Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: +AHd/zjPjg1Wq3jHOrFNXlt3tVMuBMnCMAlrBNnLfdE=
Subject key identifier: 11:29:6E:33:9B:04:6C:60:8C:26:16:63:A2:F0:97:75:B8:F4:08:FB
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019D99625E19709B8A4700F5D93AEAF7759E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 159F
Signing time: Fri 17 Apr 2026 03:00:53 +0000
Manifest this update: Fri 17 Apr 2026 03:00:53 +0000
Manifest next update: Sat 18 Apr 2026 03:00:53 +0000
Files and hashes: 1: E8wnMkiSbVSzBboh28_7QoxLc2I.roa (hash: zCR5rbo9HIv2yKajw50w0oXIYg6lZF+5ym6K0CZI1dU=)
2: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: u0RyU5nCbDBKweJzUpffuDoE/smaieSKiro/sfYo5cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5e:19:70:9b:8a:47:00:f5:d9:3a:ea:f7:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Apr 17 03:00:53 2026 GMT
Not After : Apr 18 03:00:53 2026 GMT
Subject: CN=11296e339b046c608c261663a2f09775b8f408fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:40:0d:20:b6:a8:d8:73:53:7a:91:2a:e6:
34:14:28:ab:61:9d:69:ad:bb:14:74:be:02:ba:51:
65:94:4a:e7:73:49:65:c2:61:e5:f5:89:77:48:80:
e0:e0:ef:d4:d1:7e:09:9e:53:e8:c2:5d:c9:3f:78:
06:07:3c:bd:e5:f1:bf:c4:84:71:c1:d9:69:4c:21:
18:4c:81:ac:bb:65:34:e0:33:cd:c4:ee:da:8b:e0:
50:39:5e:af:0b:85:1a:ce:73:98:0d:77:33:85:e2:
af:67:cf:ea:a8:92:52:5e:48:56:a1:21:f4:e0:86:
8f:07:d8:72:5b:59:54:59:ea:ff:21:85:c2:74:eb:
7f:79:ad:c0:a3:c6:bd:fa:9a:15:2e:76:ea:8d:04:
d0:39:42:bf:57:f0:ea:74:d8:ce:fc:51:6c:c4:2d:
7b:24:42:34:f6:48:27:6b:a5:30:0e:a2:2b:e2:4c:
6a:63:3e:33:46:62:af:d1:ae:4a:ec:63:bb:f7:f9:
43:8c:de:72:d6:f5:ec:6c:95:89:12:8c:9b:2b:be:
10:20:3f:14:90:7e:e7:a7:5d:39:6c:6a:75:6c:2f:
e2:94:bc:9d:fa:d1:76:ef:05:c1:12:3b:0e:68:20:
0c:ae:2a:69:28:9f:0a:12:ef:1c:df:fc:6f:79:7a:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:6E:33:9B:04:6C:60:8C:26:16:63:A2:F0:97:75:B8:F4:08:FB
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:79:8c:27:4e:dd:79:61:19:e2:af:11:ab:93:b1:2d:32:37:
02:cb:1f:d7:30:b7:2d:e9:07:ef:7a:3b:3d:e7:fd:38:7b:7a:
c3:1a:39:86:94:64:56:5d:75:82:55:b5:78:8a:9c:af:06:8f:
d8:c7:3e:cc:31:e3:f5:30:33:19:9e:ef:d9:a0:6f:b8:62:d5:
1f:a8:1c:e6:cb:29:fa:8a:a3:ee:7b:c8:b9:97:2b:b5:f6:00:
ae:6f:0e:45:05:ef:69:bb:99:e3:73:2b:ab:3f:cf:d0:1b:b9:
d4:9d:58:59:e2:57:48:5a:26:22:cb:af:b7:4c:5d:7f:15:6e:
d4:72:70:a6:07:67:ca:1f:aa:4e:42:a8:ac:a9:a5:6c:f8:01:
48:c1:d5:ef:0a:3f:41:b5:b7:27:20:50:11:43:cb:5a:51:5b:
47:b8:48:e8:58:8f:79:03:f6:ca:00:8a:6c:43:c5:8e:27:26:
16:42:9d:b6:57:63:5b:5b:63:b9:a3:93:7b:bf:71:80:ae:b2:
c4:e5:69:15:f1:04:cf:5c:18:df:fd:b8:13:d3:98:a4:c5:d0:
6a:62:7a:42:03:fa:18:62:ae:3a:b1:79:88:71:c3:16:6f:2c:
32:ae:35:53:42:06:e0:2d:e8:fe:39:ed:d8:ee:9e:70:53:e9:
33:06:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:12 2026 by rpki-client