Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: tGiRmMP3AHukuJGHU1KxkReNtAWWeGuC6wh9UDmkm5E=
Subject key identifier: 9B:64:48:6F:92:2C:77:34:88:3F:7C:BE:41:4A:79:36:1D:43:CB:8A
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019E2ADDF12FDF9419BB0476FA111D87E40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0CF0
Signing time: Fri 15 May 2026 09:00:48 +0000
Manifest this update: Fri 15 May 2026 09:00:48 +0000
Manifest next update: Sat 16 May 2026 09:00:48 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: r1uBctJAOkvWBxKkOG3lM7eER5QHMVSptvmXQsYNXVU=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
4: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
5: tg0TgMF_mOcJrDdgBYL-290G2-M.roa (hash: UjyXgWR1IlQdcA1RR5ThsgsI4c2xfE45PbnBDC6Sn6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:dd:f1:2f:df:94:19:bb:04:76:fa:11:1d:87:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: May 15 09:00:48 2026 GMT
Not After : May 16 09:00:48 2026 GMT
Subject: CN=9b64486f922c7734883f7cbe414a79361d43cb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:26:19:1a:96:22:b1:09:35:0c:9f:45:a3:6b:
ac:e1:2e:1d:50:3b:73:be:9f:76:ca:73:e4:46:1c:
ad:9e:60:3a:f3:bb:5d:57:62:3f:d3:a6:a0:fd:8c:
be:b7:6c:55:3f:90:6a:9e:6b:7c:4c:2d:fd:f9:24:
4c:d0:b8:f1:b7:03:ae:cb:76:af:02:1d:76:86:81:
0a:e2:1d:f7:a3:99:61:d5:57:20:82:a8:b2:24:74:
d1:0a:68:79:e3:8f:62:16:e6:c6:55:13:a0:4d:b8:
25:e3:46:e2:f0:3b:96:1a:13:e2:4c:d4:84:53:93:
d8:55:93:ae:0b:43:c0:34:79:a3:38:02:22:22:5d:
3f:33:99:73:a7:c6:c1:24:cf:2d:6b:1f:21:7b:ea:
65:8e:99:06:3b:3d:cc:e0:6d:d2:40:6f:e8:81:ca:
59:6d:9b:fb:46:b3:00:9c:b0:15:5a:19:a7:8e:ec:
6b:cd:d0:07:7b:3a:d9:c2:0a:dc:9c:c4:04:0c:53:
a3:0e:09:f1:b3:e3:a5:be:2f:6b:d3:e6:42:d3:c4:
0d:46:56:db:30:e7:5e:bd:ca:76:c2:c4:4b:53:e2:
c3:f0:22:1d:88:ce:85:ea:b3:69:7b:3b:ab:e7:9e:
b1:3d:01:48:bb:e3:7c:8c:96:e7:b1:7a:1a:7e:e8:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:48:6F:92:2C:77:34:88:3F:7C:BE:41:4A:79:36:1D:43:CB:8A
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c6:4e:96:5e:5d:17:6d:49:6f:ab:27:e9:b6:91:4c:a3:08:
93:5b:48:77:e6:57:9d:5b:00:91:83:78:b9:05:df:6a:12:05:
f6:37:ca:79:33:8d:14:a9:92:fe:79:2f:05:91:31:45:3d:7f:
54:1c:e1:d5:83:16:14:72:f7:bc:be:64:69:2e:c2:d8:b8:5d:
71:79:bb:27:6a:89:dd:9e:b2:58:3b:30:b9:a7:f0:0a:de:ac:
d9:bc:51:04:49:2f:b2:d5:0c:e5:d9:bd:cf:8c:2d:7c:79:1d:
a5:02:d6:a6:8f:71:57:bb:eb:1e:ff:cc:74:eb:99:31:08:c6:
5f:5b:5d:7a:68:89:ae:f8:84:b6:d5:21:44:16:7a:80:23:27:
7e:9c:15:b6:8d:cf:3c:60:e8:88:46:c5:bb:61:25:ff:a9:b0:
b5:36:a7:d3:f9:b1:23:34:4c:7a:59:3c:f6:3a:20:7c:18:4a:
bd:c6:fe:db:f4:93:8b:09:3e:0f:ab:68:8c:0b:8a:0d:fb:b2:
d4:7d:e7:9e:b4:f6:b6:d6:68:9f:45:7a:73:8c:76:05:b5:bd:
28:e2:fc:b3:61:e0:44:1e:8c:3a:dc:77:65:14:75:2d:26:79:
07:29:f4:07:66:27:89:43:22:b8:1b:db:cb:79:17:13:e1:84:
61:4e:9b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4q3fEv35QZuwR2+hEdh+QPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi
N2QxMjMwHhcNMjYwNTE1MDkwMDQ4WhcNMjYwNTE2MDkwMDQ4WjAzMTEwLwYDVQQD
Eyg5YjY0NDg2ZjkyMmM3NzM0ODgzZjdjYmU0MTRhNzkzNjFkNDNjYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yYZGpYisQk1DJ9Fo2us4S4dUDtz
vp92ynPkRhytnmA687tdV2I/06ag/Yy+t2xVP5Bqnmt8TC39+SRM0LjxtwOuy3av
Ah12hoEK4h33o5lh1VcggqiyJHTRCmh5449iFubGVROgTbgl40bi8DuWGhPiTNSE
U5PYVZOuC0PANHmjOAIiIl0/M5lzp8bBJM8tax8he+pljpkGOz3M4G3SQG/ogcpZ
bZv7RrMAnLAVWhmnjuxrzdAHezrZwgrcnMQEDFOjDgnxs+Olvi9r0+ZC08QNRlbb
MOdevcp2wsRLU+LD8CIdiM6F6rNpezur556xPQFIu+N8jJbnsXoafujaSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtkSG+SLHc0iD98vkFKeTYdQ8uKMB8GA1UdIwQY
MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct
Yjg0YzQxM2RmYWE0LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0
LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMZOll5d
F21Jb6sn6baRTKMIk1tId+ZXnVsAkYN4uQXfahIF9jfKeTONFKmS/nkvBZExRT1/
VBzh1YMWFHL3vL5kaS7C2LhdcXm7J2qJ3Z6yWDswuafwCt6s2bxRBEkvstUM5dm9
z4wtfHkdpQLWpo9xV7vrHv/MdOuZMQjGX1tdemiJrviEttUhRBZ6gCMnfpwVto3P
PGDoiEbFu2El/6mwtTan0/mxIzRMelk89jogfBhKvcb+2/STiwk+D6tojAuKDfuy
1H3nnrT2ttZon0V6c4x2BbW9KOL8s2HgRB6MOtx3ZRR1LSZ5Byn0B2YniUMiuBvb
y3kXE+GEYU6bsQ==
-----END CERTIFICATE-----
Generated at Fri May 15 14:48:32 2026 by rpki-client