Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: GUcUxcsoAMDKKZhucjbA+ZQAA9xsUCF5OgTRlAq7eyQ=
Subject key identifier: DC:6D:40:7E:D2:DD:25:AD:DE:EB:3B:D0:9B:19:86:6D:C0:3E:FE:8A
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019E30E03F610AD337AE1BFD05F60D2B3A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 18A2
Signing time: Sat 16 May 2026 13:01:03 +0000
Manifest this update: Sat 16 May 2026 13:01:03 +0000
Manifest next update: Sun 17 May 2026 13:01:03 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: NVI9kBzJc38fa614qqTlmzxYlqlI1Gp9ZmyPHjNnU5g=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:3f:61:0a:d3:37:ae:1b:fd:05:f6:0d:2b:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: May 16 13:01:03 2026 GMT
Not After : May 17 13:01:03 2026 GMT
Subject: CN=dc6d407ed2dd25addeeb3bd09b19866dc03efe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:40:48:c9:25:6f:60:a0:36:66:73:b7:7e:
08:6c:d3:9a:f4:ce:6f:27:56:7c:82:fa:1a:21:66:
e6:70:cc:c5:49:12:9b:c2:05:c3:75:5c:64:dc:9d:
b4:90:9c:8f:7e:b5:f2:8c:81:47:3d:17:cd:1e:9a:
a4:7b:cc:c3:8e:15:13:92:a4:93:bc:b1:d7:17:7f:
46:6d:ff:6b:eb:1b:29:8c:3f:6d:4e:da:45:c4:a0:
74:bd:63:19:9b:12:8f:b8:89:04:1a:c8:c1:8f:cc:
10:ff:cc:fe:e5:4a:17:1e:d4:e0:73:05:87:6b:71:
5e:63:bb:b8:f7:3a:1e:95:2b:09:a7:f7:2d:02:d1:
0d:e1:44:e3:cf:94:8c:25:16:e2:16:8d:8c:d4:bb:
a5:40:22:9a:88:46:ac:7a:27:ad:74:9b:bf:6b:d3:
23:ed:e7:83:f9:4c:68:c1:7b:54:b5:70:d2:cd:81:
08:d7:52:d2:bd:f2:b9:51:cd:db:5d:73:ea:7e:55:
94:fc:d6:b3:af:22:90:3e:15:76:89:28:3b:53:0f:
2f:6a:78:dc:c2:6e:f9:fd:df:dd:4e:1e:f9:b1:95:
a6:1b:4b:61:37:13:77:4e:ed:fc:c7:b7:a4:55:65:
8c:0b:cf:42:f6:33:5b:3b:29:aa:3b:6e:13:8c:6b:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6D:40:7E:D2:DD:25:AD:DE:EB:3B:D0:9B:19:86:6D:C0:3E:FE:8A
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:64:d8:de:3d:e1:e9:77:68:2b:0e:78:00:54:4a:9b:72:c0:
4e:08:23:2b:7e:73:26:cc:f7:f2:5e:36:9b:b4:3a:81:7b:4a:
48:42:5d:42:57:be:eb:1b:6b:0c:10:eb:93:e4:c2:59:bc:e1:
a8:a0:24:70:35:01:d1:fe:47:cc:23:3c:85:b0:c1:71:0c:6d:
e6:db:2a:ad:bb:61:6e:ed:27:83:68:81:19:a2:ad:1b:27:5f:
ad:42:a1:20:e9:42:e9:71:cc:a8:3e:73:7b:82:71:dc:91:20:
b7:b7:97:be:42:1e:56:a8:19:ba:a4:6e:db:5c:24:b5:3b:4c:
d1:80:87:da:8e:81:a7:f8:5e:fb:e4:2e:3d:85:b7:f3:87:cb:
9f:e5:29:8b:9b:1c:58:92:44:eb:bf:45:7b:21:7e:a1:cd:f8:
54:e6:3c:5a:f7:45:c2:de:69:4c:0d:10:87:8e:84:69:54:8e:
73:65:fa:76:1b:52:27:87:b4:a9:09:84:7e:6d:53:c5:f4:a8:
98:b5:c6:26:92:90:2d:71:78:bf:88:41:f1:74:98:31:3b:ac:
39:c4:4c:96:f6:dc:8a:16:38:00:2d:98:65:69:e6:c1:13:79:
a8:b4:91:16:a3:05:7f:40:f2:0b:e4:0c:6c:d0:05:b8:95:8b:
28:c2:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:50 2026 by rpki-client