Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: Xc+j1FcBvCtqCpJYTQf+ym3DnTdOgjqzT0Oksv0X8D8=
Subject key identifier: A7:15:CA:B0:B3:68:E3:DB:75:C4:02:73:8B:9B:4F:85:98:18:FC:B5
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019F57B42ABFF1CCE55A1463B9AA5526281C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 0403
Signing time: Sun 12 Jul 2026 19:00:52 +0000
Manifest this update: Sun 12 Jul 2026 19:00:52 +0000
Manifest next update: Mon 13 Jul 2026 19:00:52 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: DIrUbsrYmlqHhuMOwyK/9kyFM2SJQO2GfreSV3clT34=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:57:b4:2a:bf:f1:cc:e5:5a:14:63:b9:aa:55:26:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Jul 12 19:00:52 2026 GMT
Not After : Jul 13 19:00:52 2026 GMT
Subject: CN=a715cab0b368e3db75c402738b9b4f859818fcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:bf:89:a1:7d:19:9c:e6:13:5a:91:52:4c:
02:e0:8f:4a:12:76:33:96:6b:d2:04:81:4c:9a:1e:
fa:e6:37:3a:49:62:8c:ba:63:04:8b:93:db:31:51:
68:34:2d:19:53:4c:72:fc:01:af:25:7c:65:6f:26:
35:4f:99:34:4d:c7:03:da:7e:bf:dd:57:94:5c:f0:
40:c1:0b:7f:ca:71:b1:d3:08:53:e5:b3:ea:0d:6b:
25:c8:7b:19:67:5c:0b:da:79:d9:bb:79:9f:39:75:
75:d8:71:d3:e7:2e:b2:87:b2:52:52:41:26:64:c5:
23:0c:e6:15:49:1c:e0:7f:0d:d2:f2:6c:e7:7b:92:
33:0f:a3:b4:3c:34:7c:0e:c3:8e:0d:b1:85:e7:45:
e9:8b:50:07:e6:12:7b:a7:e6:61:63:b3:14:4b:91:
e9:e7:8b:39:f3:cc:73:d7:2f:e8:f4:36:6d:48:b1:
89:9c:1b:ad:d7:8d:a6:52:3b:e0:db:a1:b6:e6:36:
82:93:ec:e1:cd:a9:ee:20:3c:68:cd:e5:b7:cf:6c:
d8:14:2f:bd:ce:bc:fa:05:9d:47:79:30:80:fc:4a:
9e:7e:d2:5a:02:62:b6:da:84:98:00:c4:c9:c2:88:
04:87:3c:0f:7c:44:f6:e9:3c:25:ee:6b:dd:7e:b5:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:CA:B0:B3:68:E3:DB:75:C4:02:73:8B:9B:4F:85:98:18:FC:B5
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9d:bc:fa:d2:29:fc:d6:0c:3f:33:d3:bd:86:09:f4:aa:03:
6a:7b:e5:1d:d0:63:2b:95:f8:31:5a:26:7b:5f:91:b3:1e:95:
98:f9:34:8d:6a:b8:15:c6:ff:55:92:db:04:a9:c3:64:67:e1:
5f:40:95:ef:bf:e8:69:a0:2b:75:ee:fa:40:0f:f0:f2:34:55:
07:67:6a:50:9f:3e:1a:e8:37:52:80:83:92:0c:97:29:0c:71:
81:c7:8b:cd:ec:98:e9:3c:16:08:fb:3f:60:7b:63:6e:90:6e:
7e:f8:92:bc:17:a9:35:1c:c3:ef:bb:45:8a:a5:d6:0a:79:0c:
fd:55:ac:aa:1c:53:76:1b:98:e6:73:21:ae:4e:90:53:72:e7:
9e:04:c1:5d:04:a6:1e:a2:83:d8:5b:51:c9:98:04:c7:e5:32:
5a:4c:90:4c:fe:4f:98:12:e4:c6:44:aa:37:c9:58:25:63:7c:
fe:d3:a1:73:7b:2a:f0:d1:77:96:97:f3:64:73:e6:62:8c:cf:
e3:48:4f:a8:22:1f:bd:13:c1:d9:23:c7:99:c3:76:f2:6d:2c:
ed:d7:a0:f8:f0:8c:f6:bb:04:b3:49:14:9d:92:04:cc:fe:df:
8a:69:f1:7a:13:38:e4:e4:c9:f9:1a:a6:d8:ce:f6:9f:27:7e:
da:d1:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:20:04 2026 by rpki-client