Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: xjhvV4IqYf0BAW/c6pM7z9aPNP6xuy2goTl7oL5+MNY=
Subject key identifier: DB:49:2C:05:E6:37:C3:AC:00:48:FD:18:04:1A:9B:D8:C9:23:0B:04
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 01A0EB5395A2CE026EA3B5D7FE1FDCF0C4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 04D4
Signing time: Tue 29 Sep 2026 04:01:58 +0000
Manifest this update: Tue 29 Sep 2026 04:01:58 +0000
Manifest next update: Wed 30 Sep 2026 04:01:58 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: /GC07qszZoIGywPu95VWKI0mys+zwq/y/qoc17fJvqA=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:95:a2:ce:02:6e:a3:b5:d7:fe:1f:dc:f0:c4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Sep 29 04:01:58 2026 GMT
Not After : Sep 30 04:01:58 2026 GMT
Subject: CN=db492c05e637c3ac0048fd18041a9bd8c9230b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:bb:02:dc:e0:c7:54:2f:5d:00:88:d8:a1:
f7:3c:5e:d5:8d:4d:a4:39:b0:f8:aa:1a:b5:74:f9:
b6:3a:d9:fb:18:08:88:b1:70:59:0b:4a:71:c0:02:
32:27:01:4b:d6:98:f2:6d:48:96:4b:73:bf:83:42:
e2:92:39:bd:7c:39:87:0b:4c:77:3e:6d:9f:20:47:
15:51:49:3d:13:d1:65:61:83:af:60:68:e6:83:6c:
4d:15:d0:75:f2:d5:af:80:6a:76:c3:15:c5:9e:cb:
1c:2f:67:5d:44:58:83:b5:0a:67:77:a5:4c:91:8a:
02:ef:8a:e0:61:7b:ff:aa:16:74:81:ec:46:2e:88:
ee:dd:13:e8:63:cf:ac:68:bd:0e:e1:df:e6:0f:92:
dd:76:86:59:16:bd:d7:52:6f:a7:15:55:fa:19:05:
e1:4a:2e:0f:6a:17:d5:76:34:1e:a1:14:b2:33:84:
9e:79:79:0e:01:d6:d1:89:95:2c:7c:4b:3a:3a:1e:
dc:ce:08:76:6e:9a:3f:69:14:7c:e1:db:9b:13:38:
8d:6c:be:46:dd:98:85:f2:7a:ef:9c:f7:f6:87:2c:
5c:bf:ce:8d:81:ff:a1:ca:48:6c:15:87:73:c6:40:
f7:ce:ce:d0:f6:37:62:01:b8:90:6b:1b:47:af:a7:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:49:2C:05:E6:37:C3:AC:00:48:FD:18:04:1A:9B:D8:C9:23:0B:04
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:26:87:6b:3b:62:21:34:53:88:ef:70:55:7f:32:8d:f2:3f:
ad:8f:87:c1:fa:35:58:91:31:59:cf:5d:8b:60:36:74:ee:d5:
f1:e5:ee:53:98:40:ab:1b:73:d4:be:ba:8c:c1:c5:a7:94:d0:
8f:ed:24:bf:8c:92:98:c8:37:37:59:9e:fc:74:e9:72:ac:e6:
2a:20:95:b9:71:72:3b:37:18:98:e2:58:95:16:e4:6d:65:ec:
0c:e6:50:2f:ea:33:2b:65:f2:b3:bf:7f:44:37:1e:ef:61:98:
5a:ac:fc:00:43:10:ac:c2:cd:b4:3c:25:72:2d:3e:95:2a:67:
6d:f0:a9:f6:79:42:4d:f1:73:16:35:f2:ad:60:56:19:32:b4:
6e:f3:e7:de:53:df:4e:09:af:ed:10:fc:8a:b6:5f:2c:9b:14:
2c:76:ee:ee:bf:04:1f:a3:1f:02:6b:59:d5:48:19:66:f9:a9:
47:9b:c4:bc:fa:f9:4f:9b:f3:a0:0e:f9:e1:7c:c6:f4:5c:88:
ae:95:21:76:fd:68:cd:cf:ff:ed:35:c3:8d:60:15:b0:ad:56:
2b:af:94:a6:d8:e0:7c:38:93:2c:76:b1:19:bb:37:ba:0a:dd:
9c:1e:53:54:a8:bf:96:68:f8:cb:ef:8f:7f:b9:7f:e1:31:87:
50:f9:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:34:59 2026 by rpki-client