Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: bvhDk/4NB9YFLew/IFmVxGzyJWQ7H1SEttFeHFEc6xQ=
Subject key identifier: 38:29:EF:B7:F5:E2:30:43:6B:2F:8C:E0:23:B8:9C:46:F6:CF:8B:69
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019EC111CED7DE05E7087D56947B8C466C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 03B5
Signing time: Sat 13 Jun 2026 13:00:30 +0000
Manifest this update: Sat 13 Jun 2026 13:00:30 +0000
Manifest next update: Sun 14 Jun 2026 13:00:30 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: KRucU0JTIhgWYN5pkyAjJwMEBNM1sFaJMhn99vIVhyE=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:ce:d7:de:05:e7:08:7d:56:94:7b:8c:46:6c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Jun 13 13:00:30 2026 GMT
Not After : Jun 14 13:00:30 2026 GMT
Subject: CN=3829efb7f5e230436b2f8ce023b89c46f6cf8b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:c0:89:62:f4:b2:e3:20:99:7b:28:ac:77:
e0:c3:fd:ee:a2:65:73:6c:0d:d4:a1:7a:3e:9c:d0:
8f:5a:68:bc:cc:0e:22:fc:f8:16:b2:d9:fb:4c:f7:
12:25:ce:86:7f:04:ce:cb:4a:b4:b5:e3:62:cc:8e:
16:48:c7:f2:4c:c5:0e:77:aa:a9:36:39:2d:2b:9d:
30:d4:52:fc:34:3e:fd:10:b1:af:c5:66:6d:bc:89:
cb:72:94:1e:e8:0f:1d:b8:ae:13:24:26:fa:03:e8:
c0:49:09:62:f6:4b:67:1f:62:d0:2d:3b:47:da:10:
e8:d7:4b:f2:50:51:f8:19:a3:91:37:b5:02:c8:28:
5a:ce:8f:63:1c:05:0a:97:43:bb:5d:b7:99:95:38:
f3:19:86:23:8e:a6:3e:f9:94:96:bc:4a:5f:33:51:
04:9a:2d:2d:b9:1b:97:2d:bc:c0:0d:6c:68:37:d6:
4a:5a:5d:e6:d4:be:cd:bb:ff:56:2a:02:85:35:4b:
20:49:c9:ca:83:47:8e:4a:07:7c:2b:a3:7d:08:b5:
fe:6e:b8:ca:b0:21:6f:7a:4e:4d:9f:62:77:a2:7f:
19:27:0c:59:c9:6d:68:89:68:27:76:6e:23:66:72:
a2:78:8f:d3:aa:46:35:d0:22:94:1c:75:26:fb:d6:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:29:EF:B7:F5:E2:30:43:6B:2F:8C:E0:23:B8:9C:46:F6:CF:8B:69
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:cd:04:a0:8f:a6:4a:f6:66:7b:8f:2b:37:cc:b9:09:75:
2b:cf:d9:ad:e3:cd:d2:92:40:04:4c:b5:57:21:43:a7:19:5b:
74:8a:d5:c6:a7:0d:dc:fc:a1:59:0e:0b:87:cd:3c:f1:05:26:
fc:10:23:0d:fa:fe:cf:49:23:9d:ed:ed:ee:be:ef:38:33:95:
b1:08:30:5e:1e:81:c0:af:b3:72:a8:ff:c7:67:d3:b0:b1:1b:
53:74:95:8c:36:22:d7:6b:d3:b2:b7:25:d4:52:42:b8:a2:ea:
c0:1b:57:b8:9f:f1:3f:5f:f1:aa:6c:7c:2b:01:48:95:ac:96:
4a:74:4f:ad:f0:28:a0:b5:da:f0:e7:07:99:04:06:c4:d3:70:
60:69:bf:67:76:34:c1:1c:df:da:34:d0:32:16:6a:e1:db:31:
e0:52:35:4a:94:ad:6b:b2:e8:4c:e9:55:5e:73:c5:fa:64:df:
27:8c:af:1f:f1:0c:7c:db:86:0b:e8:6c:89:6c:e0:4d:ea:0d:
03:b3:a6:70:4a:69:9a:28:1b:c6:56:3e:c1:16:1c:7f:e4:39:
24:ee:9f:99:39:44:3f:09:3a:6e:a3:43:cd:f6:69:f3:47:90:
9e:18:c0:87:4c:ca:08:0e:c0:85:8d:20:ab:06:c2:4b:32:cd:
c9:8f:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:05 2026 by rpki-client