:fe:dc:e0:34:c6:35:fe:5c:8b:8b:9f:
d3:ba:e8:37:7d:38:52:25:62:8a:06:68:1a:03:f1:5c:8a:09:
d4:6b:bf:bb:f2:68:b3:21:23:78:43:13:47:3d:e9:de:c6:7a:
7c:48:a2:1c:a0:1e:2e:65:24:2b:9a:cb:17:6c:c1:2c:87:ad:
de:cc:ad:ea:4a:af:c6:d4:e7:f7:65:ae:39:a0:60:2a:ca:47:
b6:48:86:ed:76:16:3b:49:2c:07:e0:29:3c:c3:ce:d6:a0:d3:
6c:c9:22:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:17 2026 by rpki-client