Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: DmEGihW7xlD+th8CjIQTwPXCaISkMd85j7wftui8Tpw=
Subject key identifier: 0B:DF:10:3F:3F:F2:AE:BD:2E:85:56:6C:8E:5B:6D:FD:0A:8B:0D:57
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019D37C01CFBDE891568E716458FE074E2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: ZycgdS354kAbDcL4IAnYxmnq1Fq9h7n1WqJoRVlruhw=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1c:fb:de:89:15:68:e7:16:45:8f:e0:74:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=0bdf103f3ff2aebd2e85566c8e5b6dfd0a8b0d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:69:20:08:1b:54:7c:82:9f:11:a7:59:39:
d5:cc:19:89:68:de:5f:08:9c:93:a0:c3:80:7b:43:
bc:c0:4b:e5:78:0e:a8:67:d9:69:db:54:a4:c2:d7:
81:4a:aa:ac:97:9b:ce:45:99:fa:ef:e4:0f:fe:67:
02:54:71:e8:62:9c:bd:05:e2:0a:1b:47:8c:b4:9a:
38:4c:6f:b3:2f:b3:3f:b8:3e:9b:31:02:4c:04:ec:
93:c0:67:bf:dd:eb:28:5a:2e:24:25:ca:eb:b9:35:
19:4b:49:98:7b:6c:79:35:cb:32:82:fe:72:1a:fb:
24:3e:e8:43:9d:e5:20:5b:5e:13:4f:67:ca:4d:e6:
13:11:74:19:53:c1:95:d6:2d:67:08:00:8b:ce:b8:
d0:af:3b:e7:fb:4f:2e:4d:b5:6e:d2:16:3a:94:ac:
fe:a3:66:d1:50:92:af:bd:e1:99:55:93:4a:35:ce:
55:78:0a:b1:7f:7e:22:54:29:97:20:7c:23:0c:7a:
f6:51:ac:58:ce:75:99:df:85:60:28:0f:43:3f:5d:
51:72:61:4a:14:6a:31:2c:88:62:2d:fc:14:05:a4:
5e:cf:7d:cf:43:89:ea:46:42:dd:58:c9:38:c9:dc:
c1:64:a0:de:b4:07:4d:e4:b6:0b:82:78:ca:63:9c:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:10:3F:3F:F2:AE:BD:2E:85:56:6C:8E:5B:6D:FD:0A:8B:0D:57
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:46:57:fe:12:e7:66:32:a5:2a:2c:57:c2:63:a7:e3:53:80:
d4:23:e5:58:03:07:52:16:84:26:75:a3:6a:83:6b:f3:72:48:
2c:76:78:13:0b:a8:a1:d3:12:c3:2a:1a:a8:e3:ba:c1:8b:ea:
a1:e7:e0:a7:59:dd:49:24:34:84:32:87:8e:5d:e5:af:42:a1:
4a:1e:56:f1:c7:b2:8c:65:3c:c3:d0:9e:ef:98:56:86:80:8c:
fb:ec:3f:42:ef:22:5c:d4:43:8f:28:d1:e0:03:f7:17:20:c6:
8d:cb:40:dd:e9:61:7b:9d:38:e5:ed:55:ef:38:9c:24:a9:d3:
a5:14:0c:d7:38:cb:54:c6:b4:93:4b:82:d4:6f:ef:66:58:75:
ac:75:d2:d1:e5:84:7d:b6:f0:f7:18:7c:ac:4e:75:2c:7b:b9:
18:15:a8:f7:68:f4:ed:4a:08:a3:be:23:f2:91:9f:9f:b1:1c:
f2:f6:a5:0c:73:d5:e3:2d:3c:b9:eb:dd:4e:48:81:b0:8b:63:
53:bd:3e:7a:4b:4a:ca:c1:61:8e:09:d9:0d:c9:e8:0f:a4:a4:
92:ee:83:12:45:30:02:aa:48:21:a2:47:a4:a6:67:a9:8b:ce:
9e:0d:11:d4:84:b2:9b:86:8b:f4:ea:0c:3e:4c:f6:1e:4f:09:
58:79:b0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:15 2026 by rpki-client