Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: 3I3Xurta9QFudLC0ofcCU5oF+s3qUdxJLpv4ZlPCVLs=
Subject key identifier: F2:7E:7B:13:0E:E2:9C:A4:8A:8E:3A:55:05:66:95:6A:E2:FB:45:26
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 01A0672496866AEF8C7877CF2EC1BC4EEDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0E1A
Signing time: Thu 03 Sep 2026 12:00:45 +0000
Manifest this update: Thu 03 Sep 2026 12:00:45 +0000
Manifest next update: Fri 04 Sep 2026 12:00:45 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: bYCZTl23MCh7ll/1RTmiQ4BuUcPxWCfujBAIqhA4LrE=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa (hash: aiGpWQ3cJ5Y8dalcsV9/+PGb+c10COEmzHR9vf++QS8=)
4: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
5: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
6: gt6O10M70oZpClO9a6i6El8hrUo.roa (hash: eGC6/RzGV3nXmQHjfKro3h+k1W53IQpH+vbs4ORuu8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:24:96:86:6a:ef:8c:78:77:cf:2e:c1:bc:4e:ed:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Sep 3 12:00:45 2026 GMT
Not After : Sep 4 12:00:45 2026 GMT
Subject: CN=f27e7b130ee29ca48a8e3a550566956ae2fb4526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:76:02:23:e1:44:a9:08:6a:d7:a9:fb:6c:
7a:df:5a:5d:42:6a:32:54:cc:52:15:30:d7:e8:c8:
e4:89:20:b6:7e:00:0f:8d:42:82:ca:ee:e3:f5:d2:
8e:aa:ce:2e:95:60:56:fc:41:46:a1:7c:52:be:b8:
19:7b:25:79:de:20:b2:3a:9e:ec:ce:91:87:ab:14:
ca:f7:31:6b:82:1d:0c:a4:05:23:e8:0c:5b:0c:b0:
f0:ce:30:1e:a9:b5:17:f3:43:22:d3:86:6b:7c:d0:
13:48:c2:79:48:3e:25:7f:df:ab:c1:0f:48:14:65:
10:e9:79:db:9b:c1:b4:c9:d1:a5:4f:63:6e:89:0c:
bc:e3:e3:74:26:94:4d:66:bb:ff:2a:bf:07:bd:38:
0a:89:a6:05:48:04:7f:26:23:2b:a8:38:95:57:53:
0b:d6:2c:73:a5:64:15:e8:6c:88:12:10:f8:95:ed:
1c:87:19:f9:7c:05:dd:3d:79:0d:ff:c3:d5:ae:6b:
a3:43:98:3f:0e:ca:6d:a8:d7:2e:99:64:d6:3f:d0:
88:67:d2:76:f5:56:d9:43:76:e5:32:a8:fd:e2:ac:
99:78:47:0e:77:01:bf:41:57:58:44:1a:64:3d:48:
22:6f:3a:58:fc:ed:4e:48:5f:5f:6b:84:ef:d3:b2:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:7B:13:0E:E2:9C:A4:8A:8E:3A:55:05:66:95:6A:E2:FB:45:26
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4b:c4:07:b8:43:4e:ad:3b:a0:db:e0:75:ee:8b:f0:c5:cb:
12:71:7e:b1:39:a7:78:31:b9:4b:55:09:98:0b:b8:e1:03:d0:
87:d3:7f:71:01:98:38:1a:7d:d5:28:88:24:f2:fc:c6:f6:6e:
da:50:13:b1:f0:de:0e:d7:5d:aa:20:a3:90:79:6f:21:02:93:
81:77:3b:c1:2d:63:4e:d7:06:4c:d0:97:23:68:09:20:30:0e:
ab:70:89:fc:bd:ce:68:f4:ba:30:78:6c:8f:a5:5e:f1:32:0d:
87:d7:52:a3:fc:5d:c2:21:65:0f:31:7c:35:05:95:cf:32:0c:
bc:14:2a:0e:06:51:47:a7:4e:76:4f:50:8c:b3:80:bc:ce:f8:
cc:96:db:09:bc:a0:3c:72:fd:62:2a:07:91:a6:8b:f7:c6:5e:
fe:c6:36:09:e2:11:a0:f3:bd:3e:71:4c:42:5e:a8:96:e7:30:
6a:03:f4:33:f6:40:12:4e:08:a1:1f:fa:07:65:88:d5:71:92:
f5:fe:73:69:19:5a:f9:be:f2:b2:9d:a6:c1:47:7e:d9:aa:3f:
db:6d:06:7d:56:1c:00:57:47:e1:99:88:ce:82:02:2a:d2:45:
23:3d:f0:43:cc:6a:8a:17:78:b8:d4:e8:f9:6d:1e:d8:33:0b:
d9:02:bb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:48:18 2026 by rpki-client