Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: RPAUvszST3twFrvHNGthpnRrmY/EBZ2NPVeerHYAClM=
Subject key identifier: AF:41:05:E2:87:79:5D:04:C4:25:54:E4:9B:18:F9:AB:93:02:40:7F
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 01A15589EADA38563B5D030AF819B53C7C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 050B
Signing time: Mon 19 Oct 2026 19:01:04 +0000
Manifest this update: Mon 19 Oct 2026 19:01:04 +0000
Manifest next update: Tue 20 Oct 2026 19:01:04 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: yyNfTZRN3EH407/UDjnpYJpl0GXu6iH11Gpg2J+iYJY=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:89:ea:da:38:56:3b:5d:03:0a:f8:19:b5:3c:7c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Oct 19 19:01:04 2026 GMT
Not After : Oct 20 19:01:04 2026 GMT
Subject: CN=af4105e287795d04c42554e49b18f9ab9302407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:69:5a:dd:ba:16:c3:71:0a:33:dc:1d:e0:
1e:ba:b5:8d:fc:23:5d:13:87:d5:ab:0b:4f:a0:61:
ea:c3:59:94:e5:12:c7:71:de:5a:80:24:86:05:1f:
9b:61:f9:60:72:7a:b9:f4:95:33:13:36:6b:95:db:
eb:9f:b7:29:a0:21:15:07:87:c7:3e:04:9c:bb:b8:
08:3a:20:f7:06:ec:6e:7b:73:08:15:9f:3e:65:66:
f9:96:50:a4:4a:6c:f3:b1:45:30:37:00:e3:75:ef:
cb:9a:8c:30:0f:e7:10:9d:36:3e:dc:88:db:a6:b8:
14:38:28:9c:80:12:5e:0e:8e:24:d5:d2:a7:83:61:
63:da:a5:5f:cc:ea:6a:b0:a7:a2:95:1c:89:ba:4a:
33:ce:9f:df:36:1b:e1:03:94:0b:6e:7a:f7:34:55:
d6:3c:1e:b0:36:b1:47:8c:1c:e0:0f:e1:2e:93:76:
13:7d:42:95:f6:3e:09:9b:7d:96:10:7a:f2:9a:ca:
ac:b7:4f:b7:39:eb:a7:d0:17:57:4a:9b:b6:bc:23:
ec:f2:ef:45:b7:5c:04:cb:c1:63:52:5e:2b:93:1a:
51:81:ca:03:5b:af:3e:1f:73:d7:74:20:5c:f7:cd:
b2:1b:c8:fe:86:7f:34:88:40:ec:04:7f:93:6b:bd:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:05:E2:87:79:5D:04:C4:25:54:E4:9B:18:F9:AB:93:02:40:7F
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:6a:89:72:e7:ca:a2:e4:94:70:ab:b2:cf:93:bd:fd:fd:09:
04:c5:62:22:cb:4b:6c:f1:18:03:ba:d7:a2:1b:1e:79:44:fc:
cf:36:51:dc:8a:08:19:a5:fb:56:b3:7f:5b:2c:03:75:43:7b:
47:6a:f6:a6:8d:a6:cb:cb:db:98:81:48:4a:0e:42:16:ed:a8:
22:a5:1f:a8:4f:70:5d:16:02:2b:d1:d3:2b:5c:98:40:12:b1:
a0:21:40:3c:fb:b5:4c:c6:a8:ec:94:80:9c:46:a3:f6:b0:f7:
33:e5:4b:05:f2:86:4e:04:86:27:a2:d6:a2:de:ec:be:5d:73:
aa:c1:ae:16:ec:df:a9:37:30:fa:a2:bb:1d:51:67:aa:34:64:
3b:ef:03:86:92:98:ad:73:f0:af:73:61:19:ff:89:04:82:73:
15:fb:55:d6:5c:32:99:09:3d:22:3a:a9:fb:74:eb:b7:53:80:
ec:de:00:9c:27:06:49:60:c2:26:83:36:a6:f9:4e:d7:e2:cd:
9c:45:69:e0:1a:70:5b:b9:ab:54:81:ca:87:c1:4f:98:39:46:
52:d3:53:29:a5:54:ac:7f:aa:18:be:94:b2:e2:1b:7b:37:c6:
54:6e:70:6b:6a:4d:b6:2b:a7:55:b2:02:98:5e:a6:b7:44:7e:
dc:c9:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:53:50 2026 by rpki-client