Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier: H9gw/ndxeZRZbe3c8p14rld7PIHpGQx3mPOmI8xB5Vo=
Subject key identifier: B4:A8:B0:62:ED:93:33:87:75:0E:1E:DA:A4:CC:95:45:CA:CB:8D:93
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial: 019D27723FD6D94F67651C7952D422BA4598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number: 0C42
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: KgwS3wUAnZx+7joIQKzleUquvYrZBbXwWZMcuMRROCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3f:d6:d9:4f:67:65:1c:79:52:d4:22:ba:45:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=b4a8b062ed933387750e1edaa4cc9545cacb8d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:96:d7:05:df:5b:55:42:06:89:ec:ce:b9:
6e:e9:9f:ae:07:64:bb:a3:43:27:d7:44:f4:d3:b4:
ba:db:35:da:6f:8e:0e:ca:be:ba:97:df:00:54:b8:
06:25:a0:0a:fd:c7:1c:63:aa:5e:f3:6d:68:a3:f8:
08:bd:c8:65:46:df:e7:d0:6a:fa:93:2c:26:c5:b2:
39:cf:f1:dc:49:83:ef:c8:bf:21:b9:1a:e3:92:59:
0b:eb:c9:fc:a2:42:7c:66:06:b7:21:23:a1:14:fb:
2b:2d:3b:42:56:7b:6d:08:17:1f:e4:67:a1:5f:ca:
8a:d2:36:bc:51:97:ff:8c:a7:6e:c2:d0:65:9b:e4:
23:f8:7f:86:b3:47:a9:74:26:6f:d8:a7:14:4b:ab:
94:b0:2a:2d:90:3d:3a:65:d5:c3:1c:74:10:a7:4d:
fe:9c:09:f1:33:a2:5e:66:d4:9f:8f:51:c7:54:12:
e4:77:9f:07:1e:1d:f1:0c:44:a1:8e:93:22:c3:d8:
fe:41:d9:95:b6:b6:a7:bb:98:31:c5:97:1d:dc:d5:
03:89:12:34:02:e5:b3:63:98:90:94:ed:e2:55:d9:
ca:7d:49:6c:f5:cf:3d:aa:0b:f1:4e:c0:7a:7d:ae:
9b:7f:64:6d:fe:12:2a:52:6b:11:ec:a5:48:35:e5:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:B0:62:ED:93:33:87:75:0E:1E:DA:A4:CC:95:45:CA:CB:8D:93
X509v3 Authority Key Identifier:
keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:27:25:60:41:3f:a0:f6:05:94:ba:bc:6d:a1:26:87:e5:65:
58:19:10:9e:a5:87:07:81:ee:64:5c:c3:8b:51:7b:3f:2d:28:
4e:ab:82:99:a4:4d:91:a1:38:e2:4a:ab:ce:68:48:d3:5a:4a:
73:01:c8:04:e8:5b:49:00:db:f7:c3:f2:55:22:12:0a:3d:26:
fb:d6:4d:d8:bc:3b:8f:af:50:d9:39:dd:ff:e1:69:c7:47:4f:
6d:13:c5:d1:70:3d:d0:7b:0b:d8:15:aa:56:31:43:32:b1:8c:
96:89:65:62:fa:65:7c:1b:61:41:22:0b:d6:83:2f:4f:9c:e7:
a1:b6:55:68:3d:f1:11:c7:57:82:82:b3:c9:45:07:26:40:60:
f6:35:76:1f:23:2b:fd:1c:c0:e9:98:bc:67:ba:bd:83:ca:55:
87:5f:85:ea:83:4a:13:07:be:18:aa:da:c5:1f:be:04:b7:70:
82:aa:62:b8:72:5c:07:f2:98:a8:ae:fe:5b:c7:26:8d:3e:ef:
32:94:27:32:8d:61:d8:f7:46:8d:cc:26:ac:2d:51:fa:4d:52:
c7:b6:51:1f:c9:d6:eb:d0:93:55:9c:cb:3e:d2:e6:c0:02:86:
ac:e2:e1:42:4c:30:47:66:e7:f5:2c:31:d0:6e:0c:d9:d1:e7:
99:24:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:50 2026 by rpki-client