Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: yCPEmHdGhZvH0yV9BCHI4LROYeqF+1692HGI8gmxGf8=
Subject key identifier: 11:33:F7:67:04:DD:E2:0E:53:9D:BF:87:62:A8:D9:B7:A0:8E:DC:0B
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019CAE6C255E3F53AFFBBCC1AD35B9CC4292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0C2B
Signing time: Mon 02 Mar 2026 12:00:48 +0000
Manifest this update: Mon 02 Mar 2026 12:00:48 +0000
Manifest next update: Tue 03 Mar 2026 12:00:48 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: 012/8IHL16ZM92OWVDyKwZ6npIU7K0X2mMc7ZgtXGpA=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
4: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
5: tg0TgMF_mOcJrDdgBYL-290G2-M.roa (hash: UjyXgWR1IlQdcA1RR5ThsgsI4c2xfE45PbnBDC6Sn6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:25:5e:3f:53:af:fb:bc:c1:ad:35:b9:cc:42:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Mar 2 12:00:48 2026 GMT
Not After : Mar 3 12:00:48 2026 GMT
Subject: CN=1133f76704dde20e539dbf8762a8d9b7a08edc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:89:9c:6d:62:ce:08:fb:f6:42:3a:c6:67:
7d:a4:82:75:75:c2:77:13:44:ee:ae:15:7a:46:ea:
d9:19:69:dd:c5:89:0d:c9:82:fe:cc:b6:85:0e:b3:
ee:58:01:3b:6e:7b:91:61:68:02:52:d0:c1:a8:b0:
19:c8:7a:cb:59:6d:0d:17:09:3f:fd:87:e8:a2:ec:
1c:2c:85:a2:20:de:b4:23:5f:54:3d:7e:b5:7c:39:
e7:8c:ea:07:f8:6d:b0:fa:13:42:bf:bc:ab:d4:e2:
df:e1:03:20:fe:d6:2e:3c:7c:ca:f7:78:1d:ce:20:
f9:9b:c2:e4:f5:ed:aa:b8:64:6c:f5:4b:ed:05:72:
62:88:ae:44:78:aa:b2:6c:2c:5a:a6:a0:55:21:20:
ec:b8:e9:4e:5e:2f:7e:c5:f0:9f:5d:d7:75:3d:bf:
c9:a8:f9:ce:9d:e3:02:91:4e:b1:48:ec:49:89:63:
ff:34:f4:60:e8:43:5e:bf:c0:cc:b0:8f:36:9b:da:
35:81:ca:6f:a8:a5:8b:0b:0a:dd:87:4b:34:45:68:
24:4c:65:92:1e:eb:0c:44:7a:e2:89:a5:36:5d:ad:
a1:a2:2f:72:d3:0a:85:4c:13:f1:6e:84:62:b7:b2:
0c:91:99:10:c2:99:35:e3:89:09:8b:c2:3e:e3:cf:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:33:F7:67:04:DD:E2:0E:53:9D:BF:87:62:A8:D9:B7:A0:8E:DC:0B
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:9e:52:e0:53:b9:aa:d8:e1:fb:c1:2f:4e:cf:e9:19:5a:2e:
e3:3f:9a:8c:c4:ac:58:d9:de:c4:f9:3e:77:64:c3:86:93:3c:
2f:3c:44:6e:e4:ab:34:14:22:10:81:19:44:7d:df:37:eb:00:
1f:f2:2f:58:2b:7a:e0:ed:c6:71:39:c0:11:a9:3b:26:6d:32:
51:44:6f:2f:81:dd:61:ee:27:6c:ed:b2:08:51:ad:34:3b:f4:
be:02:f7:b6:44:b6:cf:c0:e1:58:5b:52:23:94:80:ca:28:06:
ca:4e:18:1b:2f:7f:29:cc:98:db:19:c7:0c:b4:a3:ac:02:54:
21:72:ca:be:7a:52:ab:63:bb:0e:bd:63:b2:0f:1f:91:5e:b9:
27:b0:47:cc:45:8e:1f:0a:35:77:38:8b:3b:c6:f0:13:48:90:
d7:cb:aa:00:d3:98:74:0c:d1:b1:7e:6d:bc:e4:2f:55:4e:67:
ff:aa:ea:53:0a:6a:10:44:0c:13:f7:c3:3b:78:c2:bf:7a:6a:
1b:fd:05:92:f0:8e:05:f1:49:22:19:0e:8d:ff:a3:8f:c8:3b:
8f:f2:c8:93:27:53:07:17:b6:3e:8b:21:08:42:81:83:79:9a:
4b:cf:2f:4a:56:5c:90:91:e2:8c:36:19:27:ad:9d:55:7f:9c:
8c:93:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:13 2026 by rpki-client