Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: BjiaAroUu2YI5bly+2rG+OgwDCP6TebZAnlBHNS4olE=
Subject key identifier: 3E:FE:E1:2C:1B:AC:E8:DB:6A:24:80:CE:CD:3F:3D:70:37:FA:D3:3F
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 01A173949627B993E758F6A35E07AAE398ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0EA5
Signing time: Sun 25 Oct 2026 15:01:19 +0000
Manifest this update: Sun 25 Oct 2026 15:01:19 +0000
Manifest next update: Mon 26 Oct 2026 15:01:19 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: 3eJ355rx9fr+FhuQBOfldNc2HhUwnKb5nPRhHBuDJUo=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa (hash: aiGpWQ3cJ5Y8dalcsV9/+PGb+c10COEmzHR9vf++QS8=)
4: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
5: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
6: gt6O10M70oZpClO9a6i6El8hrUo.roa (hash: eGC6/RzGV3nXmQHjfKro3h+k1W53IQpH+vbs4ORuu8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:96:27:b9:93:e7:58:f6:a3:5e:07:aa:e3:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Oct 25 15:01:19 2026 GMT
Not After : Oct 26 15:01:19 2026 GMT
Subject: CN=3efee12c1bace8db6a2480cecd3f3d7037fad33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:c1:bc:1b:b4:cd:47:43:74:f1:00:2c:5e:
aa:d9:37:4d:0a:82:64:10:0f:db:91:d9:ef:47:8f:
55:c7:3a:c0:45:27:1b:52:fc:e8:56:1b:dc:67:74:
c8:b4:8f:31:14:e5:59:2d:4c:7f:b9:60:36:83:49:
69:6d:c2:69:c2:4f:de:2c:e4:c4:c1:b8:09:bd:19:
91:db:e4:fd:33:12:b0:61:c6:b2:95:fe:1b:85:90:
30:80:a7:62:64:3b:3b:18:d8:bf:54:ec:f1:55:92:
e3:a5:d3:4f:66:82:68:a3:7a:38:b5:cc:a9:6d:d4:
3f:75:89:1a:20:92:82:a9:62:fd:38:01:27:44:08:
3d:62:82:b1:17:cc:ee:60:a4:48:87:be:c8:a8:1e:
04:a4:9b:cc:b7:c9:6f:94:fc:80:e6:f3:bd:31:af:
ba:93:dc:25:8d:74:20:3d:cd:26:0a:4e:f2:80:87:
42:fa:a8:fd:98:52:6f:45:66:41:c0:d0:50:1b:66:
00:73:6a:53:99:8d:43:d0:21:c8:e0:96:10:9a:7f:
90:f9:9f:da:df:c6:b6:9e:e5:53:a7:6c:7e:4c:9f:
a8:f4:06:74:0f:f7:0d:0c:4b:a3:a2:47:ba:fe:eb:
2d:ce:03:c7:01:7d:6b:31:8f:46:96:0a:ce:50:b7:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:E1:2C:1B:AC:E8:DB:6A:24:80:CE:CD:3F:3D:70:37:FA:D3:3F
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:20:3c:26:b8:a6:89:e1:00:c6:be:4d:df:c8:f5:9c:0c:b1:
25:78:25:c3:e5:4b:12:fe:ac:b7:b6:02:2c:a5:21:02:7a:7c:
e1:ab:14:64:87:12:eb:30:d6:f6:f1:3f:5d:8f:9d:53:c2:19:
09:bb:46:91:cd:e2:97:86:11:19:15:0f:ba:7e:34:60:91:e2:
41:cc:64:19:7d:34:a5:b1:37:1e:0f:c1:95:ff:e5:a1:42:17:
91:30:b7:77:9c:21:bf:fb:08:ac:bc:2d:57:07:d7:20:d9:99:
a7:c6:91:1b:42:c6:70:e3:8c:6b:24:8f:4f:db:c0:46:40:4a:
fa:73:e8:6c:af:6d:5c:ed:5a:c5:53:d3:75:33:f9:62:f1:db:
cb:9a:e7:65:1d:59:76:6f:8f:21:a0:a7:c1:ff:df:21:27:8b:
80:c1:02:b5:00:4e:e1:f9:37:0d:f2:4f:d2:05:34:89:3b:c9:
ac:23:ed:27:51:c2:86:c0:db:85:7b:34:dc:33:0c:ec:5e:a7:
b5:50:fa:83:d6:3f:ef:b2:c4:c1:37:d8:c8:6e:dd:ef:45:ea:
9f:45:c9:5e:d7:fa:e1:9b:29:4c:03:c9:64:5d:69:19:f9:36:
b6:a6:dc:ba:b4:5e:6d:a7:c4:6c:11:2c:a9:b1:e5:53:e9:e8:
89:ba:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:04:20 2026 by rpki-client