Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: flMtu8L0WXZIpWL+QltgJrRMnqmDP3tSQsnLld/oC+k=
Subject key identifier: D8:F8:40:B1:C7:53:03:90:66:B3:8E:10:7F:07:B0:0C:1D:17:A0:B9
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 01A04160D4D860E38D03C7B9CAE8378D0E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 047C
Signing time: Thu 27 Aug 2026 04:00:59 +0000
Manifest this update: Thu 27 Aug 2026 04:00:59 +0000
Manifest next update: Fri 28 Aug 2026 04:00:59 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: QZRWrqUDTVBAE5PoflALplBtVBIrysMgNR+4MtY5V4A=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:d4:d8:60:e3:8d:03:c7:b9:ca:e8:37:8d:0e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Aug 27 04:00:59 2026 GMT
Not After : Aug 28 04:00:59 2026 GMT
Subject: CN=d8f840b1c753039066b38e107f07b00c1d17a0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:dc:09:92:c4:bb:89:16:7b:48:9f:03:7a:
e9:5f:c6:f6:21:f1:dd:be:bf:4e:f1:2b:10:a3:d6:
14:b5:8e:bd:18:bf:d3:b3:82:33:5f:f2:e9:ba:14:
02:a8:fd:57:b4:b3:56:2c:03:93:d7:81:0a:ea:31:
c7:9a:f4:1e:60:ab:13:32:65:ae:bd:96:23:5f:34:
42:c1:26:7d:ef:b1:e0:fc:96:38:01:cf:28:27:c7:
92:98:6a:6c:d7:92:f6:df:8b:29:94:1c:14:b5:c7:
c4:2e:e5:cd:47:60:d4:61:b0:86:ba:75:83:89:04:
8b:57:65:64:9d:6f:b1:76:d9:28:10:f6:11:4f:56:
2a:09:c8:bb:02:8c:9c:82:54:ed:97:68:cf:aa:82:
16:9a:b3:6e:a1:86:55:58:43:e7:04:96:d1:33:81:
15:78:33:95:91:16:33:10:0b:53:38:be:1c:11:56:
18:af:13:26:6d:6c:29:24:90:96:9a:b9:e9:e6:34:
46:95:46:95:d2:c4:56:e7:f2:18:a6:52:8e:0d:21:
7f:34:31:10:2e:65:5a:a3:75:f3:3d:2b:86:63:b3:
a3:5f:4b:8b:43:e3:b7:6b:29:0f:b0:fa:0b:67:ee:
d5:53:91:98:8c:47:10:97:13:5e:9b:e7:77:d3:e7:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:40:B1:C7:53:03:90:66:B3:8E:10:7F:07:B0:0C:1D:17:A0:B9
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d6:f1:b8:75:d5:fa:4f:f9:17:12:64:61:dd:81:22:14:df:
00:48:7e:bb:e1:8f:9f:80:34:98:c4:d6:49:55:1f:be:79:8e:
d8:ca:29:4c:b3:e8:92:92:ae:3f:ca:50:41:dd:8c:29:35:20:
f2:8d:31:27:4f:d2:cc:29:b7:46:66:3b:ff:21:20:1a:3d:e2:
0f:8e:33:4f:64:9d:16:ea:76:5a:01:93:35:c2:74:1a:a9:dd:
38:9c:aa:ad:76:49:96:db:3e:e5:29:2f:21:1c:ae:e1:41:f3:
98:63:75:48:0b:10:e7:21:d1:19:08:00:04:60:13:0f:b7:e4:
36:24:bf:79:63:0b:df:81:96:fe:f8:17:ba:7c:04:18:30:7c:
a1:3a:2c:0d:84:54:3f:ab:11:90:66:a3:9f:87:01:14:bc:74:
a1:12:26:1f:00:6d:22:9c:6d:58:b3:6c:2d:d9:4a:40:fd:63:
b1:d5:fe:04:de:cd:77:06:ed:3e:e0:b5:32:e4:a9:d0:a5:db:
79:5f:3a:eb:1d:84:e1:94:10:a3:a9:b1:98:f9:98:c7:90:0a:
5f:b1:85:9f:e7:a7:d5:97:73:31:0c:d7:90:f9:fb:2b:9e:c3:
a9:a3:68:0f:cc:65:5e:2e:f5:8e:d1:8d:9c:8e:54:26:40:40:
b0:c4:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:44:33 2026 by rpki-client