Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: lm3gy60oALbHt6BkYl560/tMmjk7REf/U6KTxk3n7Vs=
Subject key identifier: 67:F2:4B:47:80:7A:3F:7E:8D:C9:50:6A:E5:74:32:41:41:94:5B:FA
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 01A1DFBA65B23099B635D0B7266486EDFD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0EDD
Signing time: Sun 15 Nov 2026 15:01:37 +0000
Manifest this update: Sun 15 Nov 2026 15:01:37 +0000
Manifest next update: Mon 16 Nov 2026 15:01:37 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: sGNJ2FLLh4PUfFpBgi/5cQfiYgiz1cJB1jQSWIUh15w=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa (hash: aiGpWQ3cJ5Y8dalcsV9/+PGb+c10COEmzHR9vf++QS8=)
4: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
5: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
6: gt6O10M70oZpClO9a6i6El8hrUo.roa (hash: eGC6/RzGV3nXmQHjfKro3h+k1W53IQpH+vbs4ORuu8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:65:b2:30:99:b6:35:d0:b7:26:64:86:ed:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Nov 15 15:01:37 2026 GMT
Not After : Nov 16 15:01:37 2026 GMT
Subject: CN=67f24b47807a3f7e8dc9506ae574324141945bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:eb:98:e6:a8:e6:c7:02:20:d4:68:2e:2d:
b1:f9:52:ea:16:2b:8a:cd:b6:77:1e:42:dc:51:97:
90:91:fd:fe:02:9c:c7:e2:26:8b:f6:e4:8c:91:90:
01:ab:aa:1a:24:a0:de:a8:9a:31:76:23:16:16:5c:
2c:7e:be:5b:42:c1:6a:74:73:74:e7:6b:21:e8:b1:
c5:29:d4:50:4a:07:4e:ea:cf:67:de:dd:bb:0e:c5:
2e:ec:96:0d:b6:80:15:0b:bb:30:aa:10:ac:0b:83:
e6:38:d0:36:eb:69:b6:00:40:fe:a7:b3:74:02:4e:
04:11:07:1a:db:4a:bd:96:9d:c4:3b:30:0d:52:1e:
3e:42:d7:76:39:7a:4f:59:9b:15:57:d3:11:98:65:
60:a3:e9:12:5a:bb:85:a9:5c:ab:20:ec:66:e3:f6:
38:be:6a:fe:69:f7:f0:87:bb:b1:71:cd:f2:ee:45:
01:f2:c8:8b:76:bf:c3:0c:65:7e:1e:b2:4e:7f:4a:
40:a8:f3:1f:5a:96:2f:f1:c5:e1:ae:38:4b:00:d0:
2b:39:78:d2:44:13:7a:e0:7f:82:fb:25:74:66:48:
25:49:7a:97:25:e1:dc:c7:b8:e8:b7:1c:e1:4d:56:
25:86:44:41:53:c0:b9:5a:1f:03:ea:cb:a9:8f:1c:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:4B:47:80:7A:3F:7E:8D:C9:50:6A:E5:74:32:41:41:94:5B:FA
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:12:f7:04:21:0d:b2:9d:b4:05:0d:73:41:bf:22:7c:f2:d0:
77:29:67:87:d5:15:a9:53:d3:ab:80:e1:11:13:bb:e6:9b:0e:
35:d7:77:15:fb:c5:d2:85:1a:6d:e8:74:12:89:a4:f6:8e:5f:
fd:b8:fc:4d:6b:29:82:5f:bc:bb:7e:71:62:f2:28:66:6e:63:
d0:6d:c0:55:23:d6:0f:7a:af:fe:23:f0:84:3d:79:1f:ff:d9:
1b:46:e7:a5:e8:ee:84:4e:29:b1:c0:42:bb:e2:ac:1c:bf:9e:
b7:df:6e:25:ea:02:d3:ec:79:c4:8f:16:61:d8:e3:b2:5e:a8:
28:68:71:a0:73:c0:21:bc:2b:1b:b1:17:ec:17:5f:fa:04:a9:
ca:47:60:79:c2:e0:08:98:ee:54:1d:d3:15:8b:a4:a2:8b:6c:
bf:ea:8b:a3:60:6a:43:e3:c3:a6:12:ea:cf:0b:69:7b:9c:3c:
35:c3:16:8f:93:66:9a:d2:74:57:90:de:95:ca:4d:52:c2:c6:
f5:dc:2b:e6:43:96:84:46:0b:83:b3:1c:81:0a:47:67:e6:5e:
d0:89:d9:58:23:03:15:f4:b3:d7:32:22:68:1c:ed:4f:26:97:
ab:56:43:08:a2:d1:95:13:1b:1d:33:a9:6a:c3:cb:90:89:6f:
5b:4d:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:55:11 2026 by rpki-client