Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: mlTFxKKeRk8haOIvXs1Ji4Fh6IRZ7fjhyjLUzJywKX8=
Subject key identifier: 28:EF:BB:A5:B3:4F:44:96:31:93:67:9A:B0:C2:EC:57:68:B4:B4:39
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019D3AC146371974BF1CF5E53782F88BCE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 156E
Signing time: Sun 29 Mar 2026 18:00:37 +0000
Manifest this update: Sun 29 Mar 2026 18:00:37 +0000
Manifest next update: Mon 30 Mar 2026 18:00:37 +0000
Files and hashes: 1: E8wnMkiSbVSzBboh28_7QoxLc2I.roa (hash: zCR5rbo9HIv2yKajw50w0oXIYg6lZF+5ym6K0CZI1dU=)
2: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: 0I8QZeRj8PFReUZmeYtbajf05ZQ8Y2+2dDlcicrfxVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:46:37:19:74:bf:1c:f5:e5:37:82:f8:8b:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Mar 29 18:00:37 2026 GMT
Not After : Mar 30 18:00:37 2026 GMT
Subject: CN=28efbba5b34f44963193679ab0c2ec5768b4b439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:1e:63:43:00:bf:56:98:38:c2:93:9b:d3:
9b:14:c2:02:ab:21:6f:55:01:28:94:63:0d:9c:17:
d9:7e:cf:0c:48:1d:bf:64:4a:0d:b3:39:fb:5d:53:
e5:54:be:ce:e9:29:f4:7c:29:63:dd:e9:82:16:45:
e1:5d:32:17:e0:fe:c3:24:c1:1e:73:f2:8a:86:f0:
19:ce:22:f3:e2:43:5f:24:76:f1:8b:22:9e:08:b0:
3c:4f:5e:63:4b:fe:93:0e:71:da:dd:50:8b:2d:27:
a7:24:cd:cd:a5:0b:1e:a1:35:71:01:2c:4e:27:8d:
b3:7f:1f:2d:35:fe:45:e8:0b:e2:46:b5:21:35:f9:
fe:77:7d:da:78:2b:43:fb:9e:ae:45:2c:60:14:72:
a9:c0:d2:46:62:a3:74:78:48:50:71:1c:1f:96:6f:
3d:51:ae:01:e6:fd:5a:0f:91:27:89:9d:d1:29:9b:
f3:0d:6a:40:f0:b5:ed:76:bc:84:6f:ad:cd:47:46:
2a:9b:48:8e:1c:e1:97:4d:4f:a8:2a:51:52:65:53:
33:b8:51:bc:69:bc:19:20:e8:52:18:78:bd:56:cb:
04:62:ab:4e:18:8f:6b:a5:59:29:90:63:23:de:2e:
a9:74:5d:0d:93:2e:05:4b:c6:cc:df:a6:4e:de:47:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EF:BB:A5:B3:4F:44:96:31:93:67:9A:B0:C2:EC:57:68:B4:B4:39
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:11:9d:07:02:c8:11:99:bc:66:c8:ce:97:54:81:e3:75:70:
a2:ca:35:c5:cb:a7:f3:87:0c:63:60:93:9f:eb:f1:23:41:ad:
b4:6f:33:5d:e5:54:c9:cf:8e:98:54:31:d5:99:d4:72:1c:0f:
77:bc:b1:38:03:61:6a:be:c6:75:af:9b:13:32:76:d0:90:7c:
d5:f2:8d:73:41:e2:ac:c1:3f:cf:14:b3:6d:67:fd:c7:18:3f:
12:26:fe:a8:9b:0a:cf:e6:73:a0:85:69:d4:2d:69:88:44:d3:
8f:09:84:3c:b9:69:77:ca:8c:a7:72:aa:c9:e8:9e:2e:0b:7f:
49:39:11:aa:c2:c6:e8:6a:ce:fc:84:b2:6a:0d:44:6e:a2:8e:
8b:30:4b:c0:5c:ce:f5:89:8b:96:f0:94:57:ca:6d:a0:1a:00:
03:fa:bf:ec:e2:96:6c:58:14:9f:bb:89:a7:8b:fe:99:c4:20:
46:98:12:3c:34:e4:a6:d8:27:c3:cb:1f:69:42:a3:95:e4:73:
f4:6e:56:a6:b5:2c:58:67:c7:ca:e2:41:40:4b:16:e6:81:e0:
0d:c8:fe:80:ce:8e:cf:c4:99:b6:2e:26:34:07:f8:6d:20:2c:
2c:14:37:29:8f:0b:8e:1f:5e:ce:bf:95:28:16:ff:74:78:b7:
56:b1:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:51 2026 by rpki-client