Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: /pICBvUif591HLnskRS6flFB3tlTC5h/eedwka586ig=
Subject key identifier: F7:C1:E4:D8:68:61:A7:3D:A6:47:FB:38:91:DC:6E:B7:4C:BA:63:4F
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019DA3AEE50087AEF30B0F3B4B9F0E5B5355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0CAA
Signing time: Sun 19 Apr 2026 03:00:41 +0000
Manifest this update: Sun 19 Apr 2026 03:00:41 +0000
Manifest next update: Mon 20 Apr 2026 03:00:41 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: gCP/4QkmQJCEBkh60OhaC/68yVM9Msui2LcHNg+4TQM=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
4: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
5: tg0TgMF_mOcJrDdgBYL-290G2-M.roa (hash: UjyXgWR1IlQdcA1RR5ThsgsI4c2xfE45PbnBDC6Sn6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e5:00:87:ae:f3:0b:0f:3b:4b:9f:0e:5b:53:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Apr 19 03:00:41 2026 GMT
Not After : Apr 20 03:00:41 2026 GMT
Subject: CN=f7c1e4d86861a73da647fb3891dc6eb74cba634f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:0e:72:b5:4e:c1:a5:96:54:73:06:16:b3:
47:86:b8:89:47:5f:35:22:1a:1e:20:d5:13:70:de:
34:4d:87:8a:db:3c:14:9a:69:12:27:9a:4c:79:f1:
fb:fc:e7:95:a9:ef:c6:f9:6d:42:ed:b0:08:4d:90:
bf:af:e3:5f:24:ca:af:07:68:95:ff:18:6f:a0:a0:
d0:cf:f7:e0:a7:cc:c1:2c:71:06:8c:d2:91:fe:9f:
7f:cf:3d:61:ab:1f:1f:79:c8:2e:2c:dd:72:25:41:
1b:9d:e1:53:4b:0a:04:bc:fe:b1:fd:91:09:5d:87:
d0:b1:99:4c:a6:b5:e2:1d:10:32:e0:88:a9:96:b3:
1b:26:3f:5c:43:18:ae:1c:3c:17:bb:55:40:a2:23:
61:04:f5:22:c8:23:78:d4:09:f2:2c:f3:15:9a:2a:
51:f6:9a:8c:3d:c2:e1:d4:26:24:9d:20:7a:f0:ca:
4a:cf:70:b9:92:4b:50:13:54:25:75:fe:2c:70:fa:
02:8a:19:09:ec:93:85:3f:ec:fc:79:0b:18:45:fe:
fa:e3:e5:78:e8:03:29:3b:19:c8:a0:87:06:08:78:
da:b4:37:16:7b:fe:ce:6e:d9:44:fe:c5:f9:bf:5d:
a3:c6:32:6c:eb:ca:2a:e2:cb:31:99:6a:cc:33:99:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C1:E4:D8:68:61:A7:3D:A6:47:FB:38:91:DC:6E:B7:4C:BA:63:4F
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:96:7f:ef:b9:d0:e1:bf:44:06:c1:b5:59:ab:d7:b4:9e:9f:
6c:7f:3e:16:37:bf:c8:40:c2:d4:b5:fc:4f:0c:c3:4c:26:46:
a4:bb:cc:d9:9d:25:13:ff:2c:df:c1:95:e7:cb:82:ae:e7:75:
37:38:a1:18:23:7c:14:b5:96:58:60:c7:eb:6d:ed:56:18:5f:
dd:57:4a:d3:54:fc:b5:f5:94:5a:10:fc:aa:29:9b:ad:5e:96:
05:90:a5:6c:a8:ae:c5:f1:6a:e5:38:14:a2:9f:c9:84:3c:39:
c0:98:da:2a:24:79:b1:71:ff:d3:d6:96:61:11:71:b8:4e:27:
7f:e4:f9:22:76:0b:5d:d7:3f:10:7f:6c:d2:78:84:fb:d0:18:
5a:79:7f:cf:e8:37:04:a5:ef:12:08:9f:f7:72:f4:88:ee:a9:
6d:db:41:5a:7c:8f:b8:68:12:2e:9e:cd:35:7a:24:5c:60:f5:
af:0c:fa:15:2e:a4:3a:82:63:1c:a3:e7:67:6e:17:b5:54:ba:
b2:0c:c6:66:98:8d:41:2d:17:6d:ef:8b:3f:0e:21:15:7d:81:
37:eb:be:38:5f:d9:6b:e7:50:be:0c:21:93:ff:96:79:16:51:
df:8f:10:69:d3:b4:c3:6d:df:50:5e:ed:5f:37:53:b9:25:6c:
bc:ac:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:01 2026 by rpki-client