Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: +C8xrf9WdMSYdimJBheMSJPD2ezeyBHC9S+q3SByfd4=
Subject key identifier: 1E:B3:89:16:45:96:50:25:7B:5B:09:51:85:73:4C:26:C3:23:89:61
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 01A1697DCB7D1F05DA9E0333FAC260AF1D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 1A4D
Signing time: Fri 23 Oct 2026 16:00:14 +0000
Manifest this update: Fri 23 Oct 2026 16:00:14 +0000
Manifest next update: Sat 24 Oct 2026 16:00:14 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: 4yfvFWVK7ynM+RfiHhUOlZDRqkfMdoWBi20tzYkM3CY=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:7d:cb:7d:1f:05:da:9e:03:33:fa:c2:60:af:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Oct 23 16:00:14 2026 GMT
Not After : Oct 24 16:00:14 2026 GMT
Subject: CN=1eb38916459650257b5b095185734c26c3238961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:83:86:8d:08:e8:66:8c:d2:86:27:b0:12:
40:d4:fa:e9:9a:ce:6d:0d:cb:0b:86:66:53:ee:f7:
c8:91:f8:85:f0:f5:59:50:c2:ed:1e:60:d9:85:d7:
a9:4c:6b:c5:b7:5c:e4:61:2a:fa:b7:fa:70:0a:61:
e8:e2:57:9a:9b:9e:19:6f:9b:60:e1:d7:fa:6a:23:
75:3d:ae:18:4b:34:39:be:57:42:c5:5e:4c:30:ec:
1d:c3:18:5a:9c:de:50:f5:f7:36:c4:06:b1:04:8b:
dc:87:37:bf:01:4d:f7:c1:ab:a7:99:60:5e:0e:be:
25:80:69:34:77:0c:72:86:c2:9a:5e:4a:d5:40:76:
82:34:64:f5:8f:fa:9a:f8:5d:76:7c:e8:82:f7:8b:
e8:58:b9:03:d4:39:f8:1b:48:15:eb:1f:52:a2:e5:
53:7b:43:5a:6d:4b:fa:26:1f:97:8f:a8:cb:2e:aa:
59:bf:dd:d0:36:0d:3a:e4:50:a8:16:eb:2a:1d:2b:
34:da:4f:7c:49:cd:49:f5:f1:4e:6c:b0:c5:89:ad:
1e:31:0c:85:2d:33:93:81:3f:3e:94:8b:2d:ca:95:
a2:29:0a:92:9f:f4:d5:25:20:3b:f7:ef:38:e4:56:
69:37:aa:be:6a:4a:e7:1c:58:2c:4d:80:ed:65:92:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B3:89:16:45:96:50:25:7B:5B:09:51:85:73:4C:26:C3:23:89:61
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:32:16:69:b1:3a:98:c3:48:55:9c:ac:b6:7b:cb:84:2d:41:
5f:20:f3:0a:19:0a:64:1a:47:d7:05:0e:09:f8:48:a5:01:61:
e3:e3:70:03:3b:bd:d9:7d:59:85:e8:0f:18:1c:9d:97:03:55:
b9:7c:3d:b0:f9:7b:2b:3f:b7:b5:f3:bf:52:72:6e:01:23:d7:
f6:cf:c9:82:df:34:24:fb:e1:18:59:87:ac:f2:61:97:4d:87:
cd:90:76:e6:c5:fb:41:42:83:74:d5:a5:73:6e:a7:b1:18:08:
3d:91:8b:af:cf:b3:3a:72:42:e5:f0:d7:73:64:65:72:d9:6c:
27:57:5b:63:1b:04:28:ec:f6:14:fd:ca:23:00:5e:a8:53:fe:
95:06:9b:22:fa:84:a6:cd:0c:ac:2a:87:b2:df:9d:cd:76:e3:
a9:29:d6:6b:d1:8f:47:fe:b9:68:f5:f6:19:a9:9c:07:a6:b7:
41:36:65:26:6d:29:d1:79:82:e7:0c:6c:27:63:e9:8f:54:26:
18:27:b2:e3:6e:ce:47:eb:3a:98:4c:56:17:c7:bb:db:ab:e7:
39:20:72:40:54:bc:cc:14:f6:86:13:1a:07:26:13:7a:8a:14:
a2:bd:a2:d4:33:4c:7f:f4:8a:07:dd:e2:91:65:66:98:29:e9:
8b:cd:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:42:13 2026 by rpki-client