Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: GU5/dyvtv+MzHmBAI6Icid+LUrRZADaWyFxplAGpiaA=
Subject key identifier: 1D:7B:8B:0C:0E:EC:B8:77:EF:57:B3:4B:EE:70:25:D4:5D:88:5D:DA
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019D9B87E29A39CF68A14E8D94BD5A0DAD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 031D
Signing time: Fri 17 Apr 2026 13:01:06 +0000
Manifest this update: Fri 17 Apr 2026 13:01:06 +0000
Manifest next update: Sat 18 Apr 2026 13:01:06 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: niJy3nGHocBuOJy+YJqMD0cmNY0F5eGnWJUE9iBD4Xc=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:e2:9a:39:cf:68:a1:4e:8d:94:bd:5a:0d:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Apr 17 13:01:06 2026 GMT
Not After : Apr 18 13:01:06 2026 GMT
Subject: CN=1d7b8b0c0eecb877ef57b34bee7025d45d885dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:32:a1:60:84:15:79:6a:90:e8:11:e1:7d:
25:70:84:61:d0:58:93:71:74:48:38:0e:a8:1f:ff:
c5:64:b8:9e:39:b5:c0:df:95:c3:a7:a9:8c:7f:f0:
5a:78:5e:05:3d:ab:cf:67:4d:2d:70:25:85:d8:51:
0f:25:d6:2a:a4:cc:17:a1:6b:a6:e4:85:df:9c:13:
52:d7:77:22:0e:4c:7e:16:7c:72:c8:5e:78:7a:b2:
d9:87:f6:93:df:5c:37:a0:a6:8f:62:a8:9d:ee:81:
67:9d:a7:44:6d:82:4a:dd:66:25:70:7b:53:d4:c6:
24:68:b7:9d:1b:f5:df:81:6d:f5:59:3d:5e:35:03:
3b:4e:b8:93:ac:50:e7:65:06:bf:ab:aa:3e:85:eb:
36:84:c0:4c:fa:d3:fa:da:a0:c1:91:b7:81:dd:2d:
35:9e:00:af:a6:48:4f:82:4d:5d:28:67:41:5f:bf:
19:ea:2b:f0:ad:74:02:ce:2f:65:88:c6:fa:df:ed:
95:c8:0d:ec:35:2b:81:97:b6:92:71:bc:7f:13:46:
88:fa:22:6f:fe:66:a3:1c:5f:19:42:18:ec:74:16:
c4:4b:64:f7:ad:67:85:27:b6:a7:e5:c7:38:da:62:
bd:0f:54:4f:a1:45:0b:59:bd:4f:28:a0:85:c7:a5:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:8B:0C:0E:EC:B8:77:EF:57:B3:4B:EE:70:25:D4:5D:88:5D:DA
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9d:0b:a0:95:54:1a:00:98:18:af:ca:33:68:4a:64:1b:11:
20:a6:41:36:d5:95:4d:31:87:9e:3a:86:34:99:e7:18:9f:a9:
19:1f:d9:a8:bb:bf:6f:3a:85:2c:5e:29:c1:4c:a5:f2:08:9b:
fd:ea:f7:20:b5:7b:8b:e4:42:67:2e:db:8c:b4:8c:21:ee:f2:
71:a0:63:15:7d:f5:1d:34:ab:09:3c:d6:9d:cb:d5:ce:27:65:
18:ef:b4:01:ff:72:8d:3c:18:8a:9a:17:ba:97:68:85:76:bf:
da:69:dd:66:5a:2e:14:e0:b0:11:35:b5:7b:a4:60:fe:2f:2d:
a6:5c:14:c3:fa:b7:40:f5:0a:9f:a0:0f:c7:88:4a:6c:5a:bd:
c4:92:58:43:43:03:01:e9:27:e6:b2:27:1f:30:59:9f:ea:53:
8c:7f:a8:9b:d8:37:eb:b6:46:0a:6e:57:53:f7:ea:1f:2a:05:
75:8f:b5:0d:e8:ea:db:7f:40:38:40:ca:0c:f9:cf:6f:38:6b:
42:26:03:f4:e7:a2:b0:2b:66:ad:40:48:8f:93:ef:b7:b9:57:
1f:52:e6:0d:a7:22:12:7f:63:ef:0b:35:0f:f3:7a:c7:7c:4e:
97:38:89:ce:94:8e:2b:58:4e:9f:58:e9:d4:8e:e3:f4:0e:9f:
08:97:a4:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh+KaOc9ooU6NlL1aDa09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjM0MjQ2NjQ3MjVkNTgyMGJhYTc4MjcxMzE0M2EzMzA3
NjkxZjMwHhcNMjYwNDE3MTMwMTA2WhcNMjYwNDE4MTMwMTA2WjAzMTEwLwYDVQQD
EygxZDdiOGIwYzBlZWNiODc3ZWY1N2IzNGJlZTcwMjVkNDVkODg1ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L4yoWCEFXlqkOgR4X0lcIRh0FiT
cXRIOA6oH//FZLieObXA35XDp6mMf/BaeF4FPavPZ00tcCWF2FEPJdYqpMwXoWum
5IXfnBNS13ciDkx+FnxyyF54erLZh/aT31w3oKaPYqid7oFnnadEbYJK3WYlcHtT
1MYkaLedG/XfgW31WT1eNQM7TriTrFDnZQa/q6o+hes2hMBM+tP62qDBkbeB3S01
ngCvpkhPgk1dKGdBX78Z6ivwrXQCzi9liMb63+2VyA3sNSuBl7aScbx/E0aI+iJv
/majHF8ZQhjsdBbES2T3rWeFJ7an5cc42mK9D1RPoUULWb1PKKCFx6VD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB17iwwO7Lh371ezS+5wJdRdiF3aMB8GA1UdIwQY
MBaAFCnzQkZkcl1YILqngnExQ6MwdpHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYt
NjQ5ZDI1YTk1OTA3LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYtNjQ5ZDI1YTk1OTA3
LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv50LoJVU
GgCYGK/KM2hKZBsRIKZBNtWVTTGHnjqGNJnnGJ+pGR/ZqLu/bzqFLF4pwUyl8gib
/er3ILV7i+RCZy7bjLSMIe7ycaBjFX31HTSrCTzWncvVzidlGO+0Af9yjTwYipoX
updohXa/2mndZlouFOCwETW1e6Rg/i8tplwUw/q3QPUKn6APx4hKbFq9xJJYQ0MD
Aekn5rInHzBZn+pTjH+om9g367ZGCm5XU/fqHyoFdY+1Dejq239AOEDKDPnPbzhr
QiYD9OeisCtmrUBIj5Pvt7lXH1LmDaciEn9j7ws1D/N6x3xOlziJzpSOK1hOn1jp
1I7j9A6fCJek+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:41 2026 by rpki-client