Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: lyXlcw2v4zE6rWf3Dw1TJea4WzSWe1xUFS5mwl5RasU=
Subject key identifier: 42:52:C3:B1:ED:CF:53:65:B6:04:1C:56:35:F6:7B:B5:C5:05:BA:E8
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019FACAD27A9328285785D278E9C4B46DB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 042F
Signing time: Wed 29 Jul 2026 07:00:56 +0000
Manifest this update: Wed 29 Jul 2026 07:00:56 +0000
Manifest next update: Thu 30 Jul 2026 07:00:56 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: BYZh71Fw3Ju8aJY69r9PZUO7jcMh4SCZkbWmTzIUmXw=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:27:a9:32:82:85:78:5d:27:8e:9c:4b:46:db:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Jul 29 07:00:56 2026 GMT
Not After : Jul 30 07:00:56 2026 GMT
Subject: CN=4252c3b1edcf5365b6041c5635f67bb5c505bae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:b0:75:3d:07:05:6e:3d:ed:17:74:73:68:
a0:1e:53:80:3e:3c:e4:bc:ef:32:81:3a:a0:cf:26:
82:0e:5b:64:35:c2:c1:f4:92:bc:3f:c3:ce:cb:c0:
6b:43:0c:f3:83:92:82:5f:0f:6c:32:8d:6b:04:36:
0a:1d:e1:56:57:e9:d5:21:1d:85:19:28:b4:ac:86:
7c:6a:17:94:32:e4:4e:7f:07:76:f9:45:b4:57:99:
7c:ad:31:5a:26:51:f8:c4:ee:f2:02:83:b9:13:95:
c1:a4:16:70:d2:d5:31:4d:58:ec:63:09:ce:a4:04:
ed:9c:63:5f:5e:bd:fb:9c:bd:e6:37:9e:eb:1c:b8:
9f:ca:e6:2e:9f:61:23:5d:fc:80:07:e8:a8:0d:65:
f6:34:f6:52:f3:fe:1d:2c:af:3c:2b:20:96:1a:42:
b8:a1:ae:b1:54:ec:56:e9:05:c8:73:7a:cb:6c:b2:
eb:53:71:76:41:ef:5e:1c:c0:c6:04:5b:97:2a:4f:
29:df:aa:55:66:16:3a:39:8f:be:24:7e:1e:57:4d:
f4:17:b8:fd:5e:39:62:4b:94:df:e9:e6:87:e1:be:
e4:cf:5c:f2:4a:a6:15:6f:8d:c4:69:19:1e:68:44:
c1:15:8f:d1:a3:ec:bf:b1:b1:4b:ae:67:1e:a0:24:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:C3:B1:ED:CF:53:65:B6:04:1C:56:35:F6:7B:B5:C5:05:BA:E8
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6f:c7:bc:31:59:31:a2:38:c2:a2:d7:8d:8e:94:9f:d1:d8:
08:a8:77:e0:9a:9a:fd:c1:9d:67:18:bd:fd:54:a2:f5:3b:db:
d8:22:78:56:4b:d0:33:bd:81:3c:17:5c:6a:54:a7:90:e0:ce:
29:14:a4:96:e5:4c:43:db:01:ca:20:81:69:e4:cb:1b:6f:fd:
23:dc:6e:c6:0e:12:19:33:f5:95:fe:89:67:71:b8:97:48:6e:
97:e1:d7:f5:9c:2a:b2:e5:57:9b:84:9a:a1:63:84:bd:6e:f5:
12:1e:56:8a:91:20:de:90:66:43:b7:52:3c:2a:e0:85:48:09:
d9:7e:2f:69:9b:33:0e:df:2f:77:80:9c:25:ae:5e:e3:e9:48:
a9:e5:40:71:5d:51:09:c8:aa:05:3f:83:c6:35:93:fe:39:6c:
49:c9:89:03:59:58:d8:f9:6a:8c:4b:14:4b:08:e9:a6:bd:03:
fc:d6:5b:45:41:17:9b:30:07:4c:86:49:97:5f:45:cd:77:50:
ad:60:79:ae:6d:68:71:14:1c:8b:07:8b:e8:fe:cd:76:bf:43:
dc:27:68:95:20:35:9f:49:9c:c8:41:21:70:c4:4e:d0:ec:a0:
4a:ea:1f:9a:f8:27:e9:bd:33:df:41:32:74:17:4c:1b:50:bb:
de:20:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:08 2026 by rpki-client