Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: WNa/t5k4cPmWzcefPUnBCLLnlVwG/DGE3AZsIq07oRU=
Subject key identifier: 7A:53:32:A7:02:9D:C2:33:FA:D8:31:B1:40:04:2C:37:A0:DF:A4:D1
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019CAFEC59E77157C32D2E7DE106ED4424F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 02A3
Signing time: Mon 02 Mar 2026 19:00:28 +0000
Manifest this update: Mon 02 Mar 2026 19:00:28 +0000
Manifest next update: Tue 03 Mar 2026 19:00:28 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: a8oqSXmBBCysC7Ztj8+tyKOvysTMJZuPU7Te+1f1K9s=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:59:e7:71:57:c3:2d:2e:7d:e1:06:ed:44:24:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Mar 2 19:00:28 2026 GMT
Not After : Mar 3 19:00:28 2026 GMT
Subject: CN=7a5332a7029dc233fad831b140042c37a0dfa4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:08:37:93:c7:02:aa:df:e9:fa:03:7f:ab:
e5:47:61:48:14:f5:4b:0f:18:e1:72:8b:58:36:7e:
d2:ba:19:5f:e1:85:76:bb:97:03:7e:06:14:5d:73:
9f:53:39:ae:08:bb:18:e3:34:3c:a6:c3:ff:46:b3:
a8:97:aa:3e:fd:99:d9:cd:90:94:f6:b1:df:2b:d3:
48:b2:08:15:a3:01:bc:31:86:8a:68:da:7c:e8:66:
64:95:0c:f9:88:6a:89:9d:88:ed:24:0b:56:30:75:
fd:23:23:f2:a7:9d:3a:04:e8:e0:48:f8:66:87:df:
49:9c:30:44:c4:94:f4:20:e4:f6:40:50:dd:47:c9:
ee:b1:ca:45:64:f1:b8:c6:bb:05:47:7a:19:a1:6c:
99:b4:ac:27:b5:94:0d:2e:b1:0a:a1:2f:e9:51:2e:
12:ca:02:9d:12:0a:c0:aa:be:f4:0e:1e:74:54:68:
26:5e:38:03:a0:3d:d5:69:4b:c8:5b:90:e5:c9:a5:
4f:ab:64:9b:85:ce:e7:2e:7b:3d:18:5b:46:0f:e5:
32:a2:bf:14:ce:f0:a5:86:dd:49:22:30:7b:ab:a4:
3e:52:63:1d:72:1a:49:c3:35:16:e3:53:8a:3a:28:
d6:1e:37:e4:d7:e1:82:74:df:b0:90:b6:e7:84:c1:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:53:32:A7:02:9D:C2:33:FA:D8:31:B1:40:04:2C:37:A0:DF:A4:D1
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3d:08:18:f5:a4:28:e5:a4:2e:53:b7:81:e9:06:0b:03:e9:
29:96:db:d8:07:87:c7:3b:5e:19:e6:98:39:a2:2a:4b:85:9e:
8d:39:e6:3a:53:72:74:b4:aa:6c:41:26:9c:38:65:c5:89:ef:
d4:d5:45:7f:1c:0c:13:16:7f:0f:ea:a4:a6:61:e7:67:9f:9a:
36:6e:43:92:6b:20:e5:38:e3:05:8c:c6:a4:16:8d:b4:ff:2e:
35:d3:3b:2e:ff:11:fa:c8:4d:86:f1:c2:74:ba:01:47:03:52:
94:1c:14:8f:67:78:c1:36:9d:95:db:87:31:b0:d6:da:ca:fa:
76:01:07:a5:15:cd:3b:50:49:8c:17:27:ab:63:47:ab:fd:41:
c6:2f:7c:bd:52:26:db:cc:f6:b9:d6:83:ca:a6:b0:8f:ee:8b:
44:48:d7:0e:34:e9:47:f7:48:13:8e:56:f2:87:2a:1e:7b:4d:
8a:47:30:7f:ec:0d:0a:38:52:c6:e9:d3:52:af:0f:de:97:b8:
f6:6c:32:39:22:cd:f1:22:d6:ba:66:4e:78:2b:fe:df:d8:2c:
86:0f:b5:34:1f:b0:6e:b5:18:61:2e:8c:65:7c:85:b8:7f:3c:
4d:aa:e9:b7:26:12:0a:41:27:67:8f:0e:c2:aa:a2:e3:42:b0:
f5:b7:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:11 2026 by rpki-client