Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: ES2QGS8RhCukjHH2pG4NIUOg+qUd3qjsIQ3fe+lSeZo=
Subject key identifier: 51:E2:60:E0:1D:4F:DB:22:CA:91:B7:CD:E5:55:18:7D:94:E7:44:36
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019D9C2CBBAE8FE8ACE99D572C9BB22BC7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 16:01:10 +0000
Manifest this update: Fri 17 Apr 2026 16:01:10 +0000
Manifest next update: Sat 18 Apr 2026 16:01:10 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: 0V5sR7hi3sAJTET2/0cNdkg8FVUhH4WB9uxAmqRVCtg=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:bb:ae:8f:e8:ac:e9:9d:57:2c:9b:b2:2b:c7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Apr 17 16:01:10 2026 GMT
Not After : Apr 18 16:01:10 2026 GMT
Subject: CN=51e260e01d4fdb22ca91b7cde555187d94e74436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:ae:4c:39:80:05:90:24:81:05:d7:30:81:
d1:4d:31:81:ad:11:14:ba:42:61:e5:38:89:f1:8c:
05:8f:7d:e0:c2:20:2f:27:45:f0:67:78:1e:75:4b:
45:c3:6a:9d:6c:a1:d6:af:6d:75:69:8d:a4:fd:ec:
6f:96:01:f1:d6:54:24:5b:3c:8b:a0:1e:3f:02:6f:
e3:9a:cd:8e:bc:30:0f:f4:f9:e9:36:b1:19:07:62:
95:e8:75:0b:bb:b3:72:d2:7e:72:a6:04:ca:35:3b:
4b:3e:8e:ea:20:cf:23:e3:29:19:c4:bd:13:5d:de:
8e:b3:e4:c1:54:f7:09:2c:2f:33:0b:26:a2:f2:11:
99:dd:ae:ee:30:4c:93:d5:ab:7e:df:44:19:77:c7:
de:7a:82:cf:17:ef:f9:ea:30:25:c6:34:92:af:79:
db:0b:65:be:91:79:42:8f:eb:62:a7:61:11:bc:f9:
08:38:fa:82:3a:96:e8:e7:5a:01:ac:46:70:73:ab:
ec:4c:7f:95:2c:3b:01:65:0e:9b:26:0b:53:5b:9a:
5a:42:d9:fd:24:15:27:6e:4d:8c:f5:81:27:2b:18:
81:e4:2e:6e:18:0a:82:bb:be:0c:64:ed:7b:04:fa:
d6:94:d1:45:45:84:85:ef:45:ec:b1:5f:b0:cd:63:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E2:60:E0:1D:4F:DB:22:CA:91:B7:CD:E5:55:18:7D:94:E7:44:36
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9b:cc:57:d6:3e:68:98:71:fe:04:b0:44:25:01:37:02:aa:
ad:82:64:df:e8:b2:37:6e:d8:1b:f0:23:93:30:20:a0:f8:4c:
61:b9:ee:9a:13:9d:e3:99:87:0e:39:69:50:10:e2:a0:7d:92:
42:6b:e0:a4:d3:61:a6:13:32:90:59:90:f9:21:8a:9b:b7:97:
a4:df:3a:8e:a1:00:b2:0c:cc:b4:41:00:87:3c:74:bc:8d:0e:
39:08:94:b0:2f:dc:ad:2a:1f:f3:e4:b8:0f:c3:48:e3:dd:7b:
cc:c9:27:e1:6f:97:4c:ec:2f:82:16:32:3b:81:df:d1:23:8c:
a7:36:fc:c4:66:02:db:20:f4:6f:48:ae:88:dd:d9:0e:b9:d7:
9f:01:5e:20:0c:de:01:e5:10:c7:b0:e7:1f:75:8e:3a:f1:bc:
7b:2c:42:70:69:c8:fe:64:24:58:f8:6c:d3:76:c5:43:5c:e6:
f6:57:49:b9:19:eb:5d:8a:fa:12:bd:0f:b1:a5:c0:50:08:27:
51:f7:b9:db:d0:54:f7:33:c8:39:59:ab:a2:c3:3d:9c:f4:2b:
03:dc:34:ae:e4:ad:fa:0e:c0:7c:df:8d:d8:54:2a:1f:1c:b0:
be:82:a3:f6:8e:1d:d2:bf:25:e8:34:1b:43:1b:f4:69:c5:c5:
77:c4:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:27 2026 by rpki-client