Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: k4jE5k+FT1+6ZQ81CHPz6+g5NVpPE8S5Tum3ZMGCjy4=
Subject key identifier: F7:1B:B0:1E:B0:4E:F7:2F:69:64:F0:75:16:85:64:EA:1F:35:22:B9
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 01A0E061198519C42D924ECFD84E363CD0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 1A06
Signing time: Sun 27 Sep 2026 01:00:54 +0000
Manifest this update: Sun 27 Sep 2026 01:00:54 +0000
Manifest next update: Mon 28 Sep 2026 01:00:54 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: ClHpoAijtNLmuKw07GpWqW9aaDCMyuEMu/VUyjVc+Y8=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:19:85:19:c4:2d:92:4e:cf:d8:4e:36:3c:d0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Sep 27 01:00:54 2026 GMT
Not After : Sep 28 01:00:54 2026 GMT
Subject: CN=f71bb01eb04ef72f6964f075168564ea1f3522b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:ea:a7:0d:8d:8e:f6:db:77:3b:3b:f8:1e:
2b:d6:b8:30:8e:2f:61:a3:be:b1:00:a1:04:e8:1a:
cc:bc:0f:2f:48:97:10:22:cd:9e:98:c0:d6:9e:d7:
24:2e:f2:19:01:52:07:ea:43:7d:f8:f7:d4:00:a4:
fb:f6:9c:2f:4f:64:60:80:3d:7f:8a:e8:f6:87:dc:
ce:32:e4:f0:b7:eb:47:0e:02:51:57:f1:64:b0:00:
99:b4:ff:4c:44:5d:7e:40:71:4e:e0:14:68:3a:c3:
cb:f1:69:ee:d2:09:73:c9:b8:38:df:73:4c:f3:10:
b3:08:17:74:a3:6a:da:86:87:7d:57:c5:ee:60:03:
36:a5:31:4e:5f:44:b7:ab:df:7f:4e:7d:dd:8e:50:
29:c0:6d:aa:81:22:96:0a:52:b2:78:e7:2a:9a:ed:
33:65:98:84:73:59:8b:a6:ed:7e:71:d0:e8:d2:6d:
69:20:bf:ad:60:5c:61:7e:0c:03:e8:a0:98:36:a8:
f5:7e:9a:cb:26:24:5d:b2:2c:1d:6c:a0:ba:91:a5:
f7:4e:a1:55:f6:20:eb:2f:05:75:b8:eb:79:a6:ee:
fd:5d:e7:59:20:56:d6:3c:a7:a3:a9:7c:d0:0b:19:
b1:52:8e:90:49:51:0a:ec:a1:4e:e4:32:9e:32:d7:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:B0:1E:B0:4E:F7:2F:69:64:F0:75:16:85:64:EA:1F:35:22:B9
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bb:4f:6e:16:44:d7:17:ee:de:24:93:30:a5:77:80:5a:89:
b8:af:88:ba:4c:98:f7:3c:a0:87:df:d6:b5:72:5e:82:5b:94:
c7:b7:6e:e2:1a:14:e3:a9:49:2d:c4:b1:85:ed:a4:fa:94:7d:
bb:7a:b3:29:66:d0:bd:ab:27:28:79:47:b5:35:64:82:ac:71:
17:59:f4:9e:49:c0:3c:2d:b0:73:88:b9:42:e6:d7:a1:34:30:
2b:66:63:5d:53:9b:dc:cb:e1:fd:a9:8c:d2:7a:6d:fb:55:11:
65:08:7f:2e:1c:9b:93:86:44:df:65:32:3e:4d:d1:ec:fa:4b:
08:96:fc:84:46:a1:ca:6d:71:5e:6f:13:45:f5:7c:8d:50:dd:
46:d0:7d:7d:a5:22:57:72:73:2e:e2:f8:82:7e:22:6b:c9:29:
7d:34:0f:fe:a4:05:20:0d:ca:4d:fb:c1:86:2c:73:4e:67:d9:
d3:e0:c0:95:e5:d6:a1:f2:89:d9:2f:ef:83:b7:1f:7f:3c:e2:
d4:cb:96:30:7b:8f:7b:ce:0d:39:fa:55:a0:24:e9:60:d6:a8:
97:02:fa:2f:6d:99:fa:44:f8:66:37:1f:39:1f:04:e8:da:1a:
68:49:6b:ad:a7:3d:4c:94:cf:c9:1b:d5:ea:39:25:f0:a5:b4:
78:26:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:56:55 2026 by rpki-client