Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: KNga2ooVQbkCwKOO+8OIVG3A3balmnBwXS9d3rj2j4Y=
Subject key identifier: 9E:18:9A:C7:7B:17:B2:26:36:9F:96:57:E3:20:2C:34:9D:A9:B4:00
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019D2C2A3FC7C455B5295011C0C528483039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 22:00:59 +0000
Manifest this update: Thu 26 Mar 2026 22:00:59 +0000
Manifest next update: Fri 27 Mar 2026 22:00:59 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: +gRjA72PDW+dXfCPr6IpgLFtRvCnTL/zxbleZ10PAas=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:3f:c7:c4:55:b5:29:50:11:c0:c5:28:48:30:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Mar 26 22:00:59 2026 GMT
Not After : Mar 27 22:00:59 2026 GMT
Subject: CN=9e189ac77b17b226369f9657e3202c349da9b400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:03:48:3f:61:0e:dd:74:52:b6:60:55:c4:
b7:51:f3:8f:56:e5:91:01:2f:91:6a:8c:0e:37:f7:
d2:ca:19:4f:e1:c0:6e:80:10:29:e4:f1:fb:db:e5:
de:e6:f1:3e:b2:40:3b:7b:8f:5a:d4:74:82:0a:37:
98:71:a6:08:0a:f8:46:5d:47:f3:8e:14:15:5a:d9:
9b:b6:ec:f2:3d:80:65:9f:64:a4:83:29:32:fb:6b:
a9:58:79:ae:a6:fd:0b:cc:4b:0a:3e:33:d8:e3:be:
12:96:2a:a2:73:88:d2:a5:c2:ff:f4:c4:7b:9b:86:
c2:f2:ac:42:79:00:0d:f7:65:6a:fb:42:7c:22:e0:
c7:51:68:59:75:49:a2:6a:58:00:b9:eb:01:6f:38:
09:83:4e:73:89:1c:99:b9:da:ad:0a:af:66:ed:f4:
10:41:78:85:e3:66:d5:9e:73:f3:fc:c3:ac:8e:b6:
64:10:ef:cd:76:40:b5:b1:26:23:f9:87:c8:0f:cd:
b3:b9:fc:71:a4:60:64:41:aa:bb:fc:8e:97:d3:c4:
6b:13:51:33:36:bf:40:9a:48:04:d1:ab:9f:3c:a6:
0f:f8:13:71:a1:62:3f:5f:d6:e8:c1:ad:f9:e1:50:
35:d2:83:db:76:f9:f8:fc:ce:ca:ed:49:c8:81:2b:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:9A:C7:7B:17:B2:26:36:9F:96:57:E3:20:2C:34:9D:A9:B4:00
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3b:bf:62:74:dd:33:e6:9e:dd:1e:cf:c3:89:72:ea:74:ed:
f2:bf:d4:0b:ab:44:13:c8:0b:07:c6:db:df:6a:ae:b3:27:53:
9c:bc:a4:ac:ce:c0:e2:1d:4a:52:16:eb:4a:f5:f0:86:e8:ab:
37:a8:65:70:fd:90:0a:76:32:a5:63:02:3f:29:b5:e4:60:81:
ab:4a:91:68:c6:c8:fc:89:0c:46:90:6a:1e:f6:eb:ae:75:63:
52:a6:fe:c9:f7:c3:46:7f:b3:76:b4:65:ee:3c:30:8a:9a:e0:
f0:ee:e9:55:cc:39:38:d4:62:11:a0:8d:3c:38:67:3e:bb:0d:
82:40:1e:6a:4a:4b:a3:a8:e9:3f:1e:b3:7d:f8:59:ca:73:f5:
fc:31:5e:a2:65:3d:12:a4:8c:07:1b:e5:ad:03:49:70:65:24:
62:75:dd:a3:65:a3:62:ba:69:82:18:b4:e2:47:e0:6a:8a:0e:
cb:9e:52:53:31:5d:e9:89:df:df:30:b6:cc:b6:d1:cc:36:70:
d2:6b:0e:ed:1e:30:89:d6:2a:8b:fb:00:e2:4f:8a:16:57:3c:
8c:b1:c3:f9:e1:eb:54:15:80:6c:ca:85:b8:8b:83:b3:55:2f:
aa:ab:5f:2c:95:6c:b6:f3:20:8f:d3:ab:41:77:4a:85:0c:09:
c4:f0:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:16 2026 by rpki-client