Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: PP5CwadLWK5BKK723lg8hYNy0E9bsN+OfNpJ8YNu1kI=
Subject key identifier: 2B:81:FC:63:7A:97:78:A5:6B:1D:FA:9F:14:B5:98:BE:B4:81:1D:FD
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 01A0DFBCF81FB2255FE0890BAA1B870B405C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 04CE
Signing time: Sat 26 Sep 2026 22:01:38 +0000
Manifest this update: Sat 26 Sep 2026 22:01:38 +0000
Manifest next update: Sun 27 Sep 2026 22:01:38 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: pffTuKTo/9LY0yyu/VcsM8S0/i5n1mYblGGorXJd3Y0=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:f8:1f:b2:25:5f:e0:89:0b:aa:1b:87:0b:40:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Sep 26 22:01:38 2026 GMT
Not After : Sep 27 22:01:38 2026 GMT
Subject: CN=2b81fc637a9778a56b1dfa9f14b598beb4811dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:b2:70:b6:0c:fb:bf:ec:93:a9:52:62:e3:
6b:55:ce:26:2f:6f:66:50:b7:97:4e:f1:b9:e9:9b:
a7:c7:7b:17:42:20:f7:18:a1:0a:53:00:dd:fe:ab:
65:27:45:08:44:06:55:f1:0d:87:ff:70:73:6c:a7:
7d:b3:f9:76:82:b2:dd:e0:4a:be:dc:c6:6e:89:e4:
2e:2b:7d:ef:28:08:69:9a:5f:30:d7:dc:87:ed:a7:
9d:91:07:56:64:29:cf:07:5b:6c:ce:be:b6:1d:03:
d0:34:91:3a:45:ef:79:37:f2:cd:96:d7:8f:d3:e9:
ae:b7:ba:36:94:94:25:37:51:fb:9f:d3:51:51:c5:
c4:2e:f4:b9:a0:e8:46:96:f8:37:a7:f4:a4:4d:bf:
d2:b1:59:c0:04:c6:5a:5a:ad:2d:41:9d:21:af:ae:
ef:9e:d1:79:26:6f:07:cf:e0:c7:e4:c2:d7:90:61:
fe:57:cd:56:d8:d5:f2:2d:3a:bd:a9:f2:78:5f:5c:
39:c7:0c:34:3f:ae:cb:50:96:d4:da:23:e1:69:d2:
96:d9:c0:c4:e8:a3:38:01:5a:05:25:be:ac:74:a7:
65:5a:b3:3d:40:3a:d4:7a:a8:bf:b0:9f:ac:06:92:
98:47:5e:3d:a0:da:88:46:8d:08:f5:c0:c9:bd:64:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:FC:63:7A:97:78:A5:6B:1D:FA:9F:14:B5:98:BE:B4:81:1D:FD
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5c:24:e5:55:0d:7f:7c:33:46:b2:af:ab:bd:fa:49:13:37:
84:89:c2:52:42:bc:e1:24:d4:9d:42:3a:8f:d2:e5:dd:d9:20:
ff:0b:a9:85:f7:2d:00:f4:66:a8:2d:3e:aa:c0:7c:af:56:0e:
2e:ca:02:5d:f1:81:73:b8:e7:b9:77:15:57:8c:15:cc:9e:eb:
30:ec:00:8c:83:65:10:ef:8d:33:9a:02:f6:c9:1e:d5:07:b2:
25:bd:fb:a8:e6:06:9d:81:ee:94:f0:83:2f:85:ea:2f:1b:ca:
08:8b:ba:47:05:10:19:f6:ff:29:a5:ae:16:02:ad:e3:87:87:
19:93:16:73:31:e2:e8:17:8f:f1:7d:de:af:03:2f:6e:42:6b:
91:c4:6d:2a:44:1e:95:8f:2a:9a:1f:05:35:f9:c1:ac:d7:b7:
3d:2e:a7:cb:f7:8e:04:93:88:6d:a8:71:b9:ca:1d:ad:13:11:
23:e7:a8:be:ee:4b:50:5d:90:cf:ca:30:91:14:8a:14:19:cd:
cb:ac:10:4f:c7:15:cb:d1:91:03:34:b0:83:c5:3a:54:a8:3f:
1e:e8:e6:d5:61:72:a5:57:e8:87:72:10:dc:ae:07:bc:50:1b:
a6:a8:70:d0:96:8e:cd:a5:fb:29:40:3a:4a:d7:ef:bf:da:fb:
6b:33:ba:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:14:19 2026 by rpki-client