Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: CNBq0DgkVcsog3D2Aq0VXFAENOQnex7doGQeTZFuRPU=
Subject key identifier: 94:7F:05:33:9B:2C:DA:4D:A7:E5:FC:BB:D4:6C:F3:8B:EA:C0:3D:F3
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 019D38D36959D474AEF6F5272ECC3599AE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0F4C
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: bUa41NkpqUmL0vHl1aZRoGmQ6EWgc2M9+QY6K5B266Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:69:59:d4:74:ae:f6:f5:27:2e:cc:35:99:ae:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=947f05339b2cda4da7e5fcbbd46cf38beac03df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:ec:98:76:09:6d:08:b4:bc:11:1b:31:eb:
39:b7:89:85:a8:a0:f3:ba:53:ca:93:15:2e:d5:15:
ec:39:58:01:5d:79:ae:d2:3f:18:58:19:c9:24:c1:
dc:fd:72:6c:d3:27:ec:03:6e:5c:f2:13:40:b1:c7:
97:1e:4f:8f:10:d4:ae:e8:64:d0:0c:80:ee:17:f6:
8d:2d:eb:c7:05:cd:3d:4c:c5:d0:51:bc:e8:16:cd:
f4:98:28:e2:91:dd:f5:1e:60:16:47:3a:52:ab:0c:
ce:cc:53:83:37:55:8b:33:8e:a0:a3:b8:fb:50:e7:
e1:be:f9:4c:39:49:70:58:46:a8:ba:fc:68:51:19:
a4:cf:67:67:23:e7:3c:36:9e:c9:3f:2d:f1:3c:03:
15:6e:19:2d:fd:b2:9f:46:e9:33:fc:f1:9e:de:4f:
86:30:a8:d3:eb:0d:c2:f8:be:6b:71:66:8b:20:de:
d2:ed:46:5d:e6:2a:00:a9:05:1f:cb:17:7c:8f:f3:
64:b6:35:09:bc:a7:da:bf:5c:d5:2d:04:f0:57:0c:
f7:d8:76:3e:1a:a2:54:67:68:61:26:99:61:06:ee:
87:9b:0c:28:30:4a:e7:ca:c4:bd:86:95:d0:d5:b7:
53:6f:82:34:61:f6:9d:24:dc:db:76:5e:a2:ce:15:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7F:05:33:9B:2C:DA:4D:A7:E5:FC:BB:D4:6C:F3:8B:EA:C0:3D:F3
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:de:5f:25:a7:b5:ea:94:3c:cd:c6:17:03:4c:fb:aa:0b:b5:
e7:4c:2b:74:b3:c0:46:c6:ae:d4:97:06:dc:5f:a7:7a:00:d3:
77:55:5b:8a:b0:dd:9e:4a:80:fd:ac:a0:0c:ca:4c:01:65:76:
cf:ec:7a:11:ff:e4:8e:42:45:d7:bd:b8:1e:9d:d9:f5:b8:f2:
e1:c3:60:a3:f0:fa:99:c4:31:d3:85:f3:59:8a:2e:97:4d:64:
82:b4:45:01:78:f6:5b:2a:61:fb:be:a9:79:d4:39:bd:a8:4b:
45:4d:9b:78:16:6d:39:38:76:b4:42:9b:5b:29:98:c5:1c:53:
fb:88:ad:b1:a6:b3:7b:0b:84:43:68:3e:26:d1:3f:ae:af:9e:
a7:cb:25:a6:0c:5d:f9:19:e5:e3:52:98:22:c8:c1:79:8e:e8:
70:7b:bb:4c:d4:01:9d:d0:db:3c:bc:65:60:cd:08:99:cb:20:
57:1a:c1:ef:7d:cf:81:97:21:f6:7f:e8:b5:3c:7c:9b:a9:db:
32:69:9a:02:32:1e:a9:ae:5e:c7:48:59:2d:99:3b:69:b7:c2:
64:d4:6b:ff:53:6c:60:55:c1:d7:79:1a:67:7f:37:e5:a1:7b:
94:e0:87:7e:54:d7:1e:53:57:4e:ac:42:13:3c:87:9e:1f:59:
13:43:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:37 2026 by rpki-client