Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: moIGF6WvkAaGEE+irdpxcSghoRUf7o+3W7Yhd9ufvHA=
Subject key identifier: 94:F5:9E:FE:67:A1:37:00:E1:30:C0:BD:3A:C2:7A:0F:0C:28:1A:95
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019E664E15A814FBDBA5B8F246471717BEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 0386
Signing time: Tue 26 May 2026 22:00:53 +0000
Manifest this update: Tue 26 May 2026 22:00:53 +0000
Manifest next update: Wed 27 May 2026 22:00:53 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: fhpNsJ8MRcMazBRNcHasxHcg18yYrE9wmI0kmbXZAro=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:66:4e:15:a8:14:fb:db:a5:b8:f2:46:47:17:17:be:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: May 26 22:00:53 2026 GMT
Not After : May 27 22:00:53 2026 GMT
Subject: CN=94f59efe67a13700e130c0bd3ac27a0f0c281a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:22:cc:cd:4c:29:40:ac:ed:63:9f:fe:6d:
7b:37:8e:3c:d9:4a:82:c9:7e:de:aa:2f:29:0e:3f:
61:9a:a6:5b:49:77:6d:0a:ab:19:16:a7:7e:d9:32:
77:44:4a:31:02:6c:dd:66:8a:b8:25:38:2f:1e:16:
45:44:c2:37:52:c4:a2:c8:bb:58:1e:32:a0:6a:b6:
88:56:22:34:de:49:2f:ad:14:f4:2e:05:64:6a:53:
25:0e:ff:62:a1:40:ea:3a:4f:e8:5b:6e:cf:2a:b1:
85:d6:41:ff:15:8a:a2:b2:eb:60:fd:3b:e3:f2:a5:
59:54:03:b9:7f:42:8e:80:e7:62:f4:ef:b4:77:59:
05:13:a3:33:1f:cd:16:f7:8a:53:27:0b:53:5b:9e:
d4:87:17:d8:5b:b3:c3:80:20:17:b9:66:c8:87:8a:
11:ce:eb:28:e2:a6:60:89:be:87:f3:07:55:41:15:
ce:29:a6:77:ed:4f:87:16:c1:81:df:e8:3e:c8:f9:
ce:69:c2:e5:d9:79:a9:06:9a:08:5e:f5:33:72:43:
33:94:82:1f:72:c2:75:7b:a5:86:ce:91:10:18:45:
af:30:46:12:e4:3a:a0:66:8b:41:77:f1:88:be:d7:
ab:79:c7:62:c8:00:b0:bf:04:14:03:2b:5d:ac:8f:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F5:9E:FE:67:A1:37:00:E1:30:C0:BD:3A:C2:7A:0F:0C:28:1A:95
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fa:6b:b0:20:f1:da:29:fe:ca:b5:0c:ac:c6:69:7e:56:cd:
47:6c:2c:ec:ea:e0:73:b9:5d:b3:6a:57:32:bf:84:ea:ee:29:
5f:62:5b:1a:d1:ba:14:bb:1c:04:de:8e:35:44:c3:e1:d2:64:
ab:9c:19:3c:28:0c:d2:ff:3d:86:09:f0:d0:87:0d:d7:1a:27:
02:39:64:1c:3e:2d:39:4b:31:2d:db:88:d5:39:a5:bf:39:3c:
5c:b1:3b:b8:3a:6d:29:0c:9b:86:0e:82:9b:a3:c9:52:b9:4d:
a5:0e:e0:85:7d:ce:6e:bc:34:c6:1d:1f:82:9c:cd:53:16:72:
0b:15:98:bf:d9:9c:32:ee:ec:ad:f0:dd:34:3f:4d:d2:48:a6:
85:2f:b9:58:8c:5d:88:38:21:34:22:5e:4a:49:d4:24:c8:da:
86:a2:8b:b6:66:75:89:25:97:15:90:83:0e:eb:9b:24:89:96:
29:6e:95:e8:ca:4d:a9:e4:7d:f5:d4:75:fc:f0:e0:dd:e5:f1:
ce:a5:fe:9c:15:03:18:4a:8c:33:c2:16:e5:e8:a4:6a:65:a8:
4c:17:e5:57:d8:93:22:b5:7a:3e:b7:c7:7e:7b:e3:78:bd:f9:
49:19:e7:e0:dc:f0:94:5a:86:d4:21:25:d0:cc:18:9c:1f:76:
8a:fa:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 07:10:07 2026 by rpki-client