Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: kUMVp8zVctB/udLJQWESi/JwXOWEkyfeJ/FNUAR4dPg=
Subject key identifier: 02:97:F0:93:82:4F:09:30:A4:56:8C:A0:59:48:3D:3C:02:94:D5:1C
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 019D2772CADAF8165CAACF617D6E5F88188C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0F43
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: DjXHPbot1o4RocyemSITt5wk1ErbC7B2/Q+pNROTWeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ca:da:f8:16:5c:aa:cf:61:7d:6e:5f:88:18:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=0297f093824f0930a4568ca059483d3c0294d51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:3d:8a:1b:8b:df:d4:e7:ad:90:00:b0:4a:
a1:40:84:52:13:3d:83:5f:22:e1:10:0d:5a:68:1e:
96:c2:e3:8b:7e:22:8f:f1:52:0b:db:47:03:c7:f3:
cd:3f:7c:07:9b:b0:36:5a:49:ad:fc:72:19:2a:3d:
f2:7f:61:f9:89:57:91:4b:6a:cb:f1:6c:b5:7d:f8:
c0:f1:5e:00:8e:b9:f2:2b:48:cb:97:05:1d:6b:bd:
a3:30:b4:8e:cb:b8:82:fb:df:7e:c2:e6:60:f1:28:
f2:b9:fd:72:29:50:2e:83:eb:55:ff:2c:cf:1d:40:
7a:76:00:13:60:99:c4:bc:13:7e:46:0d:4f:fa:5a:
d3:2a:c2:3b:e0:f1:99:eb:f3:b3:6d:0c:54:d7:08:
a5:9f:5c:e7:39:d8:13:eb:75:23:4f:c8:b3:98:8b:
22:24:33:f8:0a:c9:51:e1:cf:1e:b6:12:93:67:f3:
2e:2d:23:94:2c:d9:b4:e8:db:83:2c:8c:2e:1a:ad:
6b:7f:26:fa:cf:4f:1a:21:00:3b:7e:f2:a6:7a:b0:
05:ac:9d:bf:44:e2:8d:1d:b6:14:ac:d9:65:76:47:
98:40:5d:b0:3f:65:95:fa:4a:28:ae:f1:f7:a8:19:
c2:67:43:a3:af:e8:f8:62:7f:0d:c7:1b:be:52:6f:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:97:F0:93:82:4F:09:30:A4:56:8C:A0:59:48:3D:3C:02:94:D5:1C
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:18:a2:5b:52:87:9f:8f:0e:2e:cf:a7:43:6b:70:29:d1:bf:
ce:b5:85:ff:ca:6d:26:7f:f4:39:73:bc:6b:c4:b4:18:66:8e:
7b:57:24:ee:f0:ae:9a:c7:ed:94:f0:aa:f9:92:35:f4:e3:17:
be:78:fe:5c:1e:b4:ff:49:11:9e:31:ad:31:42:a5:64:5a:d9:
90:07:b6:1c:56:93:0d:bc:9d:27:88:10:9b:53:5e:87:d4:92:
4c:b2:b4:d2:55:10:5b:21:b8:f2:35:0e:8f:c7:4d:50:76:c7:
34:b6:97:b3:0b:9d:86:26:0a:bc:03:df:25:28:eb:a7:26:e2:
00:92:cb:e7:1f:dd:29:fa:03:9b:5e:55:f2:67:95:4e:69:a4:
66:0d:2a:ca:92:ec:65:50:c0:06:f5:e7:a7:0a:61:21:8f:b7:
81:8b:0c:21:bf:32:b2:8d:80:d0:4e:ea:87:a1:4b:38:07:ad:
cf:2c:a2:14:2f:85:a9:42:38:bc:ae:0b:34:22:df:24:71:10:
6c:5e:6d:89:d2:a4:09:c0:f2:a7:1d:e5:6b:cc:1c:72:47:40:
4a:70:40:a9:73:f4:1f:ac:eb:86:df:7c:7d:bf:64:c7:30:85:
85:79:bb:b6:61:75:c3:5a:5f:12:f3:2a:a0:b9:1c:a7:0c:9a:
da:d0:a2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:34 2026 by rpki-client