Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: FUSc+JAyi0KdOzV4ftoZBH+NUkk7B0w0EhLql98NVjY=
Subject key identifier: 66:26:55:0D:46:83:AD:E8:76:2D:ED:2A:C0:DA:BA:6A:72:83:55:73
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019CAC7DB603F53A54649601DAEEEF122515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0C2A
Signing time: Mon 02 Mar 2026 03:00:45 +0000
Manifest this update: Mon 02 Mar 2026 03:00:45 +0000
Manifest next update: Tue 03 Mar 2026 03:00:45 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: oOi6y0n35AAgZtu3xJ0UM32pyQGdqTNAXWrb9cvkfeY=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
4: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
5: tg0TgMF_mOcJrDdgBYL-290G2-M.roa (hash: UjyXgWR1IlQdcA1RR5ThsgsI4c2xfE45PbnBDC6Sn6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b6:03:f5:3a:54:64:96:01:da:ee:ef:12:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Mar 2 03:00:45 2026 GMT
Not After : Mar 3 03:00:45 2026 GMT
Subject: CN=6626550d4683ade8762ded2ac0daba6a72835573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:90:79:c5:d6:38:d9:bf:84:05:25:82:de:
a4:ec:45:66:c8:88:ba:cc:e4:43:75:c3:7f:0c:70:
c8:ce:55:f5:f4:6e:2a:ac:f3:3f:cf:e0:e2:13:22:
11:54:b9:b9:6f:ae:51:55:1c:28:70:97:4c:2c:0f:
bd:e5:5d:3c:d3:5d:0d:ec:ef:08:2c:50:f9:3d:1b:
ea:0b:28:ef:d1:cc:89:ac:a4:83:25:5d:11:ec:5b:
89:54:db:ec:be:2b:f9:b9:f8:00:14:f1:a1:b0:48:
e3:0c:cc:be:9d:1d:64:4f:56:98:48:1a:b5:c6:6c:
69:7f:f3:8d:c3:7b:73:5c:6d:69:6f:a2:af:0b:db:
23:50:88:78:b3:1d:5e:a7:45:0c:c0:c1:85:fb:0d:
b1:6c:ef:29:29:a6:59:46:ee:16:81:1d:ee:95:0f:
8e:b1:5b:36:3b:cd:98:af:2f:e7:80:64:56:8c:56:
b0:e4:68:24:13:b9:4d:22:4d:e0:2a:18:d5:3e:c1:
ed:65:24:42:1e:04:56:f6:32:17:12:c4:1e:59:24:
29:c1:82:d8:7c:b3:ac:30:b6:1a:95:a6:c4:29:d1:
ba:91:e4:bb:50:1e:fb:d2:1c:ff:33:0c:73:a1:4d:
f1:b8:cf:a2:e0:99:21:08:ac:4e:dc:d3:d2:b2:a1:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:26:55:0D:46:83:AD:E8:76:2D:ED:2A:C0:DA:BA:6A:72:83:55:73
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:00:fc:da:86:dd:2e:40:f8:c1:dc:67:45:1f:78:43:7b:dd:
e6:c7:f9:e9:7d:64:f3:b9:bb:4f:f3:92:89:02:4b:55:fc:e7:
fb:0a:b8:6c:06:34:6e:fd:4b:d2:67:88:f7:e4:9a:2e:53:72:
bb:2b:1c:49:a3:41:14:5d:be:11:a6:46:cb:9c:07:8f:7c:c9:
17:20:d2:55:52:c8:a3:47:9f:b3:e7:b1:17:30:d1:0f:af:7e:
ee:7b:12:7a:02:03:b1:d5:40:17:54:14:0c:55:15:52:6b:cc:
54:53:a4:4a:28:8f:c9:96:ae:b1:19:7e:6f:1d:0a:50:6b:dc:
99:fb:ff:fe:57:da:c7:8d:4e:44:12:5b:73:32:d9:51:34:9d:
23:da:f6:30:83:96:49:ac:a8:54:72:bd:0c:d1:ec:87:4c:6c:
5f:f1:9a:6a:d2:cd:bd:73:de:0d:95:59:f4:42:ee:c3:56:07:
d9:f3:63:53:0b:22:3f:ee:bd:3a:9d:78:ba:e1:df:df:90:04:
98:d8:2d:42:29:09:61:7f:45:99:bf:f0:d2:33:a4:35:17:1a:
4a:92:8a:f0:6d:e2:24:25:1c:ff:28:7c:06:d7:f0:90:f4:a3:
c7:a2:8e:32:3e:d6:ed:91:e6:ba:fd:0c:51:13:bd:53:d6:04:
08:31:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:53 2026 by rpki-client