Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: MTJ/7T22hHL8FmTWiwGIYruGzCcQ7BbZeGS1hnsmoiQ=
Subject key identifier: 96:3A:C8:A0:FA:61:D4:68:68:72:D6:75:78:05:3A:AD:8E:1C:BD:81
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 01A004391F03A59255784571928967BE5883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 1994
Signing time: Sat 15 Aug 2026 07:00:47 +0000
Manifest this update: Sat 15 Aug 2026 07:00:47 +0000
Manifest next update: Sun 16 Aug 2026 07:00:47 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: 0CFRywJSTleKEAt/MUTx4lXz5O16H5N5S+N+ug8J2I0=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:1f:03:a5:92:55:78:45:71:92:89:67:be:58:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Aug 15 07:00:47 2026 GMT
Not After : Aug 16 07:00:47 2026 GMT
Subject: CN=963ac8a0fa61d4686872d67578053aad8e1cbd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:1a:03:04:4c:3b:f2:b1:91:7c:e6:12:7c:
39:b1:d4:72:09:72:7f:be:fe:be:05:e1:1f:d6:0f:
67:38:54:a5:51:a6:c5:6c:63:b4:c2:41:64:88:39:
9f:36:51:ba:e7:82:48:96:4c:df:22:b6:6c:8b:e3:
25:30:71:93:ba:10:1c:16:1c:c4:78:09:b6:f2:84:
c0:4f:6e:c8:61:6a:a5:bb:98:0c:d8:3e:4a:4a:97:
6e:27:c2:43:fb:81:fb:83:49:b7:54:d5:7d:7a:35:
9d:45:32:52:31:86:72:6f:22:a3:d6:29:27:93:10:
4c:64:c5:36:3d:fb:53:a0:e4:86:8d:e7:e4:f7:3c:
2c:24:86:97:37:c5:e9:3a:9a:47:76:10:d3:a1:36:
df:74:70:9c:17:71:01:10:9d:bc:70:cf:fa:55:68:
63:d8:9c:e9:a5:51:ba:1f:60:ef:ed:85:14:ec:40:
43:ff:44:1c:e1:a8:4d:10:90:c9:1c:5a:29:69:35:
2a:1b:f4:55:81:ca:d8:65:2d:18:f2:4f:81:7c:00:
6a:92:3c:fe:7f:ae:13:85:59:2d:75:d2:2f:17:81:
cd:28:a5:e7:38:ff:0d:f9:bd:83:55:f2:6f:58:be:
e0:fc:b6:80:81:05:34:fc:02:fa:f9:17:bd:16:c1:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3A:C8:A0:FA:61:D4:68:68:72:D6:75:78:05:3A:AD:8E:1C:BD:81
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fb:3a:9c:51:0d:44:5e:a3:12:a4:d2:08:e2:44:b3:53:86:
22:01:a6:7b:b1:6e:3b:33:a6:a8:e3:b1:69:4c:23:e2:27:c7:
47:17:9f:67:d8:00:c1:e4:79:97:23:ea:70:43:ad:66:0f:7a:
0a:4d:6d:06:0b:eb:e3:16:ff:4b:f4:43:d4:bf:1c:5d:0f:f4:
cb:ca:56:7a:2f:17:1b:ca:ca:f8:53:2a:50:35:43:05:26:7b:
3f:ab:25:f0:3a:fd:f1:e7:ce:52:42:7b:ac:f4:78:13:c9:20:
37:cc:43:67:87:92:63:d5:a6:fd:1f:ec:33:4f:6f:c5:45:d9:
c6:b5:c9:d1:81:5d:bf:8e:7a:14:fb:fd:23:4f:bb:9a:f0:04:
fa:66:66:fc:5c:05:48:76:04:72:bf:86:b0:f7:05:07:c5:0f:
43:d3:c6:d8:73:87:b1:8e:c6:5a:92:12:ff:e4:18:3e:32:cf:
d8:95:14:67:ad:df:86:9f:b2:1d:5e:24:1a:2c:be:7d:cf:b0:
d3:10:c4:f9:6f:aa:8a:54:34:cb:7c:6e:b2:10:7d:5b:1d:94:
22:68:58:d5:8d:61:52:02:94:36:1a:65:bd:a3:6c:40:8b:b0:
2f:19:f6:01:53:1d:07:d1:c9:9a:29:7f:17:97:d1:9e:2e:e9:
84:fa:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:35:57 2026 by rpki-client