Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: dyMhiTI8aAdswUGrVmuIwXYIMgyKjTJGxPMw7LTD1hk=
Subject key identifier: C3:A5:81:DA:C6:E2:2D:99:C7:C8:98:A7:80:47:D7:B0:84:D4:F6:62
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019CABD9A31D1DAAA80C3C380D61215069B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 1524
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: E8wnMkiSbVSzBboh28_7QoxLc2I.roa (hash: zCR5rbo9HIv2yKajw50w0oXIYg6lZF+5ym6K0CZI1dU=)
2: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: +Ul/DxWfYI3WJoLhK4P1bj2ee3xhwOSq/t5Or9cAjD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a3:1d:1d:aa:a8:0c:3c:38:0d:61:21:50:69:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=c3a581dac6e22d99c7c898a78047d7b084d4f662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:49:fd:a7:8c:39:3e:1c:f3:a1:ab:0e:1a:
a5:47:a7:21:0d:b1:93:22:c4:0f:c3:27:6a:5f:e6:
5e:6d:3f:6c:81:50:ae:37:c6:d8:e6:84:fb:fa:99:
56:48:6e:7f:ee:1b:f0:43:43:45:d3:fc:90:ea:99:
12:bb:bd:e6:05:7a:d4:86:b4:5e:e3:ea:78:c6:9d:
76:68:c1:f7:e9:40:5b:fb:9d:62:a3:d4:52:c0:ef:
f3:24:4c:83:2c:f8:fc:08:86:41:b2:48:b8:9d:8d:
e4:49:19:5c:4e:ed:7c:90:42:66:c5:9a:11:c3:9a:
6e:4a:a4:84:f8:92:c1:96:78:6f:44:87:e9:c0:65:
40:fc:c5:5d:a3:04:98:4e:d3:8d:25:e5:37:88:94:
f9:e2:f2:a3:a2:4e:d1:ea:fc:9d:01:49:91:16:8c:
94:e5:7a:dc:77:53:16:4f:4e:79:1d:ae:a1:9f:0b:
93:fa:f4:fe:b0:5f:b3:e5:bb:3f:a5:b5:d3:61:4a:
5c:d3:c2:d0:32:60:15:e7:0c:dc:db:c7:ad:f2:7c:
2b:27:0d:be:0c:6e:0d:a4:d0:00:31:85:62:c7:77:
78:f5:ad:cd:46:72:a1:d4:40:79:f4:12:fa:d9:97:
d2:7a:9e:55:26:03:14:f1:f5:91:2f:89:6b:eb:3e:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:81:DA:C6:E2:2D:99:C7:C8:98:A7:80:47:D7:B0:84:D4:F6:62
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bf:9c:22:86:1c:7a:9e:df:49:22:7f:6e:d9:c4:78:42:a7:
94:3a:a0:87:9e:51:c1:88:07:a0:22:bb:5f:a1:9b:d5:12:ef:
77:3c:23:d3:7a:de:79:2c:e8:35:07:e4:f2:cc:b7:84:bb:3b:
b6:83:24:c1:1e:17:e0:db:0d:3d:66:00:be:a5:f3:56:aa:64:
1d:df:48:e6:cc:0b:63:2d:02:1d:9b:2a:c9:52:4b:ee:97:0f:
6a:8d:db:bf:f8:79:03:e4:ac:b8:01:c3:87:75:a3:8c:20:dd:
eb:f3:22:b3:7a:00:d2:90:85:08:d2:b0:6e:f1:27:2e:ae:3c:
08:c6:37:01:47:e5:04:0d:17:06:6f:f2:11:7c:fb:23:33:bd:
a3:02:47:9d:7d:83:fc:9c:aa:26:1a:42:af:fa:02:00:cf:c0:
7e:25:b8:4a:b2:2a:c2:b6:72:eb:98:ff:a3:66:c0:ba:69:a9:
97:c3:dd:39:74:3b:23:7a:d7:60:dd:46:05:7b:ec:a2:72:a5:
1b:86:dc:6e:8d:43:1e:62:bc:69:f4:15:73:a9:b4:d4:de:87:
de:ab:c5:75:0a:7e:db:9c:fc:2a:2a:c9:c8:6b:cf:7b:f7:b9:
a1:d3:97:f4:99:7f:1d:9e:39:ab:f4:7f:7b:4b:e7:20:c2:ed:
d0:21:f6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2aMdHaqoDDw4DWEhUGmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmNkZjc2MjljNGUwMGU5MDZmMTQzNWY0NDlkZDEwOWY0
MTBiNmMwHhcNMjYwMzAyMDAwMTMyWhcNMjYwMzAzMDAwMTMyWjAzMTEwLwYDVQQD
EyhjM2E1ODFkYWM2ZTIyZDk5YzdjODk4YTc4MDQ3ZDdiMDg0ZDRmNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIFJ/aeMOT4c86GrDhqlR6chDbGT
IsQPwydqX+ZebT9sgVCuN8bY5oT7+plWSG5/7hvwQ0NF0/yQ6pkSu73mBXrUhrRe
4+p4xp12aMH36UBb+51io9RSwO/zJEyDLPj8CIZBski4nY3kSRlcTu18kEJmxZoR
w5puSqSE+JLBlnhvRIfpwGVA/MVdowSYTtONJeU3iJT54vKjok7R6vydAUmRFoyU
5Xrcd1MWT055Ha6hnwuT+vT+sF+z5bs/pbXTYUpc08LQMmAV5wzc28et8nwrJw2+
DG4NpNAAMYVix3d49a3NRnKh1EB59BL62ZfSep5VJgMU8fWRL4lr6z47+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOlgdrG4i2Zx8iYp4BH17CE1PZiMB8GA1UdIwQY
MBaAFCn833YpxOAOkG8UNfRJ3RCfQQtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNDdiZTgtMmZmMC00YzkzLWI5MTIt
OTA1ZTc2M2YwNDhkLzEvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kNDdiZTgtMmZmMC00YzkzLWI5MTItOTA1ZTc2M2YwNDhk
LzEvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7+cIoYc
ep7fSSJ/btnEeEKnlDqgh55RwYgHoCK7X6Gb1RLvdzwj03reeSzoNQfk8sy3hLs7
toMkwR4X4NsNPWYAvqXzVqpkHd9I5swLYy0CHZsqyVJL7pcPao3bv/h5A+SsuAHD
h3WjjCDd6/Mis3oA0pCFCNKwbvEnLq48CMY3AUflBA0XBm/yEXz7IzO9owJHnX2D
/JyqJhpCr/oCAM/AfiW4SrIqwrZy65j/o2bAummpl8PdOXQ7I3rXYN1GBXvsonKl
G4bcbo1DHmK8afQVc6m01N6H3qvFdQp+25z8KirJyGvPe/e5odOX9Jl/HZ45q/R/
e0vnIMLt0CH2qA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:12 2026 by rpki-client