Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier: Z8PZagYYkGo1X6o9OD63wAMjGjydXbOs5tSaV/7S7Rk=
Subject key identifier: 6E:C8:9A:38:30:8B:05:C5:96:BB:D8:26:1D:32:5B:23:95:8A:EA:2C
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial: 019D38D3785D21A930FC103FEF186AA6688F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number: 0C4B
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: K1wuy+nLmGwW+YJxkSf0OmIhtxlytexdEEdVpKgf200=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:78:5d:21:a9:30:fc:10:3f:ef:18:6a:a6:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=6ec89a38308b05c596bbd8261d325b23958aea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:ad:ce:77:4e:cb:bd:f3:61:55:1a:0e:30:
ab:9e:cd:e9:c7:f3:32:1f:28:9a:3b:1d:2f:c6:7b:
eb:fb:61:8b:91:51:fe:b6:e3:38:9c:8e:9f:b0:ab:
44:05:de:f5:83:20:ec:cc:90:8a:6e:6d:f4:77:c4:
95:fc:cf:5a:47:8b:da:f3:23:96:84:28:ae:12:fd:
5d:25:15:8a:78:5e:d6:cd:4a:3f:e5:03:38:e5:2d:
70:0e:7c:9b:e8:4c:a8:ce:8e:62:b3:4b:31:38:5d:
ca:a3:ff:69:ba:46:28:e0:bb:8f:2a:93:3c:69:f2:
cf:c5:47:d5:13:f8:5c:88:c6:66:bf:23:0b:15:c3:
13:58:9d:22:eb:d3:57:aa:ed:8b:11:c9:e2:eb:12:
ef:77:1c:bc:2b:c7:7e:96:2b:ae:c7:01:c2:87:90:
fc:84:15:67:c8:f1:9f:20:c5:21:9a:50:e5:7e:c9:
71:cb:88:0c:56:0e:42:12:ff:72:67:bb:9e:36:33:
cf:3d:98:05:e1:e4:52:ca:a7:3e:d3:a3:77:56:28:
c8:ad:f9:69:b6:9c:91:66:ad:d0:98:84:ee:bb:11:
4c:52:d5:ff:cf:a0:ab:68:2b:c1:b3:3e:41:bc:1d:
2e:69:e8:e4:ce:bd:76:0c:2e:e3:32:d5:57:1c:9b:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:9A:38:30:8B:05:C5:96:BB:D8:26:1D:32:5B:23:95:8A:EA:2C
X509v3 Authority Key Identifier:
keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:34:2c:b3:3f:a4:93:66:e7:39:7f:e7:55:14:e8:6b:7f:0d:
c8:f5:dc:79:7f:fd:ea:76:04:46:87:5d:64:5c:b3:06:27:ee:
70:0c:cb:a0:ad:b9:8a:1b:94:6f:36:ea:8c:67:5e:c7:18:f3:
2a:ee:d7:f2:fb:19:86:15:e8:1d:03:3b:83:52:5a:2b:f6:77:
3a:7d:16:8a:1c:25:56:60:c0:5c:0a:c1:6b:e5:31:76:16:f1:
7c:ba:b2:fc:06:4d:9e:12:12:d9:30:aa:77:ae:56:35:64:28:
4c:8a:d4:00:20:01:72:1e:ec:d7:03:30:a7:e3:79:a2:9c:f6:
57:97:ef:87:36:de:75:90:c7:4a:e3:7d:fb:38:be:d6:29:12:
ae:81:e7:12:8a:a2:2a:56:84:70:26:56:7d:2f:e7:ff:4d:d8:
ae:65:79:11:5a:8d:0f:65:24:7c:a6:b5:9d:88:53:b2:59:4b:
54:21:af:20:3b:18:47:c8:c9:6e:fa:76:70:95:92:62:b6:5a:
79:ec:34:6d:8c:92:14:29:b0:a2:30:68:b6:e4:11:df:4f:b5:
5a:94:e1:86:cc:0c:70:43:4c:e5:18:ea:5d:a8:45:4c:09:98:
16:0b:d1:d3:66:5c:82:e5:2e:9e:f5:3c:2c:72:df:a4:6c:89:
4f:d3:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:17 2026 by rpki-client