Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: IFJcxTyAzQD1VubnyZXvrEH4yq0qifq5W7/yEOp4BCY=
Subject key identifier: AF:48:E3:2E:3B:96:A5:56:3A:96:ED:46:D9:29:2E:3B:4D:06:14:DF
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019D371B28FB6872A9F162E22C6D10D91E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 02E9
Signing time: Sun 29 Mar 2026 01:00:20 +0000
Manifest this update: Sun 29 Mar 2026 01:00:20 +0000
Manifest next update: Mon 30 Mar 2026 01:00:20 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: /3TK/YDahAm1tK1tzwF3Tro3COhxfHMx9nvOIHXVUfQ=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:28:fb:68:72:a9:f1:62:e2:2c:6d:10:d9:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Mar 29 01:00:20 2026 GMT
Not After : Mar 30 01:00:20 2026 GMT
Subject: CN=af48e32e3b96a5563a96ed46d9292e3b4d0614df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:43:ac:c5:9c:39:70:e2:a8:ae:1a:d8:ba:
e3:47:e5:9d:ef:6e:d6:f7:38:46:c5:25:a3:43:04:
aa:64:49:20:a3:90:cd:58:bb:f1:91:56:bb:bc:ac:
de:8c:36:93:f2:4a:ec:55:c6:58:ca:ac:68:24:fb:
d4:89:cf:8d:89:4b:8b:50:bd:51:57:07:53:56:f8:
a0:8b:0c:c4:df:4a:9e:cc:01:5b:58:3a:a7:84:d5:
9d:d1:ce:d1:92:27:16:82:45:ef:0c:6a:6b:43:e7:
76:15:4c:66:5d:6f:47:b8:8c:57:33:8b:13:56:17:
7f:2e:e5:ff:49:6b:62:8c:d7:f6:d3:78:26:cc:cb:
89:a2:6c:c0:02:d9:72:41:c5:58:4c:f3:fb:00:8f:
a8:7c:22:3c:67:2e:a1:72:37:b5:91:5e:0f:bb:02:
f9:88:be:ab:00:db:27:59:06:01:3a:c5:2f:d2:ab:
43:0c:f3:c1:97:11:ce:3d:f0:d7:a6:7c:ed:98:cc:
f6:62:a7:62:34:c3:8e:2a:e5:d8:ae:ed:84:65:8c:
93:55:32:e1:34:5a:6d:6b:70:2c:c6:3c:a6:c5:3a:
ee:1c:c3:27:fa:04:45:8e:c1:69:b8:b5:b2:20:5e:
ed:9d:1a:46:d2:3f:cf:19:0f:b2:4e:5a:7c:e8:1e:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:E3:2E:3B:96:A5:56:3A:96:ED:46:D9:29:2E:3B:4D:06:14:DF
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3b:49:0b:4a:60:e1:cf:b1:76:6c:25:38:f1:45:ee:bd:43:
e5:15:4d:0f:d6:5e:31:dd:f7:27:9b:c9:73:60:4c:22:dc:a8:
20:2f:17:e8:1c:8f:0d:20:dd:99:00:19:ad:ae:1e:24:12:04:
67:43:85:21:f2:f8:09:6a:a3:d7:52:58:9f:3c:d8:47:dc:d8:
69:ec:70:06:76:3f:be:83:37:86:40:e6:d2:38:58:b4:c2:1b:
fa:05:bc:dd:a6:26:1c:8c:c6:cd:93:d2:bf:b0:05:ea:42:6a:
a3:4b:f4:43:5a:87:6b:85:95:3f:c8:94:ea:89:69:c3:68:b5:
ca:a1:6d:a7:9d:fe:5b:a8:c6:77:ad:e3:12:10:94:ab:97:27:
94:ec:04:05:09:2f:76:93:c6:33:cb:e6:48:80:90:c5:9b:e3:
cc:48:cf:67:67:bf:2d:80:21:cb:58:c2:94:61:ba:1f:87:66:
10:a1:93:d4:a7:9a:1a:fe:11:13:7b:30:d0:33:d8:db:a2:1f:
47:83:64:8a:13:cb:c8:4e:0c:44:f1:10:37:6d:18:e8:d2:f4:
5d:fb:82:53:4e:fc:76:fa:c0:25:c3:db:33:6e:06:ef:d1:60:
04:91:9c:b6:6c:45:5d:5e:9f:d8:bb:06:04:5f:53:d6:70:07:
82:0e:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:23 2026 by rpki-client